c77a7004013505db9f0e0ed7c9b0cac0f62b46d1e963f1ce4c9beee18134c909

Sharing

Copy URL Twitter E-mail

General

Target

c77a7004013505db9f0e0ed7c9b0cac0f62b46d1e963f1ce4c9beee18134c909
Size

92KB
MD5

49ec5368877b46d9f76da6dc02695247
SHA1

82f2693faf5a67e31bf9706afed5a6712cbffed5
SHA256

c77a7004013505db9f0e0ed7c9b0cac0f62b46d1e963f1ce4c9beee18134c909
SHA512

3a1b9280b4fac62709086b2b8a19dee8ebd8b330607c27e14e646249892a86ca44079bd68021514bc2d6b0ccd248b13f553bc2b52a7613efa0d0f43d45ab7b40
SSDEEP

1536:ZqiL6py0r7K27Mu5j2T6yR8QhmEKVDJ0puKI1daVmhJUwt:/wvr7Kuj2R89/Jj/xDUW

Score

N/A

Malware Config

Signatures

Files

c77a7004013505db9f0e0ed7c9b0cac0f62b46d1e963f1ce4c9beee18134c909
.exe windows x86

1d8ebddcfaec0dfdba91ed04158ec145

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

sprintf
_initterm
__set_app_type
__getmainargs
__setusermatherr
setlocale
_XcptFilter
exit
_controlfp
printf
__initenv
wprintf
_exit
_cexit
_c_exit

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW

kernel32

SetMessageWaitingIndicator
Process32First
GetCurrentProcess
lstrcmp
EnumSystemCodePagesA
GetSystemTime
FormatMessageW
CreateWaitableTimerW
DebugBreakProcess
CopyFileExW
IsBadStringPtrW
SetFileShortNameW
FreeLibraryAndExitThread
HeapSetInformation
GetVolumePathNameW
GetConsoleOutputCP
VirtualAlloc
DeleteVolumeMountPointA
GetCompressedFileSizeA
CreateMemoryResourceNotification
GetModuleHandleA
lstrcmpiA
QueueUserAPC
GetVersionExW
EnumSystemLocalesA
RemoveVectoredExceptionHandler
GetCurrentProcess
GlobalAlloc
GlobalHandle
DeviceIoControl
IsBadHugeReadPtr
FreeConsole
SetConsoleNumberOfCommandsA
GetProcessAffinityMask
SetThreadLocale
DeleteTimerQueueTimer
GetConsoleMode
GetUserDefaultLCID
WriteTapemark
AddAtomA
GetLongPathNameA
AddAtomW
GetDiskFreeSpaceExA
GetStringTypeExW
lstrcpy
GetThreadPriority
ReadConsoleOutputA
GetFileAttributesA
VirtualLock
EnumerateLocalComputerNamesW
GetStringTypeA
SetConsoleOutputCP
CompareStringA
GetOEMCP
BackupRead
CreateTimerQueue
LockFileEx
SetThreadLocale
GetTempPathW
DebugSetProcessKillOnExit
RegisterConsoleIME
SetThreadAffinityMask
SetVolumeMountPointW
ExpungeConsoleCommandHistoryW
SetConsoleNlsMode
GlobalSize
SetCommMask
GetCurrentThread
_hwrite
SetTimerQueueTimer

cfgmgr32

CM_Get_Global_State
CM_Add_ID_ExW
CM_Get_Device_IDA
CM_Get_Device_Interface_List_ExA
CM_Locate_DevNode_ExW
CM_Run_Detection_Ex
CM_Set_HW_Prof_Ex
CM_Get_Device_ID_List_ExA
CM_Get_Log_Conf_Priority_Ex
CM_Test_Range_Available
CM_Get_Resource_Conflict_Count
CM_Request_Eject_PC_Ex
CM_Create_DevNodeA
CM_Get_Depth_Ex
CM_Get_Class_Key_NameW
CM_Get_Hardware_Profile_InfoW
CM_Get_Depth
CM_Get_Device_Interface_List_SizeA
CM_Set_DevNode_Registry_PropertyW
CM_Delete_Class_Key
CMP_WaitServicesAvailable

Sections

.GoXz
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.N
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.cGKI
Size: 3KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.chR
Size: 3KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d8ebddcfaec0dfdba91ed04158ec145

Headers

File Characteristics

Imports

msvcrt

advapi32

kernel32

cfgmgr32

Sections

.GoXz Size: 1KB - Virtual size: 1KB

.N Size: 1KB - Virtual size: 1KB

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 3KB - Virtual size: 3KB

.cGKI Size: 3KB - Virtual size: 31KB

.data Size: 8KB - Virtual size: 63KB

.chR Size: 3KB - Virtual size: 36KB

.rsrc Size: 49KB - Virtual size: 48KB

.GoXz
Size: 1KB - Virtual size: 1KB

.N
Size: 1KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 3KB - Virtual size: 3KB

.cGKI
Size: 3KB - Virtual size: 31KB

.data
Size: 8KB - Virtual size: 63KB

.chR
Size: 3KB - Virtual size: 36KB

.rsrc
Size: 49KB - Virtual size: 48KB