750f253f55a72570ec9b171c65153cc6bb5fde2b3f78bda5afe9483f2d9092ab

General

Target

750f253f55a72570ec9b171c65153cc6bb5fde2b3f78bda5afe9483f2d9092ab
Size

209KB
MD5

681c8e7469497e3ce78b21d50302d0d7
SHA1

7a9f6b126c1596295b57cd1596377f2270863223
SHA256

750f253f55a72570ec9b171c65153cc6bb5fde2b3f78bda5afe9483f2d9092ab
SHA512

2860268754dce66cf1af2a40c1b79053c7fc07267bdfbe65fa685b1fb61dce600ad3488df117db3cf81701d3078428cff0c68206363ed669eeabdab59e763d6f
SSDEEP

3072:OiFRf6xBN/9S4YsIxqVAmDzNsyhNrlZPITUNya9Uyg5bL1E31Qa8w7vOuR1UQOE1:fKxrEonRbjrllIT5mqQ31JnRu4

Score

N/A

Malware Config

Signatures

Files

750f253f55a72570ec9b171c65153cc6bb5fde2b3f78bda5afe9483f2d9092ab
.exe windows x86

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
CharNextA

pdh

PdhAdd009CounterA
PdhBrowseCountersA
PdhAddCounterW
PdhAddCounterA
PdhBindInputDataSourceA
PdhBindInputDataSourceW

kernel32

SetUnhandledExceptionFilter
GlobalMemoryStatus
LockResource
DeviceIoControl
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
SystemTimeToFileTime
FreeResource
CreateFileA
CloseHandle
lstrcpyA
GetEnvironmentStringsA
QueryDosDeviceA
LoadLibraryW
lstrlenA
lstrcmpA
LoadResource
GetLocalTime
SetLastError
GetVolumeInformationA
HeapFree
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleW
FindResourceA
GetProcessHeap

advapi32

RegOpenKeyW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

osuninst

ProvideUiAlerts
IsUninstallImageValid
RemoveUninstallImage
GetUninstallImageSize

pautoenr

CertAutoRemove
CertAutoEnrollment

panmap

DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

Imports

user32

pdh

kernel32

advapi32

osuninst

pautoenr

panmap

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 49KB - Virtual size: 6.1MB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 49KB - Virtual size: 6.1MB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 2KB - Virtual size: 1KB