2a7afccad3e8cbe060852dddabc6ac70a419600d3f1ffeefcf0fab2968a05312

General

Target

2a7afccad3e8cbe060852dddabc6ac70a419600d3f1ffeefcf0fab2968a05312
Size

209KB
MD5

23d68a01eb5bea28ff86e86fadc010d0
SHA1

028269d23ff4f4f918cf4cc73f9c8eb2b5c68ff0
SHA256

2a7afccad3e8cbe060852dddabc6ac70a419600d3f1ffeefcf0fab2968a05312
SHA512

a8d0d2aeb86394e9e9a408c819251f779114d001105fa5751aff58f0fb97367dc2d9bb005ef612db39bbc083ab02deda8ee396ec3344905789fe9e9fdac2389c
SSDEEP

3072:OiFRf6xBN/9S4YsIxqVAmDzNsyhNrlZPITUNya9Uyg5bL1E31Qa8w7vOuR1UQOEz:fKxrEonRbjrllIT5mqQ31JnRue

Score

N/A

Malware Config

Signatures

Files

2a7afccad3e8cbe060852dddabc6ac70a419600d3f1ffeefcf0fab2968a05312
.exe windows x86

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
CharNextA

pdh

PdhAdd009CounterA
PdhBrowseCountersA
PdhAddCounterW
PdhAddCounterA
PdhBindInputDataSourceA
PdhBindInputDataSourceW

kernel32

SetUnhandledExceptionFilter
GlobalMemoryStatus
LockResource
DeviceIoControl
HeapAlloc
GetSystemTimeAsFileTime
GetCurrentProcessId
SystemTimeToFileTime
FreeResource
CreateFileA
CloseHandle
lstrcpyA
GetEnvironmentStringsA
QueryDosDeviceA
LoadLibraryW
lstrlenA
lstrcmpA
LoadResource
GetLocalTime
SetLastError
GetVolumeInformationA
HeapFree
GetTickCount
QueryPerformanceCounter
WideCharToMultiByte
GetCurrentProcess
MultiByteToWideChar
GetModuleHandleW
FindResourceA
GetProcessHeap

advapi32

RegOpenKeyW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA

osuninst

ProvideUiAlerts
IsUninstallImageValid
RemoveUninstallImage
GetUninstallImageSize

pautoenr

CertAutoRemove
CertAutoEnrollment

panmap

DllGetClassObject
DllCanUnloadNow

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b0dd44e1384a38720c492f250b3fd0ef

Headers

File Characteristics

Imports

user32

pdh

kernel32

advapi32

osuninst

pautoenr

panmap

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 74KB - Virtual size: 73KB

.data Size: 49KB - Virtual size: 6.1MB

.rsrc Size: 1024B - Virtual size: 1000B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 74KB - Virtual size: 73KB

.data
Size: 49KB - Virtual size: 6.1MB

.rsrc
Size: 1024B - Virtual size: 1000B

.reloc
Size: 2KB - Virtual size: 1KB