1be6a2ecc49bbc15ab06846335ab7bf9b715c3f82df9b249ac10897b0675404a

Sharing

Copy URL Twitter E-mail

General

Target

1be6a2ecc49bbc15ab06846335ab7bf9b715c3f82df9b249ac10897b0675404a
Size

347KB
MD5

4b1f91f2d4d30f6397ce530f20f34493
SHA1

166770163b7d7ff237a67cfd9133e109d47f683b
SHA256

1be6a2ecc49bbc15ab06846335ab7bf9b715c3f82df9b249ac10897b0675404a
SHA512

fc5a10566c76da57b1bbe34be1ff84ae60b72cfc254053218b2817ed9fa64d00bff056ef7750d128773528b5f81cb98dc8c0005c42306f8cda198d930f31dc31
SSDEEP

6144:HQHywxHhNMgyJh/BVtRHuf6labwpZLJLB+ORr0J+ABQ1c1J5tK+u:Ay+BNwJXwf6Yb4LnVdoFJnq

Score

N/A

Malware Config

Signatures

Files

1be6a2ecc49bbc15ab06846335ab7bf9b715c3f82df9b249ac10897b0675404a
.dll windows x86

d823506e6167711b4af6283d1df84c9d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemInfo
GetTickCount
GetUserDefaultLangID
GetWindowsDirectoryA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
GetCommandLineA
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
Process32First
Process32Next
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA
GetCPInfo
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
EnterCriticalSection
DeleteFileA
CreateToolhelp32Snapshot
CreateProcessA
CreateFileA
CopyFileA
LCMapStringW
CloseHandle

setupapi

SetupOpenInfFileA
SetupGetLineTextA
SetupDiSetClassInstallParamsA
SetupDiOpenDevRegKey
SetupDiGetSelectedDriverA
SetupDiGetDriverInfoDetailA
SetupDiCallClassInstaller
SetupCloseInfFile

advapi32

DeleteAce
CopySid
AccessCheck
ImpersonateLoggedOnUser
LookupAccountNameA
LookupAccountSidA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegSetValueExA
RevertToSelf
SystemFunction008
GetTokenInformation

Exports

Exports

Display
ImportWarning
InPlaceTrueDivide
Member_SetOne
StrictErrors
info_init_3
set_palette_to_rgb

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d823506e6167711b4af6283d1df84c9d

Headers

File Characteristics

Imports

kernel32

setupapi

advapi32

Exports

Exports

Sections

.text Size: 134KB - Virtual size: 133KB

.rdata Size: 75KB - Virtual size: 74KB

.data Size: 68KB - Virtual size: 69KB

.rsrc Size: 55KB - Virtual size: 55KB

.reloc Size: 13KB - Virtual size: 13KB

.text
Size: 134KB - Virtual size: 133KB

.rdata
Size: 75KB - Virtual size: 74KB

.data
Size: 68KB - Virtual size: 69KB

.rsrc
Size: 55KB - Virtual size: 55KB

.reloc
Size: 13KB - Virtual size: 13KB