8a5ee36950930ddd1efadf62f3f8f4b0635305cb5c2cbfa6b08faa5f30741670

Sharing

Copy URL

Twitter E-mail

General

Target

8a5ee36950930ddd1efadf62f3f8f4b0635305cb5c2cbfa6b08faa5f30741670
Size

245KB
MD5

6a39916266ef36e9e9dfb3c250528de0
SHA1

dc9dcb77b65bebe80794649e1c802e6249f6698b
SHA256

8a5ee36950930ddd1efadf62f3f8f4b0635305cb5c2cbfa6b08faa5f30741670
SHA512

2cbf91db1ec8895efdcc39f2a1fe31b6fc4efe0eaf385f74231241b3b4ee43e07ef48b942a9abe80c81426cf90e9bb14fa96beadb5648d96a742e0fdd6aa5c66
SSDEEP

3072:bUwVSiY/TZNdxiO5+bn09BQh4pB4Oow28bt4wjupoNPs8SQhN310jD:bUcWQbGu4pB4OTJ4Qupoy+Nl0jD

Score

N/A

Malware Config

Signatures

Files

8a5ee36950930ddd1efadf62f3f8f4b0635305cb5c2cbfa6b08faa5f30741670
.exe windows x86

ba9b826b610ea2e2dc4e47261a6c5e6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryW
GetCurrentProcessId
CreateEventW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetEvent
SetUnhandledExceptionFilter
LocalFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InterlockedDecrement
CreateThread
SetLastError
TerminateThread
SetConsoleCtrlHandler
QueueUserAPC
OpenThread
SleepEx
lstrcmpiW
InterlockedIncrement
GetCurrentThreadId
IsDebuggerPresent
CloseHandle
CreateMutexW
LeaveCriticalSection
EnterCriticalSection
ReleaseMutex
WaitForSingleObject
GetLastError
UnhandledExceptionFilter

msvcrt

??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
_purecall
free
wcscmp
malloc
__wgetmainargs
wcsncmp
_c_exit
_exit
_XcptFilter
_cexit
__winitenv
exit
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_onexit
_except_handler3
_controlfp

advapi32

RegisterTraceGuidsW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
UnregisterTraceGuids
LookupAccountSidW
CreateWellKnownSid
TraceMessage

setupapi

SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

ntdll

DbgBreakPoint

rpcrt4

RpcServerUnregisterIf
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcStringFreeW
RpcServerListen
RpcAsyncCompleteCall
RpcServerInqCallAttributesW
NdrServerCall2
NdrAsyncServerCall
RpcServerRegisterIfEx
RpcServerUseProtseqEpW

secur32

GetUserNameExW

user32

LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW
SetWindowLongW
DestroyWindow
GetMessageW
TranslateMessage
DispatchMessageW
GetWindowLongW
DefWindowProcW
PostQuitMessage
PostMessageW
UnregisterDeviceNotification
RegisterDeviceNotificationW

Exports

Exports

WdfDeviceCreate
WdfDeviceGetDeviceName
WdfDeviceGetIoTarget
WdfDeviceInitSetFileEventCallbacks
WdfDeviceRegisterIoCallbacks
WdfDriverCreate
WdfFdoInitSetEventCallbacks
WdfFdoInitSetFilter
WdfIoQueueGetDevice
WdfIoTargetFormatIoctlRequest
WdfMemoryBufferCreate
WdfObjectDereferenceActual
WdfObjectReferenceActual
WdfRequestComplete
WdfRequestCompleteWithInformation
WdfRequestCreate
WdfRequestGetParameters
WdfRequestRetrieveBuffer
WdfRequestSend
WdfRequestSetCompletionRoutine

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 199KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ba9b826b610ea2e2dc4e47261a6c5e6d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

setupapi

ntdll

rpcrt4

secur32

user32

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 42KB

.data Size: 512B - Virtual size: 572B

.rsrc Size: 1KB - Virtual size: 1KB

.tc Size: 199KB - Virtual size: 200KB

.text
Size: 43KB - Virtual size: 42KB

.data
Size: 512B - Virtual size: 572B

.rsrc
Size: 1KB - Virtual size: 1KB

.tc
Size: 199KB - Virtual size: 200KB