7c652d066734c6c4e33de654acc2e2f85de9ecc982b6165f0eee485a6c3c6b57

General

Target

7c652d066734c6c4e33de654acc2e2f85de9ecc982b6165f0eee485a6c3c6b57
Size

56KB
MD5

2b5d89058b52fc214975d534b4b74dc0
SHA1

29433990e653e1686ede54da80c85ef0aa6b7bce
SHA256

7c652d066734c6c4e33de654acc2e2f85de9ecc982b6165f0eee485a6c3c6b57
SHA512

70761ea68ec0a6cc7623c9877f0087e1d49ac6db4e8d0e9eb2fe72b01b84a3bf69d60b375c0cf6065527f3cfe9cd5c8d03def4d42d33061179d86077c997c9b0
SSDEEP

1536:jLsi7nkgOfVKPyOrjK3rXMArAMXQ10Xess:jLXgZPOrW3jdAV0X6

Score

N/A

Malware Config

Signatures

Files

7c652d066734c6c4e33de654acc2e2f85de9ecc982b6165f0eee485a6c3c6b57
.exe windows x86

adfd9d8c885bb23657c409acc184a6ae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmEscapeA
ImmGetStatusWindowPos
ImmGetCandidateListCountW
ImmGetCompositionStringW
ImmGetGuideLineA
ImmGetDefaultIMEWnd

kernel32

CreateFileW
GetFileSize
ReadFile
GetTempPathW
VirtualAlloc
lstrcatW

setupapi

SetupDiRegisterDeviceInfo
SetupDiGetClassDevsW
SetupGetLineTextW
SetupDiOpenClassRegKey
SetupDiGetHwProfileList
SetupSetSourceListA
SetupQueueDeleteW

msacm32

acmFormatTagEnumW
acmStreamMessage
acmDriverID
acmDriverAddA
acmDriverPriority

shell32

ShellExecuteA

ws2_32

send
WSACreateEvent
WSAEnumProtocolsA
WSAGetQOSByName
ntohl

rtutils

RouterLogDeregisterA
TraceDumpExA
RouterLogEventStringW
TracePrintfA
TraceRegisterExA

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 92B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

adfd9d8c885bb23657c409acc184a6ae

Headers

DLL Characteristics

File Characteristics

Imports

imm32

kernel32

setupapi

msacm32

shell32

ws2_32

rtutils

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 28B

.rsrc Size: 1024B - Virtual size: 816B

.reloc Size: 512B - Virtual size: 92B

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 28B

.rsrc
Size: 1024B - Virtual size: 816B

.reloc
Size: 512B - Virtual size: 92B