5e97c40c7783b129437d8ea09c9fccff9db91b90f9021212276a32111db61105

Sharing

Copy URL Twitter E-mail

General

Target

5e97c40c7783b129437d8ea09c9fccff9db91b90f9021212276a32111db61105
Size

313KB
MD5

11a04a65fd590dada62489c6c9b00b50
SHA1

50fa659ddb53c66c1da89c0a847e23b06d56f160
SHA256

5e97c40c7783b129437d8ea09c9fccff9db91b90f9021212276a32111db61105
SHA512

78eb637f96b5edb236ea56fe72d8013801c867ba236dc24e04b05e699c78dbe2748858bd41096ab59328d52e0920b176dee2a6d93da65ce91c7ec58346e32ac3
SSDEEP

6144:1pn3eWTuIoM0rVnuVUmIioN2cl2sWGgklNVzXlxJtmH3KWHftRK:1hejI2VnuamIioNll2sRgklN3tM/FRK

Score

N/A

Malware Config

Signatures

Files

5e97c40c7783b129437d8ea09c9fccff9db91b90f9021212276a32111db61105
.exe windows x86

0d3f325033187b591242d9a7431cee54

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeFormatW
LoadLibraryA
AddLocalAlternateComputerNameA
BuildCommDCBAndTimeoutsW
CancelTimerQueueTimer
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetEnvironmentStringsW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
EncodePointer
GetModuleFileNameW
GetStdHandle
WriteFile
HeapCreate
RaiseException
GetStartupInfoW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
IsProcessorFeaturePresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
HeapReAlloc
LCMapStringW
GetStringTypeW
lstrcpyA
LocalFree
HeapAlloc
GlobalFree
GetProcAddress
lstrcmpiA
GetLastError
GlobalUnlock
lstrlenW
MultiByteToWideChar
ExitThread
CreateEventA
Sleep
LoadLibraryW
GlobalAlloc
GetProcessHeap
GetTickCount
GetModuleHandleW
GlobalLock
HeapSetInformation
GetCommandLineA
DecodePointer
ExitProcess

setupapi

SetupDiGetDeviceInterfaceDetailW
SetupDiGetDriverInstallParamsW
SetupDiOpenClassRegKeyExA
SetupDiSetSelectedDriverW
SetupFindFirstLineW
SetupGetLineCountW
SetupIterateCabinetW
SetupQuerySourceListW
SetupQueueDeleteSectionW

user32

SetDlgItemTextA
GetMessageA
GetClassNameA
SetTimer
GetWindowRect
RegisterClassExA
TrackPopupMenu
IsClipboardFormatAvailable
GetParent
LoadMenuA
LoadIconA
GetClientRect
CreateMenu
SetFocus
SendMessageA

ole32

CoCreateInstance

Sections

.text
Size: 256B - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d3f325033187b591242d9a7431cee54

Headers

File Characteristics

Imports

kernel32

setupapi

user32

ole32

Sections

.text Size: 256B - Virtual size: 128KB

.rdata Size: 188KB - Virtual size: 192KB

.data Size: 1KB - Virtual size: 4KB

DATA Size: 8KB - Virtual size: 8KB

.rsrc Size: 39KB - Virtual size: 40KB

.text
Size: 256B - Virtual size: 128KB

.rdata
Size: 188KB - Virtual size: 192KB

.data
Size: 1KB - Virtual size: 4KB

DATA
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 39KB - Virtual size: 40KB