b165802eb8041b8bd060c07ba786484953e91cbb796cc06e5417733199d59920

General

Target

b165802eb8041b8bd060c07ba786484953e91cbb796cc06e5417733199d59920
Size

280KB
MD5

a7e5f7a1dcd49567a857df8c85a016e3
SHA1

561643bc7634ca78f358bd663afceebf130ada02
SHA256

b165802eb8041b8bd060c07ba786484953e91cbb796cc06e5417733199d59920
SHA512

fb126318d28ae5ea5c33027aee0b4cdf4c7f98fb9f0261c7ef772f78f571e97b5b162d935babbff4ad2afd1df67c97d0b38e92bedbc6274ae28542eb085b6782
SSDEEP

6144:kjv6Vee73n+Nv0AG9U5I+mqWgAhPlhHGSNMiQrQmbK8LdKFnRK:a63uNvmUeWAheKOT2/nRK

Score

N/A

Malware Config

Signatures

Files

b165802eb8041b8bd060c07ba786484953e91cbb796cc06e5417733199d59920
.exe windows x86

b3d19dccdf1d57f6bfee182413c82062

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

shell32

SHGetFolderPathW

kernel32

GetFileAttributesW
DeviceIoControl
FindAtomW
ReleaseMutex
ResumeThread
OpenThread
SetPriorityClass
CreateDirectoryW
SetThreadPriority
QueryPerformanceCounter
GetExitCodeThread
OutputDebugStringW
ExitProcess
GetTickCount
CopyFileW
GetDriveTypeW
LoadResource
EnumResourceLanguagesW
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
FindNextFileW
GetConsoleCommandHistoryW
CreateFileW
FindClose
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCommandLineW
GetModuleHandleA
LoadLibraryExW
DeleteFileW
GetStartupInfoW
FindFirstFileW
FindResourceW

setupapi

CM_Get_Sibling
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyA
CM_Get_DevNode_Status

gdi32

DeleteObject

advapi32

RegEnumKeyExW
OpenServiceW
OpenProcessToken
CloseServiceHandle
RegisterEventSourceW
DeleteService
ControlService
OpenThreadToken
ReportEventW
DeregisterEventSource
SetServiceStatus
OpenSCManagerW
CreateServiceW

Sections

.text
Size: 136KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b3d19dccdf1d57f6bfee182413c82062

Headers

File Characteristics

Imports

shell32

kernel32

setupapi

gdi32

advapi32

Sections

.text Size: 136KB - Virtual size: 268KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 140KB - Virtual size: 139KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 136KB - Virtual size: 268KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 140KB - Virtual size: 139KB

.rsrc
Size: 512B - Virtual size: 4KB