2972eaffd4ba3e6f3a83fc21ac50a84a8671b7f33a4588b85afc7adfd67de6b9

General

Target

2972eaffd4ba3e6f3a83fc21ac50a84a8671b7f33a4588b85afc7adfd67de6b9
Size

280KB
MD5

a1d0d39c0849466958424cfdcf730bef
SHA1

141a76df88c864c8bb094e0daf9f503f8e09477b
SHA256

2972eaffd4ba3e6f3a83fc21ac50a84a8671b7f33a4588b85afc7adfd67de6b9
SHA512

b5b2871cd3824894c39238e1d695bd92280543ce7423b2243af937c38a51aa7f4e02aa2a53d574e00bb4a47470bb5ea616fed80fb2d16401e6848706747c9df5
SSDEEP

6144:CjOcGQzEYpOOk/wW8oZIE1+gNPCf883mzQkRA9ximQ:Cj7GQzEdOkL8ou0+P3cHy

Score

N/A

Malware Config

Signatures

Files

2972eaffd4ba3e6f3a83fc21ac50a84a8671b7f33a4588b85afc7adfd67de6b9
.exe windows x86

0cb3a412c6ea8fdc9e8c6a9d0eaed7a9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

SHGetFolderPathW

advapi32

RegEnumKeyExW
RegisterEventSourceW
ReportEventW
SetServiceStatus
OpenSCManagerW
ControlService
DeleteService
DeregisterEventSource
OpenProcessToken
OpenServiceW
OpenThreadToken
CloseServiceHandle
CreateServiceW

gdi32

DeleteObject

setupapi

CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyA
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

FindAtomW
GetDriveTypeW
GetTickCount
SetThreadPriority
LoadLibraryExW
EnterCriticalSection
CopyFileW
OutputDebugStringW
GetFileAttributesW
GetCommandLineW
ExitProcess
QueryPerformanceCounter
GetSystemTimeAsFileTime
FindNextFileW
DeviceIoControl
GetModuleHandleA
DeleteFileW
EnumResourceLanguagesW
GetCurrentProcessId
OpenThread
ReleaseMutex
ResumeThread
GetConsoleCommandHistoryW
LeaveCriticalSection
FindClose
CreateDirectoryW
GetProcAddress
CreateFileW
SetPriorityClass
FindFirstFileW
LoadResource
GetStartupInfoW
GetExitCodeThread
FindResourceW

Sections

.text
Size: 134KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0cb3a412c6ea8fdc9e8c6a9d0eaed7a9

Headers

File Characteristics

Imports

shell32

advapi32

gdi32

setupapi

kernel32

Sections

.text Size: 134KB - Virtual size: 266KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 142KB - Virtual size: 141KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 134KB - Virtual size: 266KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 142KB - Virtual size: 141KB

.rsrc
Size: 512B - Virtual size: 4KB