9993c86cb21433f61287e62e937e7a4bda5905d19ef690e223baf5928752dc80

General

Target

9993c86cb21433f61287e62e937e7a4bda5905d19ef690e223baf5928752dc80
Size

173KB
MD5

5b4502cc808d9e09be93c9a4eadeb607
SHA1

7972bf915534d9725d2f74358b51fb4d8259a85f
SHA256

9993c86cb21433f61287e62e937e7a4bda5905d19ef690e223baf5928752dc80
SHA512

59525bb89214d53e18149453d7f50d905f695035d0829d7d5f8efc1841b4bdd08b18a9cb21cea6a577886be006e613e68e8396c40199ed0f595a25b7b2cd2663
SSDEEP

3072:Lq3B4qX+1Hw3+42f4GMriXhlDCGs9gOUlhDRLXkE8eK2OmfYq6parKM:LgNAH4gXrFjOUlhDFXk12OVq64

Score

N/A

Malware Config

Signatures

Files

9993c86cb21433f61287e62e937e7a4bda5905d19ef690e223baf5928752dc80
.exe windows x86

8fc56a6fb81c9c5fe8bbedf4f42ee1cc

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

UnmapViewOfFile
IsWow64Process
OpenProcess
UnhandledExceptionFilter
FindAtomW
GetFileSizeEx
LoadLibraryW
QueryPerformanceCounter
MapViewOfFile
GetSystemTimeAsFileTime
GetLogicalDriveStringsW
Sleep
WaitForSingleObject
SetFileAttributesW
SetUnhandledExceptionFilter
EnumResourceLanguagesW
InterlockedCompareExchange
CreateFileMappingW
EncodePointer
FindClose
GetConsoleCursorMode
EnterCriticalSection
QueryDosDeviceW
FindFirstFileW
GetTickCount
ReleaseMutex
FindNextFileW
CreateMutexW

advapi32

RegCreateKeyExW
RegSetValueExW
DecryptFileW
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
EncryptFileW
RegEnumKeyW
RegCloseKey

shlwapi

SHRegGetValueW
PathSkipRootW
StrDupW
PathIsUNCW
PathGetArgsW
PathFindFileNameW

setupapi

CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 92KB - Virtual size: 484KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fc56a6fb81c9c5fe8bbedf4f42ee1cc

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

setupapi

Sections

.text Size: 92KB - Virtual size: 484KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 76KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 484KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 76KB

.rsrc
Size: 1024B - Virtual size: 4KB