a4651c030d20f97245d32fd83fd4d2ef4e95f6ab673a15703fef3044efdd6c9d

Sharing

Copy URL

Twitter E-mail

General

Target

a4651c030d20f97245d32fd83fd4d2ef4e95f6ab673a15703fef3044efdd6c9d
Size

457KB
MD5

097e1442f119616946293167acf54e82
SHA1

f83571ca91f7d79a4bc691ddb1a68d5ee144760e
SHA256

a4651c030d20f97245d32fd83fd4d2ef4e95f6ab673a15703fef3044efdd6c9d
SHA512

11052d51833fe799a8068a33ea2fb86ecc1237961bcf2d77dea74333f8e5f5073f4bb20937a54c2d7b8e7f5cc1f1a12337d1cba83b763bc1fbca5d3b940006b9
SSDEEP

12288:Klj1429y58dYq0/pS0NWbD2vGiETNjSxV:Y142daq0hSVDuaN

Score

N/A

Malware Config

Signatures

Files

a4651c030d20f97245d32fd83fd4d2ef4e95f6ab673a15703fef3044efdd6c9d
.dll windows x86

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupTermDefaultQueueCallback
SetupQueueCopyW
SetupQueueCopyIndirectW
SetupPromptReboot
SetupOpenInfFileW
SetupOpenAppendInfFileW
SetupInstallFromInfSectionW
SetupInstallFilesFromInfSectionW
SetupInitDefaultQueueCallbackEx
SetupGetTargetPathW
SetupGetStringFieldW
SetupGetLineCountW
SetupGetIntField
SetupGetFieldCount
SetupFindNextLine
SetupDiSetSelectedDevice
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiOpenClassRegKey
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDefaultQueueCallbackW
SetupCopyOEMInfW
SetupCommitFileQueueW
SetupCloseInfFile
SetupCloseFileQueue
CM_Setup_DevNode
CM_Locate_DevNodeW
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Enumerate_Classes

kernel32

lstrcmpiW
WriteFile
WriteConsoleW
CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EnterCriticalSection
EnumResourceLanguagesW
ExitProcess
FillConsoleOutputCharacterW
FindClose
FindNextFileW
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetDevicePowerState
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempFileNameW
GetThreadLocale
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
WriteConsoleOutputW
LocalReAlloc
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleOutputW
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetWriteWatch
SearchPathW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
UnregisterWait
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
LocalAlloc

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdi32

Polyline
GetTextMetricsW
GetObjectW
GetDeviceCaps
EndPage
DeleteObject
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
StartDocW
StartPage
SetBkMode

advapi32

SetEntriesInAclW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
QueryServiceStatus
OpenServiceW
OpenSCManagerW
OpenProcessToken
LsaLookupPrivilegeValue
IsTextUnicode
InitializeSecurityDescriptor
GetTokenInformation
GetLengthSid
FreeSid
DeleteService
ControlService
CloseServiceHandle
AllocateAndInitializeSid
AddAccessDeniedAce
StartServiceW
SetTraceCallback
SetSecurityDescriptorDacl

user32

AllowSetForegroundWindow
AnimateWindow
CharLowerW
CheckDlgButton
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DestroyIcon
DialogBoxParamW
DrawTextExW
EndDialog
GetDC
GetIconInfo
GetProcessWindowStation
GetSysColor
GetSystemMetrics
GetUserObjectInformationW
IsDlgButtonChecked
LoadBitmapW
LoadIconW
LoadImageW
MessageBoxW
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
ShowWindow
SystemParametersInfoW

shell32

ShellHookProc
ShellExecuteExW
SHGetFolderPathW

Exports

Exports

GetGlobals
RestoreThread
ToContiguous
WriteLongToFile

Sections

.text
Size: 103KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

Imports

setupapi

kernel32

version

gdi32

advapi32

user32

shell32

Exports

Exports

Sections

.text Size: 103KB - Virtual size: 103KB

.rdata Size: 217KB - Virtual size: 216KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 22KB - Virtual size: 21KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 103KB - Virtual size: 103KB

.rdata
Size: 217KB - Virtual size: 216KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 22KB - Virtual size: 21KB

.reloc
Size: 5KB - Virtual size: 5KB