edfb8eb2ac74344bc325444000b6582f483949647db390fc216d99758cfd77f3

General

Target

edfb8eb2ac74344bc325444000b6582f483949647db390fc216d99758cfd77f3
Size

136KB
MD5

f72e9cfec54948411e3948715be7e2d4
SHA1

9d81391088a4fffd1f524af447a6c8963d3d325b
SHA256

edfb8eb2ac74344bc325444000b6582f483949647db390fc216d99758cfd77f3
SHA512

b44caaa3cb10ef19ec2c6b806a0a88a7b81ed0220a0690fa17fd48962297488958306158411e9682b3e5f8566945d0784482495923cb11aae874e2bf5fdb98dd
SSDEEP

3072:w1oYwU85lBNhxWPyPuzXPKpTQCyBgH4pHEd06:x485xs3fJ

Score

N/A

Malware Config

Signatures

Files

edfb8eb2ac74344bc325444000b6582f483949647db390fc216d99758cfd77f3
.exe windows x86

455b85b7f33af0da38eeb62459f83fe0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
GetModuleHandleW
Sleep
VirtualAllocEx
HeapReAlloc
HeapAlloc
IsProcessorFeaturePresent
RtlUnwind
LoadLibraryW
HeapFree
GetStringTypeW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
LCMapStringW
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
HeapSize

setupapi

SetupScanFileQueueA
SetupQueryFileLogW
SetupRenameErrorW
SetupFindNextMatchLineA
SetupGetSourceFileSizeA
SetupFindFirstLineA
SetupDiDeleteDeviceInfo
SetupGetInfInformationW
SetupInstallFileExW
SetupQuerySourceListW
SetupDiOpenClassRegKey
SetupSetDirectoryIdExA
SetupRemoveFileLogEntryW

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

455b85b7f33af0da38eeb62459f83fe0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 18KB - Virtual size: 68KB

.rsrc Size: 84KB - Virtual size: 83KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 18KB - Virtual size: 68KB

.rsrc
Size: 84KB - Virtual size: 83KB