f4632a64b4edd39c4d22b8573bc8d40d18c1b25542ad1dbc94967d8ec363d50e

Sharing

Copy URL Twitter E-mail

General

Target

f4632a64b4edd39c4d22b8573bc8d40d18c1b25542ad1dbc94967d8ec363d50e
Size

46KB
MD5

6067738f47584870c4b947047e103de5
SHA1

54df2e1d7a9a2e243fb985c78450d9b3d7715a21
SHA256

f4632a64b4edd39c4d22b8573bc8d40d18c1b25542ad1dbc94967d8ec363d50e
SHA512

d5e3fe973066790080bbf1a28cd63ad923b2509d79b2b258a2ebfedcbb3edcbe93e4a73ecdd36d91e9069835ced67a4c827310eab345e3adfd73da03eacdb16b
SSDEEP

768:KFVWiKyX1A7ug7guxIS9/M0yO3HPrJ9h4PiYe:7yFaUuxCuzJLSiYe

Score

N/A

Malware Config

Signatures

Files

f4632a64b4edd39c4d22b8573bc8d40d18c1b25542ad1dbc94967d8ec363d50e
.exe windows x86

ba9b826b610ea2e2dc4e47261a6c5e6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcessId
CreateEventW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetEvent
SetUnhandledExceptionFilter
LocalFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
CreateThread
SetLastError
TerminateThread
SetConsoleCtrlHandler
QueueUserAPC
OpenThread
SleepEx
lstrcmpiW
InterlockedIncrement
GetCurrentThreadId
IsDebuggerPresent
CloseHandle
CreateMutexW
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
WaitForSingleObject
GetLastError
UnhandledExceptionFilter

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
_purecall
free
wcscmp
malloc
__wgetmainargs
wcsncmp
_c_exit
_exit
_XcptFilter
_cexit
__winitenv
exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_except_handler3
_controlfp

advapi32

RegisterTraceGuidsW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
UnregisterTraceGuids
LookupAccountSidW
CreateWellKnownSid
TraceMessage

setupapi

SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

ntdll

DbgBreakPoint

rpcrt4

RpcServerUnregisterIf
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcStringFreeW
RpcServerListen
RpcAsyncCompleteCall
RpcServerInqCallAttributesW
NdrServerCall2
NdrAsyncServerCall
RpcServerRegisterIfEx
RpcServerUseProtseqEpW

secur32

GetUserNameExW

user32

LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
SetWindowLongW
DestroyWindow
GetMessageW
TranslateMessage
DispatchMessageW
GetWindowLongW
DefWindowProcW
PostQuitMessage
PostMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW

Exports

Exports

WdfDeviceCreate
WdfDeviceGetDeviceName
WdfDeviceGetIoTarget
WdfDeviceInitSetFileEventCallbacks
WdfDeviceRegisterIoCallbacks
WdfDriverCreate
WdfFdoInitSetEventCallbacks
WdfFdoInitSetFilter
WdfIoQueueGetDevice
WdfIoTargetFormatIoctlRequest
WdfMemoryBufferCreate
WdfObjectDereferenceActual
WdfObjectReferenceActual
WdfRequestComplete
WdfRequestCompleteWithInformation
WdfRequestCreate
WdfRequestGetParameters
WdfRequestRetrieveBuffer
WdfRequestSend
WdfRequestSetCompletionRoutine

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��J
Size: 224KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ba9b826b610ea2e2dc4e47261a6c5e6d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

setupapi

ntdll

rpcrt4

secur32

user32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 512B - Virtual size: 572B

.rsrc Size: 1KB - Virtual size: 1KB

��J Size: 224KB - Virtual size: 228KB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 512B - Virtual size: 572B

.rsrc
Size: 1KB - Virtual size: 1KB

��J
Size: 224KB - Virtual size: 228KB