756b5ad8621adebc1080932e5c3de6997faee4ead65ba92e7463285c518ddf0f

Sharing

Copy URL

Twitter E-mail

General

Target

756b5ad8621adebc1080932e5c3de6997faee4ead65ba92e7463285c518ddf0f
Size

543KB
MD5

6e433066d49e1c093a56d1c446dec712
SHA1

76ee59bf6df97310d2601ebf9a4de4212c8f1647
SHA256

756b5ad8621adebc1080932e5c3de6997faee4ead65ba92e7463285c518ddf0f
SHA512

e57c42cfaf5816e7c4300c8541b3809b19b1518f2da44524dce117bbce6299f49c3dfa019e7bacc95171fb3ddebcce986c99ffa2b01ef3f3bc9cb623c0d7424e
SSDEEP

12288:jJr1iT7m2E7Mfmsj/7/Efv5J+2Op9U22oFwB5peMR3uRhpBKya9KQQ127D:jJrUT7mX7Ir45JxOopvpeLv7iFA2

Score

N/A

Malware Config

Signatures

Files

756b5ad8621adebc1080932e5c3de6997faee4ead65ba92e7463285c518ddf0f
.dll windows x86

fbeb95c62886ef4edd8e04ce38bb3b2a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetExitCodeProcess
GetLastError
GetLocalTime
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GetVersionExA
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
FlushFileBuffers
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
ExitProcess
EnterCriticalSection
CreateProcessW
CreateMutexW
CreateFileW
CreateFileA
IsDebuggerPresent
CloseHandle

setupapi

SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupGetStringFieldW
SetupFindNextLine
SetupFindFirstLineW
SetupDiGetSelectedDriverW
SetupCloseInfFile

shell32

SHCreateDirectoryExW

advapi32

RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegSetValueExW
RegCreateKeyExW

shlwapi

PathRemoveFileSpecW
PathAppendW

Exports

Exports

Exception
Parse
get_bit_depth
vExecTokenA

Sections

.text
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fbeb95c62886ef4edd8e04ce38bb3b2a

Headers

File Characteristics

Imports

kernel32

setupapi

shell32

advapi32

shlwapi

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 105KB

.rdata Size: 71KB - Virtual size: 71KB

.data Size: 188KB - Virtual size: 188KB

.rsrc Size: 167KB - Virtual size: 166KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 105KB - Virtual size: 105KB

.rdata
Size: 71KB - Virtual size: 71KB

.data
Size: 188KB - Virtual size: 188KB

.rsrc
Size: 167KB - Virtual size: 166KB

.reloc
Size: 10KB - Virtual size: 9KB