f7c6fd26c285aa8c42736c24de7a33b87587bf9459e074c06011a1ef15b883c7

Sharing

Copy URL Twitter E-mail

General

Target

f7c6fd26c285aa8c42736c24de7a33b87587bf9459e074c06011a1ef15b883c7
Size

281KB
MD5

cbb66068b2d8f5f85b60235635ed51c0
SHA1

f3d92aeb699147b631217e396248b2b730fc08da
SHA256

f7c6fd26c285aa8c42736c24de7a33b87587bf9459e074c06011a1ef15b883c7
SHA512

60ee2f4676fde3ea2adbf7b33a4cfed3b6d16fffa7f59ba34e3b0902cb749c617de6b2eced176b2cfd2ee46f514f581111732f5359faf8c77afdf9aee0421ae0
SSDEEP

3072:tyB2kxV8KdN/ihh/+yOm9Huvz6M/hgj+t8qD1OMCUVBLmgoPXpZgFmY3CUtfVscQ:Y2+GX9+a6GjGoMCYBLyDVJNFPUXNV

Score

N/A

Malware Config

Signatures

Files

f7c6fd26c285aa8c42736c24de7a33b87587bf9459e074c06011a1ef15b883c7
.dll windows x86

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemInfo
GetTickCount
GetUserDefaultLangID
GetWindowsDirectoryA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
GetCPInfo
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
Process32First
Process32Next
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
EnterCriticalSection
DeleteFileA
CreateToolhelp32Snapshot
CreateProcessA
CreateFileA
CopyFileA
LCMapStringW
CloseHandle

setupapi

SetupOpenInfFileA
SetupGetLineTextA
SetupDiOpenDevRegKey
SetupDiGetSelectedDriverA
SetupDiGetDriverInfoDetailA
SetupDiCallClassInstaller
SetupCloseInfFile

advapi32

DeleteAce
CopySid
AccessCheck
LookupAccountNameA
LookupAccountSidA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegSetValueExA
RevertToSelf
SystemFunction008
GetTokenInformation

Exports

Exports

Member2_GetOne
Update
mem_level
set_bgr

Sections

.text
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

Imports

kernel32

setupapi

advapi32

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 92KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 62KB - Virtual size: 63KB

.rsrc Size: 58KB - Virtual size: 57KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 92KB - Virtual size: 92KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 62KB - Virtual size: 63KB

.rsrc
Size: 58KB - Virtual size: 57KB

.reloc
Size: 10KB - Virtual size: 9KB