a4bef220a86fa002a01b82eeb7c1a34f83f19df3effa968cd301c4750399b321

General

Target

a4bef220a86fa002a01b82eeb7c1a34f83f19df3effa968cd301c4750399b321
Size

56KB
MD5

485cdcf9cc91df4e28e1ec3a4a25ce50
SHA1

3dc3878085ae8d89b620664e0cd10b6e05ca7ada
SHA256

a4bef220a86fa002a01b82eeb7c1a34f83f19df3effa968cd301c4750399b321
SHA512

ff8cc59e788fd52b29c527718734ba7c402ec82873631f4c2c1ea51d40fa5eddb2336c0cd973b90c1231f4fb39099536f5ecbd0da740e043f2628d2e625ceb38
SSDEEP

1536:Vw4ZkiBE8WUZ3jt/X+JsgIgxCBMiJ/Riq/CY9Fz:XLE+Tt/X+RICCv/Rx9p

Score

N/A

Malware Config

Signatures

Files

a4bef220a86fa002a01b82eeb7c1a34f83f19df3effa968cd301c4750399b321
.exe windows x86

47c0cfa7714ba6850146483083b320d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegOpenKeyExA
RegCloseKey

kernel32

CloseHandle
DeviceIoControl
CreateFileA
GetLastError
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
LoadLibraryA
Sleep
GetACP
GetOEMCP
GetCPInfo
VirtualAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
VirtualQuery
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
GetLocaleInfoA
VirtualProtect
GetSystemInfo
FlushFileBuffers

user32

MessageBoxA

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

47c0cfa7714ba6850146483083b320d4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

setupapi

Sections

.text Size: 25KB - Virtual size: 24KB

.data Size: 2KB - Virtual size: 8KB

.pdata Size: 28KB - Virtual size: 28KB

.text
Size: 25KB - Virtual size: 24KB

.data
Size: 2KB - Virtual size: 8KB

.pdata
Size: 28KB - Virtual size: 28KB