68d5eb8b59e69e07bcfa775030add4c9e6b17e9325d937d2dcb61440e784a29d

General

Target

68d5eb8b59e69e07bcfa775030add4c9e6b17e9325d937d2dcb61440e784a29d
Size

168KB
MD5

72ad2af02c98068de5fd9f9ae2c5b750
SHA1

5341c15b87010fc091e73ffb4e8211a4c47ce0e2
SHA256

68d5eb8b59e69e07bcfa775030add4c9e6b17e9325d937d2dcb61440e784a29d
SHA512

a2ae8868bda7c662bbfbdc819515112a37ed4844258dd43726aa4ab542f534cf1d9e6be104764d6418456e9ad3372a2b7c106fdfbd6fd7d63c17a70ff117d093
SSDEEP

3072:a5grX5SZB/mwd2cPGh1b530jv/8TxdLACyum23iIp3cOdAHbbmnzJ9N6HT:atBmw/YdkjMTxd3hmavp3cOkbbmzD4

Score

N/A

Malware Config

Signatures

Files

68d5eb8b59e69e07bcfa775030add4c9e6b17e9325d937d2dcb61440e784a29d
.exe windows x86

3a8f1fbc2379ac67da7fed1077fa4db8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
CreateEventA
CreateSemaphoreA
GetCommandLineA
GetVersionExA
GetTickCount
GetCurrentThread
HeapAlloc
GetModuleFileNameA
FindClose
InterlockedExchange
LocalFree
ExitProcess
FlushFileBuffers
WideCharToMultiByte
SetLastError
EnterCriticalSection
MultiByteToWideChar
LoadLibraryA
GetCurrentProcess
WaitForSingleObject
SetUnhandledExceptionFilter
GetModuleHandleW
TlsSetValue
LeaveCriticalSection
InitializeCriticalSection
ReadFile
SetFilePointer
DeleteCriticalSection
FreeLibrary
GetEnvironmentStrings
GetCurrentProcessId
GetStdHandle
GetProcAddress

setupapi

SetupOpenAppendInfFileA

Sections

.text
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.code
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 466KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a8f1fbc2379ac67da7fed1077fa4db8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 4KB - Virtual size: 1KB

.code Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 1KB

.data Size: 148KB - Virtual size: 466KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 4KB - Virtual size: 1KB

.code
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 1KB

.data
Size: 148KB - Virtual size: 466KB

.reloc
Size: 4KB - Virtual size: 3KB