633d630c57dc4b36f8d280de5d2597ce5ba00bbaf57cc3db97b984d220a67d1d

Sharing

Copy URL Twitter E-mail

General

Target

633d630c57dc4b36f8d280de5d2597ce5ba00bbaf57cc3db97b984d220a67d1d
Size

77KB
MD5

410562703405c62f361552e5c80cf2a0
SHA1

f95d873ae513675f9b88a3a42c814d1fb29413f3
SHA256

633d630c57dc4b36f8d280de5d2597ce5ba00bbaf57cc3db97b984d220a67d1d
SHA512

a54468d33b7fda9c4ed0ce2e6c1abad081d9d14bd372eb92519a4760902253155260fce8d380df4128177d6947455378480d141e195e4d716375ad13e54f286d
SSDEEP

1536:J+ZE714XnmhgXzDuFRtv4xHeW9ZGCq2iW7z:B714Xm6Xz6Rv4xHeWHGCH

Score

N/A

Malware Config

Signatures

Files

633d630c57dc4b36f8d280de5d2597ce5ba00bbaf57cc3db97b984d220a67d1d
.exe windows x86

4af94433e78f237c2f5ab25f8414780a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcscmp
wprintf
wcsrchr
_wcsicmp
_wcsnicmp
iswalpha
towupper
towlower
wcschr
??2@YAPAXI@Z
??3@YAXPAX@Z
_iob
fputs
fputws

advapi32

RegDeleteValueW
LookupPrivilegeValueW
OpenProcessToken
RegQueryValueExW
RegCloseKey
RegSetValueExW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
AdjustTokenPrivileges

kernel32

GetLastError
GetCurrentProcess
lstrlenW
FormatMessageW
LocalFree
lstrcpyW
GetDateFormatW
FileTimeToSystemTime
lstrcpynW
GetProcAddress
FreeLibrary
LoadLibraryW
GetFileAttributesW
GetFullPathNameW
CloseHandle

setupapi

SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoW
SetupDiOpenDevRegKey
SetupDiGetDriverInfoDetailW
SetupDiDestroyDriverInfoList
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupCloseFileQueue
SetupScanFileQueueW
SetupDiCallClassInstaller
SetupOpenFileQueue
SetupDiSetSelectedDriverW
SetupDiGetDriverInstallParamsW
SetupDiOpenClassRegKeyExW
SetupDiGetClassDescriptionExW
SetupDiClassNameFromGuidExW
SetupDiBuildClassInfoListExW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiGetINFClassW
CM_Disconnect_Machine
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExW
CM_Connect_MachineW
CM_Free_Log_Conf_Handle
CM_Get_Next_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Res_Des_Data_Ex
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_Device_ID_ExW
SetupDiEnumDeviceInfo
SetupDiGetDeviceInfoListDetailW
SetupDiOpenDeviceInfoW
SetupDiCreateDeviceInfoListExW
SetupDiGetClassDevsExW
SetupDiClassGuidsFromNameExW
CM_Get_DevNode_Status_Ex
CM_Get_First_Log_Conf_Ex

user32

ExitWindowsEx
CharPrevW
CharNextW
LoadStringW

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

� ��u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4af94433e78f237c2f5ab25f8414780a

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

setupapi

user32

Sections

.text Size: 26KB - Virtual size: 25KB

.data Size: 512B - Virtual size: 420B

.rsrc Size: 33KB - Virtual size: 32KB

� ��u� Size: 16KB - Virtual size: 20KB

.text
Size: 26KB - Virtual size: 25KB

.data
Size: 512B - Virtual size: 420B

.rsrc
Size: 33KB - Virtual size: 32KB

� ��u�
Size: 16KB - Virtual size: 20KB