426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e

General

Target

426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e
Size

169KB
MD5

91e3930630150d756c47ded838811940
SHA1

82ea6a8b567031eae34dfd37c5e5b003f5396829
SHA256

426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e
SHA512

7ed7d8d466682ed64325feab6d17e06adce5cf9675bf3a4a4f917aa5606e2f2b1489fd524e477b40a4f2f7bdbfeb87d6aa7f91cb80757b7f96165cd4454dc8fe
SSDEEP

3072:+W/iD3zdj3IwcSIN0IfyoJVSG9M0YFJqnu/PcC1RGM/MXnxxDJCQm:x/iD3zJ3IvSINDa+79M04J7PJRNU3x5m

Score

N/A

Malware Config

Signatures

Files

426a828f3451669dd2fad104860fb1c1c98fb392afa44cf64a9b4d106e51963e
.exe windows x86

aa856ce06f2a6f232c7c2fce757f253b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

advapi32

RegQueryValueExA
RegEnumKeyA
RegEnumKeyExA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueA
RegOpenKeyA
RegCloseKey

lz32

LZClose
LZCopy
LZOpenFileA

kernel32

CreateMutexA
CreateFileW
AddAtomW
GetTickCount
GlobalLock
GetTempFileNameA
QueryPerformanceCounter
InitializeCriticalSection
lstrlenA
WideCharToMultiByte
GetVolumeInformationA
GlobalFree
InterlockedDecrement
DeleteFileA
GlobalUnlock
CreateDirectoryA
CopyFileA
GetFileSize
ReleaseMutex
LocalFree
GetSystemTimeAsFileTime
ReadFile
GetVersionExA
InterlockedIncrement
GetCurrentThreadId
GetModuleFileNameA
EnumResourceNamesA
GetCurrentProcessId
SetFilePointer
LocalAlloc
CreateHardLinkW
DisableThreadLibraryCalls
GetModuleFileNameW
DeviceIoControl
CreateFileA
VirtualAlloc
SetFileAttributesA
GetFileAttributesA
GetTempPathA
VirtualFree
WaitForSingleObject
GetLastError
CloseHandle
MultiByteToWideChar
GetSystemTime
DeleteCriticalSection
Sleep
FreeLibrary

Sections

.text
Size: 91KB - Virtual size: 486KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa856ce06f2a6f232c7c2fce757f253b

Headers

File Characteristics

Imports

setupapi

advapi32

lz32

kernel32

Sections

.text Size: 91KB - Virtual size: 486KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 74KB - Virtual size: 74KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 91KB - Virtual size: 486KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 74KB - Virtual size: 74KB

.rsrc
Size: 512B - Virtual size: 4KB