17ccddf8fdc8d78a48d3b21b363cf3e8c1e092d63b524c2e6ecaa644b8a708f3

Sharing

Copy URL Twitter E-mail

General

Target

17ccddf8fdc8d78a48d3b21b363cf3e8c1e092d63b524c2e6ecaa644b8a708f3
Size

507KB
MD5

93a3d93aaa5791ae21336505239dc7ee
SHA1

32357a1546773f7b941be982382e1cf032e1d4ed
SHA256

17ccddf8fdc8d78a48d3b21b363cf3e8c1e092d63b524c2e6ecaa644b8a708f3
SHA512

bd35d7f8c066d3663425777dc64894f4bea15590d5d4e7659a4ac7363051ef1ee4b6c3ace48a907e97d7cb8186ddf7aeefed722c074264f262c11d45035862a2
SSDEEP

12288:GS34qP5n0sYl8Hb0eamToyjIJfC0TxfGTZI7BCp:G+4qPKsW8Hn9syT0Txe4Ip

Score

N/A

Malware Config

Signatures

Files

17ccddf8fdc8d78a48d3b21b363cf3e8c1e092d63b524c2e6ecaa644b8a708f3
.dll windows x86

e9a6bb8b6de7236fb95529c5fd574af0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathRemoveFileSpecW
PathAppendW

advapi32

RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegOpenKeyW

shell32

SHCreateDirectoryExW

kernel32

WriteFile
GetTickCount
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
CloseHandle
CreateFileA
CreateFileW
CreateMutexW
CreateProcessW
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetExitCodeProcess
GetLastError
GetLocalTime
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
WaitForSingleObject
GetVersion
GetVersionExA
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree

setupapi

SetupFindFirstLineW
SetupFindNextLine
SetupGetStringFieldW
SetupDiSetDeviceInstallParamsW
SetupCloseInfFile
SetupDiGetDeviceInstallParamsW
SetupDiGetSelectedDriverW

Exports

Exports

Display
FillContiguousStrides
Int_AsSsize_t
Number_Xor
PrintEx
StringARepr
filter_heuristics
get_PLTE
get_x_offset_pixels

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 189KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e9a6bb8b6de7236fb95529c5fd574af0

Headers

File Characteristics

Imports

shlwapi

advapi32

shell32

kernel32

setupapi

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 92KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 189KB - Virtual size: 189KB

.rsrc Size: 159KB - Virtual size: 158KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 92KB - Virtual size: 92KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 189KB - Virtual size: 189KB

.rsrc
Size: 159KB - Virtual size: 158KB

.reloc
Size: 10KB - Virtual size: 9KB