e12ddcc5cdfb07baafeaf78ab5ff59f8dd098c3ecdeb7349afb13d0f94b6940c

General

Target

e12ddcc5cdfb07baafeaf78ab5ff59f8dd098c3ecdeb7349afb13d0f94b6940c
Size

209KB
MD5

6a4ece2ffec35c2d22e8c4089b789700
SHA1

48f9a157671f8c92e6e56355121a2118cd9933ae
SHA256

e12ddcc5cdfb07baafeaf78ab5ff59f8dd098c3ecdeb7349afb13d0f94b6940c
SHA512

6a43ec5ea290fbf903653b248d65bce70129821a5fb6d1fe26f12dc0ef69a19a00ddc133973c83b27f5df970b7db43788128e94bbadaac6b6eff9c9e77f826eb
SSDEEP

3072:OiFRf6xBN/9S4YsIxqVAmDzNsyhNrlZPITUNya9Uyg5bL1E31Qa8w7vOuR1UQOEV:fKxrEonRbjrllIT5mqQ31JnRuU

Score

N/A

Malware Config

Signatures

Files

e12ddcc5cdfb07baafeaf78ab5ff59f8dd098c3ecdeb7349afb13d0f94b6940c
.exe windows x86

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
CharNextA

pdh

PdhAdd009CounterA
PdhBrowseCountersA
PdhAddCounterW
PdhAddCounterA
PdhBindInputDataSourceA
PdhBindInputDataSourceW

kernel32

SetUnhandledExceptionFilter
GlobalMemoryStatus
LockResource
DeviceIoControl
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
SystemTimeToFileTime
FreeResource
CreateFileA
CloseHandle
lstrcpyA
GetEnvironmentStringsA
QueryDosDeviceA
LoadLibraryW
lstrlenA
lstrcmpA
LoadResource
GetLocalTime
SetLastError
GetVolumeInformationA
HeapFree
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleW
FindResourceA
GetProcessHeap

advapi32

RegOpenKeyW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

osuninst

ProvideUiAlerts
IsUninstallImageValid
RemoveUninstallImage
GetUninstallImageSize

pautoenr

CertAutoRemove
CertAutoEnrollment

panmap

DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

Imports

user32

pdh

kernel32

advapi32

osuninst

pautoenr

panmap

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 49KB - Virtual size: 6.1MB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 49KB - Virtual size: 6.1MB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 2KB - Virtual size: 1KB