c299b4e5748d32e15714128e109134c1fa0ce57622a2a7bbae5395f6809637be

Sharing

Copy URL

Twitter E-mail

General

Target

c299b4e5748d32e15714128e109134c1fa0ce57622a2a7bbae5395f6809637be
Size

174KB
MD5

ae140d3c6cb890ab4da8097db69cf751
SHA1

5f9ef857668948d3b2c7fe00babdaa65d9489cbe
SHA256

c299b4e5748d32e15714128e109134c1fa0ce57622a2a7bbae5395f6809637be
SHA512

87e7db4fe05bc97353f0837a92f957b601c291f359caa20ee493c334b0b0c82238ddbb496752f8b380ffbfe37c5ba81d572815e1ae119480f628c36f6451a0b8
SSDEEP

3072:O3hajomxy4l41KAdnrkEwQZnm2TchyqvYCdShifdzExbf:ORajo34l4tBn8YolExb

Score

N/A

Malware Config

Signatures

Files

c299b4e5748d32e15714128e109134c1fa0ce57622a2a7bbae5395f6809637be
.exe windows x86

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoInitialize
CoCreateInstance

advapi32

RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
LsaNtStatusToWinError
NotifyBootConfigStatus
RegCloseKey
RegEnumValueW
RegOpenCurrentUser

user32

SetTimer
PostQuitMessage
GetMessageW

setupapi

SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiGetSelectedDriverW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiDeleteDeviceInfo
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Free_Log_Conf_Ex
CM_Add_Empty_Log_Conf_Ex
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupGetFieldCount
SetupGetStringFieldW
SetupUninstallOEMInfW
SetupDiOpenClassRegKey

oleaut32

SysFreeString
VariantInit
VariantClear
VariantChangeType
VarCyMul
SysStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy

kernel32

_llseek
GetLocaleInfoA
WriteFileEx
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitForSingleObject
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SystemTimeToTzSpecificLocalTime
Sleep
SizeofResource
SignalObjectAndWait
SetStdHandle
SetProcessShutdownParameters
SetFilePointer
SetCurrentDirectoryW
RtlUnwind
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
OpenProcess
MoveFileW
Module32FirstW
MapViewOfFile
LocalFree
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringA
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteFileW
DeviceIoControl
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FindNextFileW
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeThread
GetFileAttributesW
GetFileSizeEx
GetFileType
GetLastError
IsValidLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GlobalHandle
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent

shlwapi

PathFindFileNameW

rpcrt4

RpcMgmtStopServerListening
RpcMgmtWaitServerListen
NdrServerCall2
RpcAsyncRegisterInfo
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcServerRegisterIfEx

shell32

SHFreeNameMappings
SHCreateDirectoryExW
SHAddToRecentDocs
SHGetDesktopFolder

Exports

Exports

ADeviceGetCaps
ASet
BeginTransaction
CreateQuery
DeleteTable
ExternalRestore
FInitializeRichEdit
GenerateUniqueFileName
PSTGetData
PVGetCertificateParam
PrepareUpdate
TruncateLog

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

user32

setupapi

oleaut32

kernel32

shlwapi

rpcrt4

shell32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 96KB - Virtual size: 96KB

.data Size: 19KB - Virtual size: 19KB

.rsrc Size: 512B - Virtual size: 500B

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 96KB - Virtual size: 96KB

.data
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 512B - Virtual size: 500B