d71e3633e115612543f4f19f98d9ecff6f52affaee9cd857c7660ecd505dbe2c

Sharing

Copy URL Twitter E-mail

General

Target

d71e3633e115612543f4f19f98d9ecff6f52affaee9cd857c7660ecd505dbe2c
Size

163KB
MD5

24f2fa1d89cffc9f2e0a9c3280376a31
SHA1

35401d03801662d5154123455a6ca60785b0330f
SHA256

d71e3633e115612543f4f19f98d9ecff6f52affaee9cd857c7660ecd505dbe2c
SHA512

c408dd107e52d8f77e96d1f6d9b6ce0102b02b9741366a85756e772c6b284f940ccfbdd008ddca9fa784f1d56b2c9da7e3e709ee5439c258e0463dd80211a735
SSDEEP

3072:E37EgUP6m0XUIUA3WLJs/Uje30MzO7QsZ/uthwBt3Dv2GbMIFX:E3gJP6rUwWLJs/930DhZvvEIF

Score

N/A

Malware Config

Signatures

Files

d71e3633e115612543f4f19f98d9ecff6f52affaee9cd857c7660ecd505dbe2c
.exe windows x86

111b9b69563d1272fd9757b140e9ece3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupGetStringFieldW
SetupGetFieldCount
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDeleteDeviceInfo
CM_Get_Device_IDW
CM_Get_DevNode_Status

oleaut32

VariantInit
VariantCopy
VariantClear
VariantChangeType
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SafeArrayUnlock
SafeArrayLock
SafeArrayGetVartype
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayCreate
SafeArrayCopy
LoadTypeLi
LoadRegTypeLi

kernel32

lstrlenW
WaitForSingleObject
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetEnvironmentVariableA
RtlUnwind
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
CloseHandle
CompareStringA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsW
GetFileAttributesW
GetFileSizeEx
GetFileType
GetGeoInfoW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
MultiByteToWideChar
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadResource
LockResource
MoveFileW
GetStringTypeA

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenCurrentUser
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
LsaNtStatusToWinError

ole32

CoCreateInstance

shlwapi

PathFindFileNameW

shell32

SHOpenFolderAndSelectItems
ShellExecuteW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

111b9b69563d1272fd9757b140e9ece3

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

oleaut32

kernel32

advapi32

ole32

shlwapi

shell32

version

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 96KB - Virtual size: 96KB

.data Size: 13KB - Virtual size: 15KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 96KB - Virtual size: 96KB

.data
Size: 13KB - Virtual size: 15KB

.rsrc
Size: 14KB - Virtual size: 13KB