1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4

Sharing

Copy URL Twitter E-mail

General

Target

1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4
Size

432KB
MD5

5b230885e90771f95baae170dd378756
SHA1

8df53eff08df7cf2caf7e7f31b67f9de9fd1ff47
SHA256

1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4
SHA512

78c10e4210c13731c2f27586d166bfb6ee311d64bc1b57ec46918a412842578e5f4fd378ef02138a0ef1007c2b58ad06cec4de6270c4e19a2571dc7a1ccad8bf
SSDEEP

6144:r3o4UFwoNpPhyz8Ojvy6vNqb0Rxtkai32UvW6+y19CNmyd4xu64B100lp:bolaNJXNqbwiPZ19k24

Score

N/A

Malware Config

Signatures

Files

1ad60c073c7db945a7f45b384d1db1c2c979d67679b0dc71ead2ea2e1e710bc4
.exe windows x86

29e515f1b29ab3840a9edd409547868f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CompareFileTime
CompareStringA
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
FindNextFileW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileTime
GetFileType
GetLocalTime
GetLocaleInfoW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLangID
GetVersionExW
GetVolumeInformationW
GlobalAlloc
GlobalFree
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryExW
LocalFree
MapViewOfFile
MoveFileA
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetHandleCount
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WideCharToMultiByte
WriteFile
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW

setupapi

SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDriverInfoW
SetupDiGetClassDevsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInstallParamsW
SetupDiBuildDriverInfoList
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetDeviceInstallParamsW
SetupDiSetSelectedDriverW
SetupFindFirstLineW
SetupGetStringFieldW
SetupOpenFileQueue
SetupOpenInfFileW
SetupScanFileQueueW
SetupCloseInfFile
SetupCloseFileQueue
SetupAddInstallSectionToDiskSpaceListA
CM_Locate_DevNodeW
CM_Get_DevNode_Status
SetupDiInstallDriverFiles
CM_Get_DevNode_Registry_PropertyW

user32

CharUpperA
CharNextW
CharLowerA
BlockInput
ExitWindowsEx
DispatchMessageW
CharUpperW
TranslateMessage
SendMessageW
PostMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetKeyboardType
GetActiveWindow

security

EnumerateSecurityPackagesA
EncryptMessage
DeleteSecurityPackageW
DeleteSecurityPackageA
DeleteSecurityContext
DecryptMessage
CompleteAuthToken
ApplyControlToken

ole32

CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoUninitialize

oleaut32

SysAllocString
SysStringLen
VarR8FromI1
VariantClear
VariantInit
SysFreeString

shlwapi

StrToIntExW
StrCmpIW
StrChrW
PathStripToRootW
PathRemoveBackslashW
PathIsUNCW
PathIsRootW
PathIsRelativeW
PathFindExtensionW
PathCompactPathA
StrRChrW
StrStrIW
StrCmpW
UrlGetPartW

version

GetFileVersionInfoW

Sections

.text
Size: 340KB - Virtual size: 340KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29e515f1b29ab3840a9edd409547868f

Headers

File Characteristics

Imports

kernel32

setupapi

user32

security

ole32

oleaut32

shlwapi

version

Sections

.text Size: 340KB - Virtual size: 340KB

.rdata Size: 52KB - Virtual size: 52KB

.data Size: 16KB - Virtual size: 360KB

.idata Size: 8KB - Virtual size: 8KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 340KB - Virtual size: 340KB

.rdata
Size: 52KB - Virtual size: 52KB

.data
Size: 16KB - Virtual size: 360KB

.idata
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 12KB - Virtual size: 12KB