SIMPLE0001[.]7z

Sharing

Copy URL

Twitter E-mail

General

Target

SIMPLE0001.7z
Size

10KB
MD5

b3027f685ccfd11515144b5da0edb6ad
SHA1

89a9a796feeaa66e836d522d23d1831db0c592d6
SHA256

b9ffcf9d7f8f7d2a6197eb4a7f9b9a66434434f14a063b72fb6a6a8258870238
SHA512

1d71191573516a35824cc51149d9ace023c45d134193df4967d44a8fb4c0d58a711c90a7f4092de3ee84bd18469648c84c19e35766fb35e1be17897fde6c34a4
SSDEEP

192:PvrKdYcgz+xCigxT6dRgtBfOy1OhYXy9gN9ZAaODnQTd0B39m/Oh6X3fxPn:HUYcMxTtOrhd9gNrAaA39VY3fxP

Score

1^/10

Malware Config

Signatures

Files

SIMPLE0001.7z
.7z

Password: infected
simple.exe
.exe windows x86

Password: infected

e4c7192695c744456fb2081a20ff3d13

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
GetProcAddress
LoadLibraryA
CreateProcessA
LeaveCriticalSection
EnterCriticalSection
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
GetComputerNameA
InitializeCriticalSection
GetACP
CreateDirectoryA
HeapReAlloc
GetDriveTypeA
FileTimeToSystemTime
ReadFile
GetFileSize
TerminateProcess
PeekNamedPipe
CreatePipe
GetFileAttributesA
GetEnvironmentVariableA
GetVersionExA
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
HeapFree
GetProcessHeap
HeapAlloc
WaitForSingleObject
GetLastError
Sleep
GetModuleFileNameA
lstrcpyA
lstrcatA
ExitProcess
CreateFileA
SetFilePointer
TryEnterCriticalSection
WriteFile

user32

wsprintfA
wsprintfW
wvsprintfA

advapi32

StartServiceCtrlDispatcherA
SetServiceStatus
OpenSCManagerA
CreateServiceA
OpenServiceA
CloseServiceHandle
ChangeServiceConfig2A
StartServiceA
QueryServiceStatus
ImpersonateLoggedOnUser
OpenProcessToken
RevertToSelf
RegisterServiceCtrlHandlerA

shell32

SHFileOperationA
ShellExecuteA

shlwapi

SHDeleteKeyA

Exports

Exports

_itoa
atoi
atol
free
isdigit
isspace
malloc
realloc
stricmp

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: infected

Password: infected

e4c7192695c744456fb2081a20ff3d13

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 1KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 4B

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 1KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 4B