b7d07ca2b5d378323a55b9cc79144322f1b5845fcb7264f7358d16c8285a8c78

Sharing

Copy URL Twitter E-mail

General

Target

b7d07ca2b5d378323a55b9cc79144322f1b5845fcb7264f7358d16c8285a8c78
Size

594KB
MD5

543d440fc197483910cbf566c7c0c9a7
SHA1

4b483e50b0745579565c507e69090c519f5ae7fb
SHA256

b7d07ca2b5d378323a55b9cc79144322f1b5845fcb7264f7358d16c8285a8c78
SHA512

48bffc32ce427cc44b44487f64093d9d8246262be0caa7180cb71abe8d8911d29243e81db989ca9810ba2d10cc66ac95357d654ed816fefc84e473b319feb6c5
SSDEEP

12288:cBnJ65WrGsC21eF5AHHilzPpkNsYJZvde1D3qjE:SosC21km66zZU1D3qj

Score

N/A

Malware Config

Signatures

Files

b7d07ca2b5d378323a55b9cc79144322f1b5845fcb7264f7358d16c8285a8c78
.dll windows x86

67797fbf0726a70646dd52f5ecb2712c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CopySid
CryptSetKeyParam
EqualSid
GetLengthSid
GetTokenInformation
ImpersonateLoggedOnUser
LookupAccountNameA
LookupAccountSidA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RevertToSelf
SystemFunction004

kernel32

CloseHandle
CopyFileA
CreateFileA
CreateProcessA
CreateToolhelp32Snapshot
DeleteFileA
EnterCriticalSection
ExitProcess
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLangID
GetWindowsDirectoryA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
Process32First
Process32Next
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA

setupapi

SetupCloseInfFile
SetupDiCallClassInstaller
SetupDiGetDriverInfoDetailA
SetupDiGetSelectedDriverA
SetupDiOpenDevRegKey
SetupDiSetClassInstallParamsA
SetupGetLineTextA
SetupOpenInfFileA

Exports

Exports

Concat
ExecCodeModuleEx
Get
GetDefaults
GetFlags
UnicodeFilename
write_end

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 209KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67797fbf0726a70646dd52f5ecb2712c

Headers

File Characteristics

Imports

advapi32

kernel32

setupapi

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 139KB

.rdata Size: 214KB - Virtual size: 214KB

.data Size: 209KB - Virtual size: 209KB

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 140KB - Virtual size: 139KB

.rdata
Size: 214KB - Virtual size: 214KB

.data
Size: 209KB - Virtual size: 209KB

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 14KB - Virtual size: 14KB