xampp_stop[.]exe

General

Target

xampp_stop.exe
Size

116KB
MD5

5dcf1f6a4ded823d97ef3518551e92df
SHA1

23428baa57b84f862f9c52e752a95c2f7cfd884b
SHA256

fb038a3f6029aacb251d4c79fad083865ef2a01efbbd94572ada383dcf6e2f57
SHA512

45dc4980ad35b2a5f4622063037c4d8c6037f65f66d2eb77a791d9dd1a183a777d00b1482cfef3ca54f0df429a13970dff2b8f43ce9ade2ebfb3f651f37acfc6
SSDEEP

1536:H8+MwwiE5FFvn3mcCHJID09q2sYA+TqDlYKvtK9Ls4qQXvqarnP/aiHNdHGx1s7:n8FmdAjDqKvtKls4qQXvvSGuI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
xampp_stop.exe

Files

xampp_stop.exe
.exe windows:4 windows x86 arch:x86

e724401b82f217ea286511080c6576e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEvent
OpenEventA
Sleep
GetModuleFileNameA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
RtlUnwind
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
InitializeCriticalSection
MultiByteToWideChar
CreateFileA
LoadLibraryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
SetEndOfFile
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetFileAttributesA
HeapSize
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e724401b82f217ea286511080c6576e4

Headers

File Characteristics

Imports

kernel32

Sections

.text Size: 60KB - Virtual size: 57KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 60KB - Virtual size: 57KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 32KB - Virtual size: 31KB