25587eef862d057ce2176016d319f6d0a9d5f166ae2e663f88ed5a699d0a1479

General

Target

25587eef862d057ce2176016d319f6d0a9d5f166ae2e663f88ed5a699d0a1479
Size

179KB
MD5

66202afb409bc2d37dad096191d9129f
SHA1

e625ae9666085e6db1d0b18d7d6c9e379f37b66a
SHA256

25587eef862d057ce2176016d319f6d0a9d5f166ae2e663f88ed5a699d0a1479
SHA512

69a63d679fa6ef01da574c354f4c98525db1c48ea7f57bce3fe63e595ebac038169b994cf6ca54d5adee0cac11d44c1c05b2e9755d27b728b79e9da27c7120aa
SSDEEP

3072:S5fbSPnR+3nVdbbfzCfVa4y1MG6YZpBsCcSRdPqiqfOEkX4vjvgtSwH:0cKHfG5y1qYLSm9BIMJt7

Score

N/A

Malware Config

Signatures

Files

25587eef862d057ce2176016d319f6d0a9d5f166ae2e663f88ed5a699d0a1479
.exe windows x86

58512c3f99cbe6412d68f93a19a12f77

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

gdi32

DeleteObject
GetTextMetricsA
GetDeviceCaps
SelectObject
GetTextExtentPointA
CreateFontIndirectA

msimg32

AlphaBlend
TransparentBlt

kernel32

TlsGetValue
GetCPInfoExW
GetEnvironmentStringsW
GetTickCount
InitializeCriticalSection
TlsSetValue
GetStdHandle
GetACP
GetStartupInfoA
GetOEMCP
UnhandledExceptionFilter
GetVersionExA
MultiByteToWideChar
InterlockedExchange
EnumResourceTypesA
GetEnvironmentStrings
QueryPerformanceCounter
InterlockedIncrement
HeapSize
GetFileType
EnterCriticalSection
FreeEnvironmentStringsW
SetHandleCount
GetLastError
GetCPInfo
WriteFile
DeleteCriticalSection
GetLocaleInfoA
GetComputerNameW
FreeEnvironmentStringsA
GetThreadLocale
RaiseException
LeaveCriticalSection
WideCharToMultiByte
lstrlenW
GetCurrentProcessId

newdev

UpdateDriverForPlugAndPlayDevicesW

ole32

CoGetMalloc
CoCreateInstance
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoTaskMemRealloc

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tls
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 252KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58512c3f99cbe6412d68f93a19a12f77

Headers

File Characteristics

Imports

shell32

gdi32

msimg32

kernel32

newdev

ole32

Sections

.text Size: 105KB - Virtual size: 105KB

.tls Size: 2KB - Virtual size: 1KB

.data Size: 69KB - Virtual size: 69KB

.reloc Size: 1024B - Virtual size: 252KB

.text
Size: 105KB - Virtual size: 105KB

.tls
Size: 2KB - Virtual size: 1KB

.data
Size: 69KB - Virtual size: 69KB

.reloc
Size: 1024B - Virtual size: 252KB