305318c8b7d73ee713dbc73455e968d10834099c77cfd1acfd612ba7f150cb15

General

Target

305318c8b7d73ee713dbc73455e968d10834099c77cfd1acfd612ba7f150cb15
Size

169KB
MD5

6a5cf3a61145aa46f7e98a02bde9c1c8
SHA1

506fab271afd753ce04f9fe6fb7207d92f680350
SHA256

305318c8b7d73ee713dbc73455e968d10834099c77cfd1acfd612ba7f150cb15
SHA512

7629d42e1d954657fc7be33a82b8dd8eb68809d29679b0a68b1745f70c3b5923bfc3ca148dd16347edf2f503003e35abaeaf719e82709077c71efcd14b0c606f
SSDEEP

3072:YvBwa4lvg5HY/JivNJPS3RZWd+s50o8zwp+Mboy9wFGSAQkw3MX9EI8Yk5N:iBlbeYvcGd+s5H/QMboyYeaKEbl5

Score

N/A

Malware Config

Signatures

Files

305318c8b7d73ee713dbc73455e968d10834099c77cfd1acfd612ba7f150cb15
.exe windows x86

a993e18e7479d205304c48cc6d4fbd54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

gdi32

DeleteObject

kernel32

GetModuleHandleA
GetStartupInfoW
OpenThread
FindAtomW
ResumeThread
GetCurrentProcessId
GetDriveTypeW
FindFirstFileW
FindClose
DeleteFileW
ExitProcess
GetExitCodeThread
LoadLibraryExW
SetThreadPriority
LoadResource
CreateDirectoryW
LeaveCriticalSection
GetFileAttributesW
EnumResourceLanguagesW
QueryPerformanceCounter
DeviceIoControl
EnterCriticalSection
GetConsoleCommandHistoryW
SetPriorityClass
GetProcAddress
ReleaseMutex
GetSystemTimeAsFileTime
GetTickCount
OutputDebugStringW
CreateFileW
CopyFileW
FindNextFileW
GetCommandLineW
FindResourceW

advapi32

OpenSCManagerW
DeregisterEventSource
ControlService
SetServiceStatus
DeleteService
OpenProcessToken
RegEnumKeyExW
OpenThreadToken
ReportEventW
CloseServiceHandle
OpenServiceW
RegisterEventSourceW
CreateServiceW

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

Sections

.text
Size: 87KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a993e18e7479d205304c48cc6d4fbd54

Headers

File Characteristics

Imports

gdi32

kernel32

advapi32

setupapi

Sections

.text Size: 87KB - Virtual size: 487KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 77KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 87KB - Virtual size: 487KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 77KB

.rsrc
Size: 1024B - Virtual size: 4KB