7de990cffeb6af66f60c13b2197c3f1cca7e5f4ed5bed98067409f731f5b1b67

Sharing

Copy URL Twitter E-mail

General

Target

7de990cffeb6af66f60c13b2197c3f1cca7e5f4ed5bed98067409f731f5b1b67
Size

170KB
MD5

b2b0eab523300540c7a7027801a7e084
SHA1

d8d2db233c0cdeb41fa6e2b59c54d9cae7fef2b7
SHA256

7de990cffeb6af66f60c13b2197c3f1cca7e5f4ed5bed98067409f731f5b1b67
SHA512

d15309cbdf23e6c2aed3d8935f4dec8e895897337fcc054d3bee4e0c285fa169fedd9bf3c91341a6bf66d5da7d40af572296c34c81d8a1d5d811f3d1285ac426
SSDEEP

3072:y+KgnnOvEZui3/wT7TFk/8O+0OeRHbYfiqJlT+ya+B5DquDD+Jt/9lY9KbzD3d:y+KsnRWt9D7K+B5dDDeJk9KbzD

Score

N/A

Malware Config

Signatures

Files

7de990cffeb6af66f60c13b2197c3f1cca7e5f4ed5bed98067409f731f5b1b67
.dll windows x86

6b184f8e56f442de787ac8f28ef2ff2a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiDeleteDeviceInterfaceRegKey
CM_Disconnect_Machine
SetupScanFileQueueW
SetupOpenFileQueue
SetupFindFirstLineW
SetupDiSetSelectedDriverW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiSelectDevice
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiOpenClassRegKeyExW
SetupDiInstallDeviceInterfaces
SetupDiGetINFClassW
SetupDiGetDriverInstallParamsW
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInfoListDetailW
SetupDiGetClassDevsExW
SetupDiGetClassDescriptionExW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDriverInfoList
SetupDiDestroyDeviceInfoList
CM_Connect_MachineW
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidExW
SetupDiClassGuidsFromNameExW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDiBuildClassInfoListExW
SetupCopyOEMInfW
SetupCloseInfFile
SetupCloseFileQueue
CM_Enumerate_Classes
CM_Free_Res_Des_Handle
CM_Get_DevNode_Status_Ex
CM_Get_Device_ID_ExW
CM_Reenumerate_DevNode_Ex
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Res_Des_Data_Size
CM_Get_Next_Res_Des_Ex
CM_Get_First_Log_Conf_Ex

ole32

CLSIDFromString

kernel32

lstrlenW
VirtualProtect
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
Sleep
SetUnhandledExceptionFilter
RtlUnwind
QueryPerformanceCounter
LocalFree
LoadLibraryW
InterlockedExchange
InterlockedCompareExchange
GetWindowsDirectoryW
GetTickCount
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleA
GetLastError
GetFullPathNameW
GetFileAttributesW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
FormatMessageW
FindNextFileW
FindFirstFileW
CloseHandle
ExitProcess
FileTimeToSystemTime
FindClose

shell32

SHGetFolderPathW
SHEmptyRecycleBinA
DragQueryFileAorW

advapi32

RegSetValueExW
RegDeleteValueW
RegCloseKey
OpenServiceW
OpenSCManagerW
OpenProcessToken
LsaClearAuditLog
LookupPrivilegeValueW
InitiateSystemShutdownExW
CloseServiceHandle

msvcrt

_XcptFilter
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_controlfp
_exit
_initterm
_mkdir
_pwctype
_vsnwprintf
_wcsicmp
_wcsnicmp
_wexecle
exit
fputs
fscanf
getwc
iswalpha
memset
towupper
wcschr
wcsrchr

user32

CharPrevW
LoadStringW
CharNextW

Exports

Exports

DescribeMcdLayerPlane
DoHotMailWizard
ExternalRestore
IndexRecordCount
Unlock
UpdateTextureState

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b184f8e56f442de787ac8f28ef2ff2a

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

ole32

kernel32

shell32

advapi32

msvcrt

user32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 52KB

.rdata Size: 92KB - Virtual size: 92KB

.data Size: 9KB - Virtual size: 10KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 52KB - Virtual size: 52KB

.rdata
Size: 92KB - Virtual size: 92KB

.data
Size: 9KB - Virtual size: 10KB

.rsrc
Size: 15KB - Virtual size: 14KB