471894ea646fedffc66aa01472760c8f779257ab8dac59d9150ec4734582155c

Sharing

Copy URL Twitter E-mail

General

Target

471894ea646fedffc66aa01472760c8f779257ab8dac59d9150ec4734582155c
Size

42KB
MD5

0d7ee25e4d2c2fc84de35403201a7e10
SHA1

8a0cc81a19fda0ccc673c09ba7be595fc8f28fb3
SHA256

471894ea646fedffc66aa01472760c8f779257ab8dac59d9150ec4734582155c
SHA512

4b1db0286b94c48e02f84f018db09c16bd807bdad3611983ed8075e0a11900d387dd1ae9f020a150c3256a6f6e7ba2fa92ec82d11025860e3fb17ca8d44c5940
SSDEEP

768:R25fJ+PGUBYVznrkbOEQm/+KJyOhAnykyy:+J+PGXznYO22KJyu+yy

Score

N/A

Malware Config

Signatures

Files

471894ea646fedffc66aa01472760c8f779257ab8dac59d9150ec4734582155c
.exe windows x86

d5b3c05b4dfd3b97484c94c7443e2fe4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc80u

ord2311
ord280
ord5398
ord2460
ord1236
ord3990
ord5524
ord774
ord577
ord283
ord293
ord762
ord2461
ord764
ord1235
ord4078
ord2261
ord282
ord1479
ord6700
ord1476
ord776

msvcr80

_invalid_parameter_noinfo
malloc
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
__winitenv
_initterm
_initterm_e
_configthreadlocale
_adjust_fdiv
_controlfp_s
_invoke_watson
_except_handler4_common
_decode_pointer
_onexit
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
_access
printf
free
__setusermatherr
_crt_debugger_hook
memset
_CxxThrowException
__CxxFrameHandler3
_unlock
__dllonexit
_lock
__p__commode

kernel32

GetACP
GetProcessHeap
HeapFree
GetLocaleInfoA
GetThreadLocale
GetPrivateProfileStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcess
CreateThread
WideCharToMultiByte
lstrlenW
GetVersionExA
GetExitCodeProcess
CreateProcessW
CloseHandle
GetStartupInfoW
GetLastError
GetVersionExW
GetProcAddress
WaitForSingleObject
GetModuleFileNameW
GetSystemInfo
GetModuleHandleW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

shell32

ShellExecuteExW

shlwapi

PathFileExistsW
PathCombineW

msvcp80

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

oleaut32

VariantClear

liblog

LOG_Init
LOG_Info
LOG_Error
LOG_Free
LOG_Level
LOG_Debug

difxapi

DriverPackagePreinstallW
DriverPackageUninstallW

setupapi

SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5b3c05b4dfd3b97484c94c7443e2fe4

Headers

File Characteristics

Imports

mfc80u

msvcr80

kernel32

advapi32

shell32

shlwapi

msvcp80

oleaut32

liblog

difxapi

setupapi

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 12KB - Virtual size: 34KB

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 12KB - Virtual size: 34KB