6f02f61704717e62221696d5897cc08744748d6c354a36680cd8bd980e75efb8

Sharing

Copy URL Twitter E-mail

General

Target

6f02f61704717e62221696d5897cc08744748d6c354a36680cd8bd980e75efb8
Size

124KB
MD5

7b97666c0806eb3340b6033128a862d0
SHA1

ece9468d872ea944875c44bc4a0aa6af61790067
SHA256

6f02f61704717e62221696d5897cc08744748d6c354a36680cd8bd980e75efb8
SHA512

92e1d723347654b6f02aaf107f9b1aa86f55efaeeb021ad1a8fce88a4f0003c59575f3f00086ee83d6421a3f479efba926c0611a0790d52c8cbeb2a866564118
SSDEEP

3072:wWu8jFmjxaeLOd6JpRl58x8Nqp3MCaoVk:LdleLOsyuNqmEV

Score

N/A

Malware Config

Signatures

Files

6f02f61704717e62221696d5897cc08744748d6c354a36680cd8bd980e75efb8
.exe windows x86

5714515e44af637962fad8dfa5356e59

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA

newdev

UpdateDriverForPlugAndPlayDevicesA

cfgmgr32

CM_Connect_MachineA
CM_Disconnect_Machine
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExA

setupapi

SetupRemoveFromSourceListA
SetupAddToSourceListA
SetupCopyOEMInfA
SetupOpenInfFileA
SetupFindFirstLineA
SetupGetStringFieldA
SetupCloseInfFile
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiRemoveDevice
SetupDiDeleteDevRegKey
SetupDiCallClassInstaller
SetupDiInstallDevice
SetupDiDestroyDeviceInfoList
SetupGetInfFileListA

msvcrt

_mbsrchr
malloc
_mbsnbcpy
sprintf
fclose
fputs
fseek
fopen
_mbscmp
_strupr
_mbsstr
_mbsicmp
_strlwr
_strdup
getenv
strstr
fgets
_mbslwr
free
_mbsnset
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
strtok

kernel32

GetModuleHandleA
GetStartupInfoA
GetLastError
SetLastError
FindFirstFileA
GetWindowsDirectoryA
LocalAlloc
lstrcpyA
lstrcatA
SetFileAttributesA
DeleteFileA
lstrlenA
LocalFree
GetVersionExA
WritePrivateProfileStringA
GetSystemTime
CreateFileA
GetFileSize
CloseHandle
GetModuleFileNameA

Sections

.text
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��?e
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5714515e44af637962fad8dfa5356e59

Headers

File Characteristics

Imports

advapi32

newdev

cfgmgr32

setupapi

msvcrt

kernel32

Sections

.text Size: 16KB - Virtual size: 12KB

.rdata Size: 4KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 8KB - Virtual size: 5KB

��?e Size: 88KB - Virtual size: 88KB

.text
Size: 16KB - Virtual size: 12KB

.rdata
Size: 4KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 8KB - Virtual size: 5KB

��?e
Size: 88KB - Virtual size: 88KB