5f7da87257c7b142f4c7c31d6e5935426d53175ad61dfbd84e9291877fe7a5ba

Sharing

Copy URL Twitter E-mail

General

Target

5f7da87257c7b142f4c7c31d6e5935426d53175ad61dfbd84e9291877fe7a5ba
Size

800KB
MD5

5471473ee0af942142ea348659287b2e
SHA1

48b7ddccc54a4496fe6043131c3dec6cf37c8379
SHA256

5f7da87257c7b142f4c7c31d6e5935426d53175ad61dfbd84e9291877fe7a5ba
SHA512

709d99134b714e70552a51015998d996c3237451c03087136badfd3f62024fcdaad114caf0dddec338d626bbc392ec04d9ca316d2da2ab5b3b8e8e251c8ea695
SSDEEP

12288:d8SkHDCDTGJeutF1pcVqqLVjO8TQ5KfAIasG+o0eY7YGAZ5l:ykVmOV3O80m/asDodmY9

Score

N/A

Malware Config

Signatures

Files

5f7da87257c7b142f4c7c31d6e5935426d53175ad61dfbd84e9291877fe7a5ba
.exe windows x86

e8e1c9a8bdcceb6c39aa393c0d234263

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Get_Device_ID_Size
CM_Get_Device_IDA
CM_Get_Parent
CM_Get_DevNode_Status
CM_Query_And_Remove_SubTreeW
CM_Setup_DevNode
CMP_WaitNoPendingInstallEvents

setupapi

SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInstallParamsA
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA

rpcrt4

UuidFromStringW

kernel32

CloseHandle
OpenMutexA
GetCommandLineA
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CreateMutexA
SetErrorMode
WaitForSingleObject
CreateEventA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
Sleep
CreateThread
OutputDebugStringA
SetEvent
WaitForMultipleObjects
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcpyA
OpenEventA
TerminateThread
GetExitCodeThread
DeviceIoControl
CreateFileA
GetOverlappedResult
LoadLibraryA
GetTimeZoneInformation
ReadFile
GetFileSize
GetVolumeInformationA
GetTickCount
GetLocalTime
GetSystemTimeAsFileTime
IsDBCSLeadByte
FlushFileBuffers
WriteFile
GetLogicalDrives
GetFileAttributesA
InitializeCriticalSectionAndSpinCount
GetDiskFreeSpaceExA
GetFileAttributesExA
GetLogicalDriveStringsA
CopyFileW
SetFilePointer
CreateFileW
GetModuleFileNameW
DebugBreak
ReleaseSemaphore
CreateSemaphoreA
HeapSetInformation
GlobalFree
GlobalAlloc
GetLocaleInfoW
GetUserDefaultLCID
GetSystemDefaultLangID
HeapFree
GetProcessHeap
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
HeapCreate
VirtualFree
LCMapStringW
LCMapStringA
SetLastError
SetEnvironmentVariableA
TlsFree
TlsSetValue
TlsAlloc
GetModuleHandleW
GetModuleFileNameA
lstrcmpiA
lstrlenA
GetModuleHandleA
InterlockedDecrement
InterlockedIncrement
LoadLibraryW
GetProcAddress
FreeLibrary
VerSetConditionMask
VerifyVersionInfoA
GetLastError
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
TryEnterCriticalSection
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
HeapReAlloc
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapAlloc

user32

LoadStringA
CharNextA
RegisterClassA
CreateWindowExA
PostQuitMessage
RegisterDeviceNotificationA
GetPropA
DefWindowProcA
DestroyWindow
SetPropA
SetTimer
SendMessageA
wsprintfA
GetMessageA
DispatchMessageA
TranslateMessage
MessageBoxA
CharNextW
PostThreadMessageA
CharUpperA
UnregisterDeviceNotification

advapi32

RegDeleteValueA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegQueryInfoKeyA
CloseServiceHandle
RegOpenKeyExW
RegQueryValueExW
OpenThreadToken
OpenProcessToken
GetTokenInformation
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSid
GetLengthSid
CopySid
LockServiceDatabase
ChangeServiceConfig2A
UnlockServiceDatabase
QueryServiceStatusEx
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
ControlService
DeleteService
CreateServiceA
RegEnumKeyExA
SetServiceStatus
RegisterEventSourceA
ReportEventA
DeregisterEventSource
OpenSCManagerA
OpenServiceA
RegDeleteKeyA

ole32

CoTaskMemFree
CoUninitialize
CoTaskMemRealloc
CoInitializeEx
StringFromGUID2
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoSuspendClassObjects
CoInitializeSecurity
CoResumeClassObjects
IIDFromString
CoTaskMemAlloc

oleaut32

UnRegisterTypeLi
RegisterTypeLi
VarUI4FromStr
LoadRegTypeLi
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayCreateVector
VariantClear
LoadTypeLi
SysAllocString
SysFreeString
SysStringLen

Sections

.text
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 386KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e8e1c9a8bdcceb6c39aa393c0d234263

Headers

DLL Characteristics

File Characteristics

Imports

cfgmgr32

setupapi

version

rpcrt4

kernel32

user32

advapi32

ole32

oleaut32

Sections

.text Size: 292KB - Virtual size: 292KB

.rdata Size: 79KB - Virtual size: 78KB

.data Size: 11KB - Virtual size: 19KB

.rsrc Size: 386KB - Virtual size: 386KB

.reloc Size: 29KB - Virtual size: 28KB

.text
Size: 292KB - Virtual size: 292KB

.rdata
Size: 79KB - Virtual size: 78KB

.data
Size: 11KB - Virtual size: 19KB

.rsrc
Size: 386KB - Virtual size: 386KB

.reloc
Size: 29KB - Virtual size: 28KB