666b704379bc97f88f6bee995b07d9fd650504dd0a16efcc7cad33a0a49be95c

Sharing

Copy URL Twitter E-mail

General

Target

666b704379bc97f88f6bee995b07d9fd650504dd0a16efcc7cad33a0a49be95c
Size

137KB
MD5

9d08ed2458873c7caced9358f045d96c
SHA1

09fadd2c49ecf313f2e8a82f760e075c9830aa1c
SHA256

666b704379bc97f88f6bee995b07d9fd650504dd0a16efcc7cad33a0a49be95c
SHA512

0c7d9074120d8730c3fa9385e18a49f12495fab1c13ec93e3da5f27dc89ec7f4372f140ab8faec45867cf776848eb25e2dc5e7e1661f9de0b3ceea5b0cc0200d
SSDEEP

3072:s13GIHQjFOwWyMc9SGD3QZyOHbUF7c/UPdnfI21CMxFPjHEXup4EwRUtDCUt0:Q7HQjFOw3McoWoyOHYq4fI21JHEXibt

Score

N/A

Malware Config

Signatures

Files

666b704379bc97f88f6bee995b07d9fd650504dd0a16efcc7cad33a0a49be95c
.exe windows x86

d0fb82e6806f0622ecccb8f72043c6b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteW
SHOpenFolderAndSelectItems

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

ole32

CoCreateInstance

oleaut32

SysFreeString
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayLock
SafeArrayUnlock
SysAllocString
SysAllocStringByteLen
SysAllocStringLen
SysStringByteLen
SysStringLen
LoadRegTypeLi
LoadTypeLi
VariantInit
VariantCopy
VariantClear
VariantChangeType
SafeArrayCopy

shlwapi

PathFindFileNameW

advapi32

RegQueryInfoKeyW
RegOpenKeyExW
RegOpenCurrentUser
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
LsaNtStatusToWinError
RegQueryValueExW

setupapi

CM_Get_Device_IDW
SetupDiDeleteDeviceInfo
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiSetSelectedDevice
SetupDiSetSelectedDriverW
SetupGetFieldCount
SetupGetStringFieldW
CM_Get_DevNode_Status

kernel32

SetHandleCount
SetFilePointer
SetEvent
SetEnvironmentVariableA
RtlUnwind
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
SetLastError
OutputDebugStringW
MultiByteToWideChar
MoveFileW
LockResource
LoadResource
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidLocale
IsValidCodePage
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
lstrlenW
QueryPerformanceCounter
GetCPInfo
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
CloseHandle
CompareStringA
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExpandEnvironmentStringsW
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsW
GetFileAttributesW
GetFileSizeEx
GetFileType
GetGeoInfoW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetUserGeoID
GetVersionExW

Sections

.text
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0fb82e6806f0622ecccb8f72043c6b7

Headers

DLL Characteristics

File Characteristics

Imports

shell32

version

ole32

oleaut32

shlwapi

advapi32

setupapi

kernel32

Sections

.text Size: 33KB - Virtual size: 33KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 33KB - Virtual size: 33KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 3KB - Virtual size: 3KB