6a9801153e393a533fd6b3f209ab5217000bc4fcf4dbcc289886639b54a75608

Sharing

Copy URL Twitter E-mail

General

Target

6a9801153e393a533fd6b3f209ab5217000bc4fcf4dbcc289886639b54a75608
Size

498KB
MD5

74c1caea313de970b6ce579b13184710
SHA1

9319c82c0da4e695e1eb2a926a1ad4cdaf122a1b
SHA256

6a9801153e393a533fd6b3f209ab5217000bc4fcf4dbcc289886639b54a75608
SHA512

b51ae9798f8819bb2f313bd44a70ff55d25779809b25ba7bc9f7d30665a89acb75fb5022ab3ec947ce41482d17942cb0df2f207a2c4dfaaac4dc0994d160483a
SSDEEP

12288:hWo1BOt/igdfEQc/dL+Kf0biMFERe7ZzkQeelasww93sQ:rLgEQG+Kf2DlaS

Score

N/A

Malware Config

Signatures

Files

6a9801153e393a533fd6b3f209ab5217000bc4fcf4dbcc289886639b54a75608
.exe windows x86

7207fd2c204e01e96379e7745d08e3d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Hardware_Profile_Info_ExW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiDestroyDeviceInfoList
SetupDiDeleteDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiCallClassInstaller
SetupDiGetClassDevsExW
CM_Get_Device_ID_ExW
SetupDiChangeState
SetupDiSetClassInstallParamsW
CM_Get_HW_Prof_Flags_ExW

ole32

CoUninitialize
CoTaskMemFree
CoCreateInstance
CoInitialize

kernel32

GetTickCount
ExpandEnvironmentStringsW
GetLocaleInfoW
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcpyW
FreeLibrary
lstrcmpiW
LocalFree
GetSystemDirectoryW
GlobalMemoryStatusEx
LoadLibraryA
GetModuleFileNameW
LocalAlloc
GetWindowsDirectoryW
FormatMessageW
lstrcpynW
GetProcAddress
GetUserDefaultLCID
GetSystemDefaultLangID
GetSystemInfo
GetCurrentProcessId
QueryPerformanceCounter
GetCurrentProcess
CloseHandle
GetVersionExW
lstrlenW
lstrcatW
GetDiskFreeSpaceW
GetLastError
SetLastError

advapi32

RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
AdjustTokenPrivileges
RegDeleteKeyW
CloseServiceHandle
OpenSCManagerW
RegCloseKey
RegEnumKeyExW
RegEnumValueW
ChangeServiceConfigW
OpenServiceW
UnlockServiceDatabase
GetTokenInformation
RegDeleteValueW
LockServiceDatabase
OpenProcessToken
ControlService
QueryServiceStatus
RegQueryValueExW
StartServiceW

user32

GetDlgItemInt
GetParent
SetTimer
MessageBoxW
CharNextW
LoadImageW
LoadIconW
InvalidateRect
SetWindowPos
DestroyWindow
BringWindowToTop
EnableWindow
CharPrevW
FindWindowW
RegisterDeviceNotificationW
SetWindowLongW
DialogBoxParamW
CallWindowProcW
CheckRadioButton
GetDlgItemTextW
GetWindowLongW
LoadStringW
SetDlgItemInt
SetDlgItemTextW
ExitWindowsEx
KillTimer
EndDialog
SetWindowTextW
SendMessageW
GetIconInfo
SetFocus
GetDlgItem
SystemParametersInfoW
wsprintfW
WinHelpW
SendDlgItemMessageW
GetWindowTextW
UnregisterDeviceNotification
RegisterWindowMessageW
ShowWindow
CheckDlgButton
IsDlgButtonChecked

msvcrt

wcscat
wcscpy
_wcsicmp
_itow
wcscmp
swscanf
wcslen
_except_handler3
wcschr

powrprof

GetPwrDiskSpindownRange
GetActivePwrScheme
DeletePwrScheme
ReadGlobalPwrPolicy
WriteGlobalPwrPolicy
SetActivePwrScheme
WritePwrScheme
ValidatePowerPolicies
CanUserWritePwrScheme
EnumPwrSchemes
CallNtPowerInformation
IsAdminOverrideActive
GetCurrentPowerPolicies
GetPwrCapabilities

gdi32

DeleteObject
GetObjectW

ntdll

RtlNtStatusToDosError
NtPowerInformation

shell32

ShellExecuteW

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 431KB - Virtual size: 431KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7207fd2c204e01e96379e7745d08e3d5

Headers

File Characteristics

Imports

setupapi

ole32

kernel32

advapi32

user32

msvcrt

powrprof

gdi32

ntdll

shell32

Sections

.text Size: 31KB - Virtual size: 31KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 10KB - Virtual size: 9KB

.rsrc Size: 431KB - Virtual size: 431KB

.text
Size: 31KB - Virtual size: 31KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 10KB - Virtual size: 9KB

.rsrc
Size: 431KB - Virtual size: 431KB