557c15374d8d9027a6340ddba184961d5fa242b4bf3fdb19222fff2430260c5c

Sharing

Copy URL

Twitter E-mail

General

Target

557c15374d8d9027a6340ddba184961d5fa242b4bf3fdb19222fff2430260c5c
Size

264KB
MD5

ab498831cbeb1df5588beabe59a37347
SHA1

84a4bead0e76d9cdb06ee7097d4fea77fc006cce
SHA256

557c15374d8d9027a6340ddba184961d5fa242b4bf3fdb19222fff2430260c5c
SHA512

16295c42e5452fc9296c76df67c1061568f486d451bc49c1650b2cb8a4d22ad53f60c913f07fda61c9fdec468f5d03ea02a7b2efd1a9da1f836847f260872737
SSDEEP

3072:PSgsWG1t2SegcoKuWhk+jeOuArprAcVYWOmRXoIreQDiH6IC:PK1cSe4XgrFANWOAJGc

Score

N/A

Malware Config

Signatures

Files

557c15374d8d9027a6340ddba184961d5fa242b4bf3fdb19222fff2430260c5c
.exe windows x86

1faf585ea48ff172e88cded8e946028d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetVersion
GetLocalTime
lstrlenA
GetLastError
lstrcatA
GetWindowsDirectoryA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetVersionExA
GetShortPathNameA
DeviceIoControl
DeleteFileA
SetFileAttributesA
GetTempPathA
SetEnvironmentVariableA
CompareStringW
CompareStringA
IsBadReadPtr
GetSystemInfo
lstrcmpiA
lstrcmpA
CreateSemaphoreA
VirtualAlloc
VirtualFree
GetCurrentProcess
VirtualProtect
WriteProcessMemory
LoadLibraryA
GetProcAddress
FindResourceA
GetModuleHandleA
FlushFileBuffers
SetStdHandle
GetStringTypeW
LoadResource
LockResource
SizeofResource
CreateFileA
CreateFileW
WaitForSingleObject
ReleaseSemaphore
GetCurrentProcessId
OpenProcess
TerminateProcess
CloseHandle
lstrcpyA
GetStringTypeA
WriteFile
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
GetTimeZoneInformation
GetSystemTime
RtlUnwind
GetCommandLineA
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
LCMapStringA
LCMapStringW

user32

wsprintfA
GetSystemMetrics
MessageBoxA

advapi32

RegEnumKeyExA
QueryServiceStatus
OpenServiceA
OpenSCManagerA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
StartServiceA
CreateServiceA
DeleteService
ControlService
CloseServiceHandle

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList

hid

HidD_SetFeature
HidD_GetFeature
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetPreparsedData
HidD_GetHidGuid

psapi

EnumProcessModules
GetModuleFileNameExA
GetModuleInformation

Sections

.text
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1faf585ea48ff172e88cded8e946028d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

setupapi

hid

psapi

Sections

.text Size: 52KB - Virtual size: 50KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 44KB - Virtual size: 49KB

.rsrc Size: 156KB - Virtual size: 152KB

.text
Size: 52KB - Virtual size: 50KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 44KB - Virtual size: 49KB

.rsrc
Size: 156KB - Virtual size: 152KB