d284341e5a528c27e7fa48f4371f4c7a2efc732c8579579044b2d45eb21136e5

General

Target

d284341e5a528c27e7fa48f4371f4c7a2efc732c8579579044b2d45eb21136e5
Size

59KB
MD5

0d721d28a6ee3b938a33b00310d3fce0
SHA1

ca711d2c229fd0c18a89a5e6900d16e422aad19e
SHA256

d284341e5a528c27e7fa48f4371f4c7a2efc732c8579579044b2d45eb21136e5
SHA512

f348d6aec93d42efbf32af4b7ee826e69d84d2be5a0e80f707663191d91d1fd4ad48062984ab4f8f3a3a9652c17d627ef9e26f54718f391e0cfc3c5dfd83bb4d
SSDEEP

768:AvTKKL56Sy03LfzOrXdlCg0aiALw4d6RH5ND9xI9LZd2se7CBzXDLFtvl+YjxbHE:KckLfzWdltLwG6RHH09t3eGBDr9B5Hd

Score

N/A

Malware Config

Signatures

Files

d284341e5a528c27e7fa48f4371f4c7a2efc732c8579579044b2d45eb21136e5
.exe windows x64

75a8eb7796a56bfb0dac67a5e1e64b98

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
ExitProcess
GetProcAddress
GetModuleHandleA
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwindEx
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapSetInformation
HeapCreate
LoadLibraryA
Sleep
GetACP
GetOEMCP
GetCPInfo
SetFilePointer
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
SetStdHandle
GetLocaleInfoA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
CloseHandle
RtlLookupFunctionEntry
RtlVirtualUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
RtlCaptureContext

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 27KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

75a8eb7796a56bfb0dac67a5e1e64b98

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

newdev

Sections

.text Size: 27KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 10KB

.pdata Size: 29KB - Virtual size: 30KB

.text
Size: 27KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 10KB

.pdata
Size: 29KB - Virtual size: 30KB