f2546dc68e6d970b444ad11b6fb5dbc400e37a053ab05c0f7491e86c46801fcf

General

Target

f2546dc68e6d970b444ad11b6fb5dbc400e37a053ab05c0f7491e86c46801fcf
Size

23KB
MD5

de5a17005b96f2546c29f0e30ed9eda5
SHA1

822b10ec76a86d3dec471d68334a178e8f94bd27
SHA256

f2546dc68e6d970b444ad11b6fb5dbc400e37a053ab05c0f7491e86c46801fcf
SHA512

527ff1f8f384b17c11a03f28505d482bee062bca019b6f93b0654adf4ada0ab446ae8ea1cb105aea2f1832f85a7f9294004c91b9f633ed2df3350bb816fb5788
SSDEEP

384:GHV8zT/C9tAEeKyXqVRzBFFFCmpRFEA9KBx0aSGPZJX6gyHF8FFFKSIrd9Vb0nl7:mCmWfeRCmJEA9KBx0aSGX6gyBd9VbvbC

Score

N/A

Malware Config

Signatures

Files

f2546dc68e6d970b444ad11b6fb5dbc400e37a053ab05c0f7491e86c46801fcf
.exe windows x86

7a3743b1f20447304b1666f1dc4f3c35

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegSetValueExW
RegCreateKeyW
RegOpenKeyA
CloseServiceHandle
StartServiceW
OpenServiceW
OpenSCManagerA

kernel32

GetProcAddress
GetModuleHandleW
lstrcatW
lstrlenW
GetLastError
HeapAlloc
GetProcessHeap
HeapFree
FreeResource
LockResource
SizeofResource
LoadResource
FindResourceW
CloseHandle
WriteFile
CreateFileW
ExitProcess
GetEnvironmentVariableW
lstrcpyW
GetShortPathNameW
GetModuleFileNameW
SetThreadPriority
GetCurrentThread
SetPriorityClass
GetCurrentProcess
GetTickCount
ResumeThread
SetThreadContext
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
ReadProcessMemory
GetThreadContext
CreateProcessW
DeleteFileW
DeviceIoControl
CreateFileA
GetVersionExW
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

shell32

ShellExecuteW

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a3743b1f20447304b1666f1dc4f3c35

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

shell32

Sections

.text Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 32B

.rsrc Size: 17KB - Virtual size: 16KB

.text
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 32B

.rsrc
Size: 17KB - Virtual size: 16KB