b40672640376ffaea6d59e97318a9ca9681d5078418c7f15aa43f3e830ba3649

General

Target

b40672640376ffaea6d59e97318a9ca9681d5078418c7f15aa43f3e830ba3649
Size

76KB
MD5

1663877b4a3701c0cab2c7596d887c90
SHA1

e0c9f3a2f56a91d6c4f4c40df7b2125dcfed5223
SHA256

b40672640376ffaea6d59e97318a9ca9681d5078418c7f15aa43f3e830ba3649
SHA512

121a1cafc36f77f9b937dbc0bc1ab6f224b828b6f1e4ccf9f4884320594180e4493bc004ac12d3b9e1ba8ba3d12adfb110a04803cc9e4bf3f3578fc6610d0fda
SSDEEP

1536:rNej2uFnAt4thxb4ECE7m0xETNWwR97wGNmL5DuSrYQ:JI2wnAt4thN4Ec0xywwTULLoSrv

Score

N/A

Malware Config

Signatures

Files

b40672640376ffaea6d59e97318a9ca9681d5078418c7f15aa43f3e830ba3649
.exe windows x86

daa2ab91789251caf2cde36ee532ea54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrChrA
StrStrA
StrToIntA

user32

PostThreadMessageA
wsprintfA

advapi32

DeleteService
OpenSCManagerA
OpenServiceA
CloseServiceHandle
QueryServiceStatus
ControlService

ole32

CoCreateGuid

msvcrt.dll

__p__fmode
__set_app_type
_except_handler3
_controlfp
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_acmdln
exit
_XcptFilter
_exit
__CxxFrameHandler
memcpy
time
srand
rand
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
__getmainargs

kernel32.dll

SetFilePointer
GetModuleFileNameA
DeleteFileA
GetModuleHandleA
GetStartupInfoA
ReadFile
CreateMutexA
GetLastError
GetFileAttributesExA
ReleaseMutex
lstrcpyA
lstrlenA
Sleep
LoadLibraryA
GetProcAddress
FreeLibrary
CreateFileA
WriteFile
GetSystemDirectoryA
lstrcatA
WaitForSingleObject
CloseHandle
GetFileTime
SetFileTime

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

guocyok
Size: 512B - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

daa2ab91789251caf2cde36ee532ea54

Headers

File Characteristics

Imports

shlwapi

user32

advapi32

ole32

msvcrt.dll

kernel32.dll

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 4KB

guocyok Size: 512B - Virtual size: 40KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 4KB

guocyok
Size: 512B - Virtual size: 40KB