68eb97415bf2025dde2dd5a29a2bbfe09dd7c8f3ef4c98604ff6147d18a34811

Sharing

Copy URL Twitter E-mail

General

Target

68eb97415bf2025dde2dd5a29a2bbfe09dd7c8f3ef4c98604ff6147d18a34811
Size

196KB
MD5

452a09cf6a391c8948db0091b9158aa1
SHA1

f0c3ba8e0e5015a9fa899aa698589168fee56c32
SHA256

68eb97415bf2025dde2dd5a29a2bbfe09dd7c8f3ef4c98604ff6147d18a34811
SHA512

7a57a74924e70182bdd85b90dfd53d387d1623d3b552109aa55c155ed6637c1bc3616c094c36471e1ee6b92fa8dc2866900596f78ef5228771611ae7ddd046a3
SSDEEP

3072:YFnI4powjs6hgkyfutJO1xFiOpIdid/26+QseLukZRHJxjqaxw:an9GUJOxFie9+FeLLRHfP2

Score

N/A

Malware Config

Signatures

Files

68eb97415bf2025dde2dd5a29a2bbfe09dd7c8f3ef4c98604ff6147d18a34811
.dll windows x86

6a45c8de9fe9dc45ee5d0e194c561063

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CallNamedPipeA
CreateFileA
Sleep
CloseHandle
DeviceIoControl
GetLastError
GetVersionExA
ReadFile
GetFileSize
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers

setupapi

SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA

Exports

Exports

BTDFU_Abort
BTDFU_GetStatus
BTDFU_Start

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 148KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6a45c8de9fe9dc45ee5d0e194c561063

Headers

File Characteristics

Imports

kernel32

setupapi

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1000B

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 148KB - Virtual size: 148KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1000B

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 148KB - Virtual size: 148KB