9edadb5d51cc456b48cbadfe32073828614ce2fe9c5f83b2cfb877120fbb69e9

Sharing

Copy URL Twitter E-mail

General

Target

9edadb5d51cc456b48cbadfe32073828614ce2fe9c5f83b2cfb877120fbb69e9
Size

153KB
MD5

45e20259999dc73668983d7472a8ea75
SHA1

1b793c00e36396805b3cbf514ecf94ff3eeaa08f
SHA256

9edadb5d51cc456b48cbadfe32073828614ce2fe9c5f83b2cfb877120fbb69e9
SHA512

d457b9fb57392ef6633192da521ccd1e31c4846e5262c7306786e7a808f8c9ed9a29bca05bab7f905cf56b0a0734925389354ebe19f3edd1d7049226e01fc10e
SSDEEP

3072:4Vkjx93t3hLLbElHfyEjAI9rmEJ31wMDndTu1yhtJBnmlPzVP3VK9SCXCZI9Y:4OTdLQsolJFwz1ckC9SCXCqG

Score

N/A

Malware Config

Signatures

Files

9edadb5d51cc456b48cbadfe32073828614ce2fe9c5f83b2cfb877120fbb69e9
.exe windows x86

8358b810ecdf3e97ff2b4181f5066ec1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetDeviceRegistryPropertyW
CM_Get_Child
CM_Get_Depth
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDA
CM_Get_Device_ID_Size
CM_Get_First_Log_Conf
CM_Get_Parent
CM_Get_Sibling
CM_Locate_DevNodeA
CM_Move_DevNode_Ex
CM_Request_Device_EjectW
CM_Set_HW_Prof
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoList
SetupDiDeleteDeviceInterfaceData
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiEnumDriverInfoW
SetupDiGetClassDevsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupOpenFileQueue
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
CM_Add_Res_Des
SetupDiSetDeviceInterfaceDefault
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoA

user32

MsgWaitForMultipleObjectsEx
PeekMessageA
UnregisterDeviceNotification
MessageBoxW
GetUpdateRect
CharUpperA

shell32

SHGetFolderPathW

ws2_32

WSAAccept
WSAAsyncGetServByPort
WSAGetLastError
__WSAFDIsSet
accept
bind
connect
getsockname
getsockopt
inet_addr
ioctlsocket
recv
select

ole32

CLSIDFromString
CoCreateInstance
CoCreateObjectInContext
CoInitialize
CoQueryProxyBlanket
CoSetProxyBlanket
CoUninitialize
HBRUSH_UserMarshal

kernel32

lstrlenW
lstrcmpiA
_lopen
_lcreat
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFreeEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
TryEnterCriticalSection
TlsSetValue
TlsGetValue
TlsAlloc
TerminateThread
Sleep
SizeofResource
SignalObjectAndWait
SetUnhandledExceptionFilter
SetThreadPriorityBoost
SetLastError
SetFilePointer
SetEvent
Beep
CloseHandle
ConnectNamedPipe
CreateFileA
CreateFileMappingA
CreateNamedPipeW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
EraseTape
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeLibrary
GetACP
GetCommMask
GetComputerNameExW
GetConsoleFontSize
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetHandleInformation
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNamedPipeHandleStateA
GetOverlappedResult
GetProcAddress
GetShortPathNameW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVolumeInformationW
HeapDestroy
HeapUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
Module32FirstW
MoveFileW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadFileScatter
RemoveDirectoryW
ResetEvent
SetCommBreak
SetEndOfFile

advapi32

SystemFunction015
SystemFunction011
StartServiceCtrlDispatcherA
SetServiceStatus
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
SetEntriesInAclW
RevertToSelf
ReportEventW
RegisterEventSourceW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
OpenServiceW
OpenSCManagerW
MapGenericMask
LsaLookupSids
LsaGetQuotasForAccount
IsValidSid
InitializeSecurityDescriptor
ImpersonateSelf
ImpersonateNamedPipeClient
GetUserNameW
GetTokenInformation
GetNamedSecurityInfoW
GetFileSecurityW
GetExplicitEntriesFromAclW
FreeSid
FreeEncryptionCertificateHashList
EqualSid
DeregisterEventSource
DeleteService
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CreateServiceW
ConvertToAutoInheritPrivateObjectSecurity
CloseServiceHandle
AllocateAndInitializeSid
AccessCheck

Exports

Exports

GetCounter
HrCopyStreamToByte
PszScanToWhiteA
Update

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8358b810ecdf3e97ff2b4181f5066ec1

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

user32

shell32

ws2_32

ole32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 90KB - Virtual size: 90KB

.data Size: 9KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 872B

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 90KB - Virtual size: 90KB

.data
Size: 9KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 872B