7b6837c7ab7f079acb62a7947e81a6b934dde4f1c1c1f49c8af93ae6a199147a

General

Target

7b6837c7ab7f079acb62a7947e81a6b934dde4f1c1c1f49c8af93ae6a199147a
Size

172KB
MD5

a29b22a90ab8320559e65e97538136db
SHA1

7be591fd75342735257ecf1937dc8ea902a7aca4
SHA256

7b6837c7ab7f079acb62a7947e81a6b934dde4f1c1c1f49c8af93ae6a199147a
SHA512

342ed8cb1c77c8b06dbfb00bd3a434072b0d22dc08c01e16e51be1394044dfd0703221b2c1ebe654f21b149c2653ddbb7b835f7f13d26fec3dabd4fb56f4245a
SSDEEP

3072:vsMoa5uUbS5zuv3qbwutBnIyF8kN2H6eZ5Mmp2iWagy6E/W9aCFjk+lPHTgn:vsMoIuSa8MekYH6s5tIiWEeJ7Pzg

Score

N/A

Malware Config

Signatures

Files

7b6837c7ab7f079acb62a7947e81a6b934dde4f1c1c1f49c8af93ae6a199147a
.exe windows x86

081d42e2012a8c74359e153c9270af32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

FindAtomW
FindNextFileW
IsWow64Process
SetFileAttributesW
MapViewOfFile
SetUnhandledExceptionFilter
LoadLibraryW
QueryPerformanceCounter
InterlockedCompareExchange
GetTickCount
GetLogicalDriveStringsW
CreateFileMappingW
EnumResourceLanguagesW
EnterCriticalSection
UnmapViewOfFile
QueryDosDeviceW
Sleep
UnhandledExceptionFilter
WaitForSingleObject
EncodePointer
GetConsoleCursorMode
FindFirstFileW
OpenProcess
GetSystemTimeAsFileTime
GetFileSizeEx
ReleaseMutex
FindClose
CreateMutexW

advapi32

RegCreateKeyExW
RegEnumKeyW
DecryptFileW
RegOpenKeyExW
EncryptFileW
RegEnumValueW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegCloseKey

shlwapi

PathGetArgsW
PathIsUNCW
PathSkipRootW
SHRegGetValueW
StrDupW
PathFindFileNameW

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

Sections

.text
Size: 92KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

081d42e2012a8c74359e153c9270af32

Headers

File Characteristics

Imports

kernel32

advapi32

shlwapi

setupapi

Sections

.text Size: 92KB - Virtual size: 487KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 77KB - Virtual size: 76KB

.rsrc Size: 1024B - Virtual size: 4KB

.text
Size: 92KB - Virtual size: 487KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 77KB - Virtual size: 76KB

.rsrc
Size: 1024B - Virtual size: 4KB