3ad256d8c574e21de0a40bd5c843acbf52c2619ad3e7478e290de6a9d3c705e4

Sharing

Copy URL Twitter E-mail

General

Target

3ad256d8c574e21de0a40bd5c843acbf52c2619ad3e7478e290de6a9d3c705e4
Size

147KB
MD5

92e263b5a8d9938dc5da86ed88a19ca6
SHA1

b310203f2a6714fc645bab74b911c92402f06a39
SHA256

3ad256d8c574e21de0a40bd5c843acbf52c2619ad3e7478e290de6a9d3c705e4
SHA512

3952de36520c5cfdcdb71f9ce580fd1c3765cc3f582f84829dfebfbff7c5782c766d6608a962a080ae9c4c9f31a5dc747731264ef26f161222d754c351ee5263
SSDEEP

3072:Ac7a/OBahgAY97fAWftcQNbJUCFI31mc+z+hrdqnE7BDny1R:Ac4jh6AW2Kb1cmurIE7Bn4

Score

N/A

Malware Config

Signatures

Files

3ad256d8c574e21de0a40bd5c843acbf52c2619ad3e7478e290de6a9d3c705e4
.exe windows x86

8c6f541cc6d716fdaa12addc7a2411b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiGetINFClassW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiCreateDeviceInfoW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
CM_Get_DevNode_Status
SetupDiChangeState
SetupDiGetDeviceInstanceIdW
SetupDiBuildDriverInfoList
SetupDiSetSelectedDevice
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo
SetupDiGetDeviceInfoListDetailW
SetupDiGetSelectedDriverW
SetupDiCreateDevRegKeyW
SetupDiCallClassInstaller
SetupDiRegisterDeviceInfo

kernel32

WideCharToMultiByte
LoadLibraryW
GetLastError
FreeLibrary
GetProcAddress
GetSystemDirectoryW
lstrlenW
MultiByteToWideChar
Sleep
GetVersionExW
GetEnvironmentStringsW
FindFirstFileW
LocalFree
FindClose
DeleteFileW
CreateDirectoryW
SetLastError
FindNextFileW
GetTempPathW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
InitializeCriticalSection
LoadLibraryA
RemoveDirectoryW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetModuleFileNameA
GetStdHandle
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
HeapCreate
GetCurrentThreadId
TlsFree
WriteFile
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
EnterCriticalSection

advapi32

RegOpenKeyExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityInfo
GetSecurityDescriptorLength
GetAclInformation
MakeSelfRelativeSD
InitializeAcl
GetSecurityDescriptorControl
GetSecurityDescriptorOwner
GetAce
RegQueryValueExW
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorSacl
LookupAccountNameW
IsValidSid
SetNamedSecurityInfoW
GetLengthSid
AddAce
CopySid
SetSecurityInfo
RegSetValueExW
RegCloseKey

shell32

SHGetFolderPathW

ole32

CoUninitialize
CoInitializeEx
CoCreateInstance

oleaut32

VarBstrCat
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SysAllocStringLen
SysFreeString
SysAllocString

shlwapi

PathAppendW

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rrdata
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c6f541cc6d716fdaa12addc7a2411b6

Headers

File Characteristics

Imports

newdev

setupapi

kernel32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 1024B - Virtual size: 888B

.rrdata Size: 72KB - Virtual size: 72KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 1024B - Virtual size: 888B

.rrdata
Size: 72KB - Virtual size: 72KB