1052d435a8ee80d94e084f4df5e7cbdd79d1eba76e531cadcebbb9aad704a2ea

Sharing

Copy URL Twitter E-mail

General

Target

1052d435a8ee80d94e084f4df5e7cbdd79d1eba76e531cadcebbb9aad704a2ea
Size

91KB
MD5

e38dd17fa63712d394ca16df07b7db0c
SHA1

daf2ca8453166229569d32adc1a7f3057205fc50
SHA256

1052d435a8ee80d94e084f4df5e7cbdd79d1eba76e531cadcebbb9aad704a2ea
SHA512

b3d8b92f696e0564ebc90e80d8debd06c81ef3f3d385aca8d3c71be526bd85e10fe76968ef9c246f5896167617f17b07b7f12c46c7d591f6d4b55944a33c1223
SSDEEP

768:Jx4P8GPmrou3RbTj6L8FWyeR0S9uYR4v1ajyRJtYkgQ3ZU9qZU9v:J6PD+yLMWVR0Sn4kjyRGQ3pi

Score

N/A

Malware Config

Signatures

Files

1052d435a8ee80d94e084f4df5e7cbdd79d1eba76e531cadcebbb9aad704a2ea
.exe windows x86

18be491e0d787f203fc7ed0f1f6a38f9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Locate_DevNodeW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstallParamsW
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyW
CM_Reenumerate_DevNode
SetupDiCreateDeviceInfoList
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
SetupDiOpenDeviceInfoW

difxapi

DriverPackageGetPathW
DriverPackageUninstallW

kernel32

HeapSize
GetLocaleInfoA
GetLastError
OutputDebugStringW
LocalFree
DeleteFileW
GetSystemWindowsDirectoryW
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
LoadLibraryA
RtlUnwind
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
LocalAlloc
VirtualFree
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
HeapAlloc
HeapFree
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapCreate
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
LCMapStringW
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW

user32

wsprintfW
DialogBoxParamW
DestroyWindow
DefWindowProcW
BeginPaint
EndPaint
PostQuitMessage
EndDialog

advapi32

RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

18be491e0d787f203fc7ed0f1f6a38f9

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

difxapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 28KB - Virtual size: 28KB

.rdata Size: 10KB - Virtual size: 9KB

.data Size: 3KB - Virtual size: 6KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 28KB - Virtual size: 28KB

.rdata
Size: 10KB - Virtual size: 9KB

.data
Size: 3KB - Virtual size: 6KB

.rsrc
Size: 48KB - Virtual size: 47KB