7f9a3a93722609d8d98730004d92faecd53444d27e1ff911d67fc6b1a6db656d

Sharing

Copy URL Twitter E-mail

General

Target

7f9a3a93722609d8d98730004d92faecd53444d27e1ff911d67fc6b1a6db656d
Size

327KB
MD5

7e2a363681be53b2dcf0eedbc38db23f
SHA1

17feff7a4a7c3e6217458c8c08b1486636d59228
SHA256

7f9a3a93722609d8d98730004d92faecd53444d27e1ff911d67fc6b1a6db656d
SHA512

dc6e36b94ba9c1116b033ae738cd7a954b7ab2c1a0e5f8c10c9f2fcdce4b6debdfcd23fd184ec26f962410a72610f63cdbd1d355db35141cf6facee597b76c56
SSDEEP

6144:H3MVk9U3mgJukP+2Ucpn5qAKP1UkrMhcOIk8kRL5YejF:sCU0aZLLqEkrMhct8OUF

Score

N/A

Malware Config

Signatures

Files

7f9a3a93722609d8d98730004d92faecd53444d27e1ff911d67fc6b1a6db656d
.exe windows x86

d0bfd0c37d417a5a0fb1a3e65b206772

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFileInfoA

kernel32

GetThreadLocale
LocalFree
IsDBCSLeadByte
FindResourceExA
GetCurrentThreadId
GetProcessHeap
lstrcpynA
HeapDestroy
LockResource
lstrlenA
lstrlenW
HeapAlloc
HeapReAlloc
LeaveCriticalSection
FindResourceA
HeapFree
DeleteCriticalSection
SizeofResource
HeapSize
RaiseException
FormatMessageA
RemoveDirectoryA
GetModuleHandleA
lstrcatA
EnterCriticalSection
DeleteFileA
LoadResource
lstrcmpiA
GetSystemTimeAsFileTime
lstrcpyA
WideCharToMultiByte
GetACP
GetCurrentProcessId
VirtualAllocEx

shlwapi

PathFindExtensionA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegDeleteKeyA

oleaut32

UnRegisterTypeLi
SysAllocString
LoadRegTypeLi
VariantClear
VariantChangeType
VariantInit
VarUI4FromStr
LoadTypeLi
RegisterTypeLi
SysAllocStringLen
SysStringLen
SysFreeString

user32

CharNextA

ole32

CoCreateInstance
StringFromGUID2
CoTaskMemFree
StringFromCLSID

comctl32

ImageList_LoadImageW
ImageList_SetBkColor
ImageList_Remove
LBItemFromPt
CreatePropertySheetPage
ImageList_DragShowNolock
ImageList_DragEnter
ImageList_SetFilter

syssetup

AsrRestorePlugPlayRegistryData
AsrCreateStateFileW
SetupSetDisplay
AsrAddSifEntryW
AsrAddSifEntryA
SetupInfObjectInstallActionW
AsrCreateStateFileA

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 295KB - Virtual size: 913KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0bfd0c37d417a5a0fb1a3e65b206772

Headers

File Characteristics

Imports

shell32

kernel32

shlwapi

advapi32

oleaut32

user32

ole32

comctl32

syssetup

Sections

.text Size: 17KB - Virtual size: 16KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 295KB - Virtual size: 913KB

.rsrc Size: 11KB - Virtual size: 10KB

.text
Size: 17KB - Virtual size: 16KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 295KB - Virtual size: 913KB

.rsrc
Size: 11KB - Virtual size: 10KB