2e39406e6cf65c30e9e2f287bec43ba46de3ab85b438f513d85c904ed2596e3e

General

Target

2e39406e6cf65c30e9e2f287bec43ba46de3ab85b438f513d85c904ed2596e3e
Size

209KB
MD5

903e1a18b04d5cb307d977847a9f7f87
SHA1

93dcd49e7806d6baafaeb8e4f31f9771262fc29b
SHA256

2e39406e6cf65c30e9e2f287bec43ba46de3ab85b438f513d85c904ed2596e3e
SHA512

409352cd54cf3c0901600b682277ff153976c584b598cb0064ba237e9cc2c7cd14251a46d4fd44ffa72f3be4a831946b661ca423d036cab52fb519ec43eefe52
SSDEEP

3072:OiFRf6xBN/9S4YsIxqVAmDzNsyhNrlZPITUNya9Uyg5bL1E31Qa8w7vOuR1UQOE3:fKxrEonRbjrllIT5mqQ31JnRui

Score

N/A

Malware Config

Signatures

Files

2e39406e6cf65c30e9e2f287bec43ba46de3ab85b438f513d85c904ed2596e3e
.exe windows x86

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
CharNextA

pdh

PdhAdd009CounterA
PdhBrowseCountersA
PdhAddCounterW
PdhAddCounterA
PdhBindInputDataSourceA
PdhBindInputDataSourceW

kernel32

SetUnhandledExceptionFilter
GlobalMemoryStatus
LockResource
DeviceIoControl
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
SystemTimeToFileTime
FreeResource
CreateFileA
CloseHandle
lstrcpyA
GetEnvironmentStringsA
QueryDosDeviceA
LoadLibraryW
lstrlenA
lstrcmpA
LoadResource
GetLocalTime
SetLastError
GetVolumeInformationA
HeapFree
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleW
FindResourceA
GetProcessHeap

advapi32

RegOpenKeyW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

osuninst

ProvideUiAlerts
IsUninstallImageValid
RemoveUninstallImage
GetUninstallImageSize

pautoenr

CertAutoRemove
CertAutoEnrollment

panmap

DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

Imports

user32

pdh

kernel32

advapi32

osuninst

pautoenr

panmap

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 49KB - Virtual size: 6.1MB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 49KB - Virtual size: 6.1MB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 2KB - Virtual size: 1KB