7c5fa22221606ed30fb41822e3294c4a08de149431246e6ad84185d38338b778

General

Target

7c5fa22221606ed30fb41822e3294c4a08de149431246e6ad84185d38338b778
Size

172KB
MD5

933ef8761195b83b413b2a3d6efd94a0
SHA1

a0b4952ad9d9f0cdca303d08896d0f8c849c69a1
SHA256

7c5fa22221606ed30fb41822e3294c4a08de149431246e6ad84185d38338b778
SHA512

d95f53568733f0691b520d6498cbafa2a1ae29712a6fbbceef2700855786b999a555022941b813eb8965960fe6e3711f2aa965b93f5770e5704b17a2be1feb63
SSDEEP

3072:vsMoa5uUb45zuv3qbwutBnIyF8kN2H6eZ5Mmp2iWagy6E/W9aCFjk+lPHTgn:vsMoIuSs8MekYH6s5tIiWEeJ7Pzg

Score

N/A

Malware Config

Signatures

Files

7c5fa22221606ed30fb41822e3294c4a08de149431246e6ad84185d38338b778
.exe windows x86

081d42e2012a8c74359e153c9270af32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FindAtomW
FindNextFileW
IsWow64Process
SetFileAttributesW
MapViewOfFile
SetUnhandledExceptionFilter
LoadLibraryW
QueryPerformanceCounter
InterlockedCompareExchange
GetTickCount
GetLogicalDriveStringsW
CreateFileMappingW
EnumResourceLanguagesW
EnterCriticalSection
UnmapViewOfFile
QueryDosDeviceW
Sleep
UnhandledExceptionFilter
WaitForSingleObject
EncodePointer
GetConsoleCursorMode
FindFirstFileW
OpenProcess
GetSystemTimeAsFileTime
GetFileSizeEx
ReleaseMutex
FindClose
CreateMutexW

advapi32

RegCreateKeyExW
RegEnumKeyW
DecryptFileW
RegOpenKeyExW
EncryptFileW
RegEnumValueW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey

shlwapi

PathGetArgsW
PathIsUNCW
PathSkipRootW
SHRegGetValueW
StrDupW
PathFindFileNameW

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

Sections

.text
Size: 92KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

081d42e2012a8c74359e153c9270af32

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

setupapi

Sections

.text Size: 92KB - Virtual size: 487KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 76KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 487KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 76KB

.rsrc
Size: 1024B - Virtual size: 4KB