8271bbe2bbbbeabe8fe982437f1c0b6ec5b7f78a0745b0b2348b95382ae12d4b

General

Target

8271bbe2bbbbeabe8fe982437f1c0b6ec5b7f78a0745b0b2348b95382ae12d4b
Size

174KB
MD5

ca8f3108e5fc2384cabf627d961c9464
SHA1

101dbdf895f3ae7118e0c2ee0159af87afaa19e9
SHA256

8271bbe2bbbbeabe8fe982437f1c0b6ec5b7f78a0745b0b2348b95382ae12d4b
SHA512

6f1816fbc392eebfa5217a00f926aff8a0754571eab8e12339d7287197d9a0ce33dce0097ccd46103429d67392ed09afb8fa3c1e58572b78cdd4ac5c80c49336
SSDEEP

3072:Xiha/k44AvkD8hzZDx6fmScMb6L7qX7tXNW3B/IsdjBii8sRrmxQ/HgFSk8BNZLO:yha/ku1JRx6vHmvq5XNEhPvkxMq98LZy

Score

N/A

Malware Config

Signatures

Files

8271bbe2bbbbeabe8fe982437f1c0b6ec5b7f78a0745b0b2348b95382ae12d4b
.exe windows x86

3b6d8b472dfedf3ffb929a990bebc82d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegCloseKey

kernel32

GlobalFree
WaitForSingleObject
GetModuleFileNameW
DeviceIoControl
GetLastError
GetTempFileNameA
GlobalLock
AddAtomW
Sleep
DisableThreadLibraryCalls
ReadFile
CloseHandle
GetModuleFileNameA
GetVolumeInformationA
CopyFileA
SetFileAttributesA
InterlockedDecrement
GetTempPathA
GetSystemTime
GetVersionExA
GetSystemTimeAsFileTime
GetFileSize
InterlockedIncrement
CreateDirectoryA
ReleaseMutex
EnumResourceNamesA
CreateMutexA
GlobalUnlock
LocalAlloc
WideCharToMultiByte
InitializeCriticalSection
GetFileAttributesA
DeleteFileA
DeleteCriticalSection
CreateFileA
LocalFree
GetCurrentThreadId
FindResourceA
QueryPerformanceCounter
GetTickCount
lstrlenA
SetFilePointer
GetCurrentProcessId
MultiByteToWideChar
CreateFileW
VirtualAlloc
VirtualFree
FreeLibrary

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

lz32

LZClose
LZCopy
LZOpenFileA

Sections

.text
Size: 95KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b6d8b472dfedf3ffb929a990bebc82d

Headers

File Characteristics

Imports

advapi32

kernel32

setupapi

lz32

Sections

.text Size: 95KB - Virtual size: 238KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 75KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 95KB - Virtual size: 238KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 75KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB