399de438038b4a587bf2c3ddb5000603b4a32798af014ceb405abd3223ca6733

Sharing

Copy URL Twitter E-mail

General

Target

399de438038b4a587bf2c3ddb5000603b4a32798af014ceb405abd3223ca6733
Size

149KB
MD5

2000d3c7bbc42241926c4805c8755d30
SHA1

a1c65618f5c955e6c3d6a2442e5ada98734921ea
SHA256

399de438038b4a587bf2c3ddb5000603b4a32798af014ceb405abd3223ca6733
SHA512

5f5fead79aa97c2b52fed38f1496cae5477a5ab132c9969a3a8101744beefde28fc46cc7e149c34f2831e038998eaef1d36b93bb253f67635c425d31a9ddbe3e
SSDEEP

3072:saVPb4xmMsNyvr7tCmcVsKYqL+ik4stZjHeMAi2ymQ:DPbVkr7tCmcuKY2XeZjH54tQ

Score

N/A

Malware Config

Signatures

Files

399de438038b4a587bf2c3ddb5000603b4a32798af014ceb405abd3223ca6733
.exe windows x86

d01d51c018fe20b9ed152613726e6a00

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

SetupDiClassGuidsFromNameW
CM_Get_Device_ID_ExW
SetupDiSetClassInstallParamsW
SetupCopyOEMInfW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiCallClassInstaller
SetupDiGetDeviceInfoListDetailW

kernel32

GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
GetModuleFileNameW
WaitForSingleObject
CloseHandle
GetCommandLineW
GetProcAddress
WriteConsoleW
GetSystemDirectoryW
GetLastError
FormatMessageW
GetVersionExW
GetWindowsDirectoryW
DeleteFileW
LocalFree
LoadLibraryW
GetConsoleMode
GetConsoleCP
SetFilePointer
SetStdHandle
CreateFileA
GetModuleHandleA
InterlockedDecrement
LoadLibraryA
HeapFree
HeapAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
RtlUnwind
HeapSize
InitializeCriticalSection
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

wsprintfW

advapi32

CheckTokenMembership
AllocateAndInitializeSid
FreeSid

shell32

CommandLineToArgvW
ShellExecuteExW

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d01d51c018fe20b9ed152613726e6a00

Headers

File Characteristics

Imports

newdev

setupapi

kernel32

user32

advapi32

shell32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 76KB - Virtual size: 76KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 76KB - Virtual size: 76KB