98ce134c84960c388eee191be488b90cdf3758a6e2ca124df229479f502666e1

Sharing

Copy URL Twitter E-mail

General

Target

98ce134c84960c388eee191be488b90cdf3758a6e2ca124df229479f502666e1
Size

144KB
MD5

6be16806c3bccdf2de71b7a99c5f4a20
SHA1

3645e57b2469023ad79df93e1661fc69e15e7aa3
SHA256

98ce134c84960c388eee191be488b90cdf3758a6e2ca124df229479f502666e1
SHA512

abaa664bd552ce685e7caf2064219c03315908434327a45658fc20b8315254f9b78a0115d46a659b91882929632dbc6f6dc357bb4e2708759756bb8bce5740a8
SSDEEP

3072:t09fISCAYTLmOzLGKiwiiDXcaSZbZauB2gbiywJvUJR+Sm:tCTCAY3mOli5agbEuENK/+Sm

Score

N/A

Malware Config

Signatures

Files

98ce134c84960c388eee191be488b90cdf3758a6e2ca124df229479f502666e1
.exe windows x86

dc3d6531ea02ce314e4a282ed462cf25

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
WritePrivateProfileStringA
GetShortPathNameA
CreateFileA
DeleteFileA
SetFileAttributesA
GetVersionExA
MultiByteToWideChar
SetLastError
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
InterlockedDecrement
InterlockedIncrement
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
GetWindowsDirectoryA
TlsAlloc
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
LoadLibraryA
GetLocaleInfoA
SetFilePointer
SetStdHandle
ReadFile
FlushFileBuffers
GetLocaleInfoW
GetModuleFileNameA
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
CreateMutexA
GetLastError
TlsSetValue
CloseHandle

user32

EndDialog
MessageBoxA
DialogBoxParamA
SetDlgItemTextA
SetWindowTextA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegEnumKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey

setupapi

SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
SetupDiGetDeviceInstallParamsA
SetupOpenInfFileA
SetupFindFirstLineA
SetupCloseInfFile
SetupFindNextLine
SetupGetStringFieldA
SetupPromptReboot
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiOpenClassRegKeyExA

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

dc3d6531ea02ce314e4a282ed462cf25

Headers

File Characteristics

Imports

kernel32

user32

advapi32

setupapi

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 72KB - Virtual size: 72KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 72KB - Virtual size: 72KB