221f31a84a8c92d0f62eb79cbe1d76ec25145eba8977fa400c9f56dd7be1d209

General

Target

221f31a84a8c92d0f62eb79cbe1d76ec25145eba8977fa400c9f56dd7be1d209
Size

115KB
MD5

687d2586068c9f71b69bc34bb3ad41fd
SHA1

af6d3d45b30d917b563e2278e4c33b13c9915ace
SHA256

221f31a84a8c92d0f62eb79cbe1d76ec25145eba8977fa400c9f56dd7be1d209
SHA512

4b0f942deed943a3f3c99887d90c2a0c75e86d7a31317db2b794862d5f0d9315b749dbf6208fcf946c23eb492309b9b616d83aee1e1cfc5c928264e62c1c72d2
SSDEEP

384:QTzzVfL8PKVt9TNV07Jn4tlV/hwlgeFws8D++mpGRGD3QzJd1qCRK4inM5rjOq/K:QLB4ATn2imOsOKQFDRK9ufOZ

Score

N/A

Malware Config

Signatures

Files

221f31a84a8c92d0f62eb79cbe1d76ec25145eba8977fa400c9f56dd7be1d209
.exe windows x86

56d56f89c1bd1c76707ebda4e7c58d7d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
LocalFree
FormatMessageA
GetLastError
lstrlenA
LocalAlloc
FindFirstFileA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
SetLastError
RtlUnwind
WriteFile
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
GetProcAddress
LoadLibraryA
FlushFileBuffers
SetFilePointer
SetStdHandle
CloseHandle

setupapi

SetupDiCreateDeviceInfoA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo
SetupDiGetClassDevsA
SetupDiCallClassInstaller
SetupDiSetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiGetINFClassA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

eouawha
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

56d56f89c1bd1c76707ebda4e7c58d7d

Headers

File Characteristics

Imports

kernel32

setupapi

newdev

Sections

.text Size: 20KB - Virtual size: 20KB

.data Size: 10KB - Virtual size: 15KB

.rsrc Size: 84KB - Virtual size: 112KB

eouawha Size: - Virtual size: 4KB

.text
Size: 20KB - Virtual size: 20KB

.data
Size: 10KB - Virtual size: 15KB

.rsrc
Size: 84KB - Virtual size: 112KB

eouawha
Size: - Virtual size: 4KB