appidtel[.]exe

General

Target

appidtel.exe
Size

20KB
MD5

f9c9351c208c91392b56359e9bd4815c
SHA1

d1d00611e1f2e790e9f872ce0a7874604ce084d9
SHA256

bcca8841f81bb18ad146128dd42583df5e10b9031ea53697038bc7f6ce874c9b
SHA512

f28691817252d1b5afda8cc1ae8f700186998cfe88d68dfe0fee93fb4b85ff71a26a7964742c42fed7e170c1f72ff2291f899a00480487538aaeb6163994b3a9
SSDEEP

384:rlRT3esKmxpPJkkRwZycsNdFy3kEk/sQDTYgr214RW5WsdsW:RJOlUpx0ZmNdFEQDTS140x

Score

1^/10

Malware Config

Signatures

Files

appidtel.exe
.exe windows x86

45b4e0f623405c276e4da9f4816c57f0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_cexit
__p__fmode
__setusermatherr
_initterm
_lock
_exit
__dllonexit
_onexit
_except_handler4_common
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_controlfp
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
memmove
memcpy
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_callnewh
malloc
_wtoi64
_purecall
??3@YAXPAX@Z
_wcsicmp
_unlock
__CxxFrameHandler3

ntdll

NtQuerySystemTime

advapi32

RegCloseKey
OpenServiceW
ChangeServiceConfigW
RegCreateKeyW
StartServiceW
RegSetValueExW
ControlService
OpenSCManagerW
CloseServiceHandle

kernel32

Sleep
SetUnhandledExceptionFilter
GetLastError
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
GetCurrentProcess
TerminateProcess
UnhandledExceptionFilter

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45b4e0f623405c276e4da9f4816c57f0

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

ntdll

advapi32

kernel32

Sections

.text Size: 14KB - Virtual size: 13KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 14KB - Virtual size: 13KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB