b1072320aa6e1b7f87c331cd9751d90bd2b26fb9ba75a5a5d0f2582bf116ce75

Sharing

Copy URL Twitter E-mail

General

Target

b1072320aa6e1b7f87c331cd9751d90bd2b26fb9ba75a5a5d0f2582bf116ce75
Size

412KB
MD5

53eaf3de0ea9d497fed9f104f9699605
SHA1

5e69bb1cc10039420bc6cb84c26a05892b62b508
SHA256

b1072320aa6e1b7f87c331cd9751d90bd2b26fb9ba75a5a5d0f2582bf116ce75
SHA512

f1106809bc951f89e7669fc5dac51fb27c7b5256c9ebba9aa77848d503d75008a31b7659e9ee24f6dc68172999c2773db3e2b25107099affa970d593f0e7e6bc
SSDEEP

3072:F+twMaYWOC4v05kseY8/OIlJomO8jgHkTdtolknJDW8Y2L9sVgovleuw76FtRM:F+iBYWN5eWASgMETJtx6Z

Score

N/A

Malware Config

Signatures

Files

b1072320aa6e1b7f87c331cd9751d90bd2b26fb9ba75a5a5d0f2582bf116ce75
.dll windows x86

b8ae569c6180913224fb3fc2af422915

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupFindFirstLineW
SetupDiGetSelectedDriverW
SetupDiSetClassInstallParamsW
SetupDiCreateDeviceInfoList
SetupGetStringFieldW
SetupDiCallClassInstaller
SetupDiGetDriverInfoDetailW
SetupDiGetActualSectionToInstallW
SetupDiSetDeviceInstallParamsW
SetupOpenInfFileW
SetupDiGetDeviceInstanceIdW
CM_Get_Parent
SetupDiOpenDevRegKey
SetupDiGetDeviceInstallParamsW
SetupCloseInfFile
SetupDiGetClassInstallParamsW
SetupDiDestroyDeviceInfoList
CM_Set_DevNode_Problem
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
CM_Get_Device_IDW
SetupDiSetDeviceRegistryPropertyW
SetupDiOpenDeviceInfoW

lz32

LZOpenFileW
LZClose
LZCopy

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

shlwapi

PathRemoveFileSpecW
PathIsNetworkPathW
SHDeleteKeyW
PathStripToRootW
PathStripPathW
PathIsRelativeW
PathSkipRootW
PathAppendW

comctl32

CreatePropertySheetPageW

kernel32

FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
RaiseException
RtlUnwind
DeleteCriticalSection
GetEnvironmentStrings
ReadFile
SetEndOfFile
CreateFileA
LoadLibraryA
HeapSize
CreateFileW
InitializeCriticalSection
FreeEnvironmentStringsW
CopyFileW
GetModuleHandleW
FindNextFileW
MoveFileExW
CreateFileMappingW
CreateToolhelp32Snapshot
FindFirstFileW
GetFullPathNameW
GetCurrentThreadId
GetLastError
GetSystemWindowsDirectoryW
SetLastError
GetVersionExW
GetEnvironmentStringsW
GetProcAddress
RemoveDirectoryW
CloseHandle
GetEnvironmentVariableW
CreateDirectoryW
GetExitCodeProcess
GetTimeFormatW
MapViewOfFile
GlobalLock
GetWindowsDirectoryW
UnmapViewOfFile
WaitForSingleObject
GetFileAttributesW
DeleteFileW
GetCurrentProcessId
GlobalAlloc
GlobalFree
GetModuleFileNameW
Module32FirstW
GetSystemDirectoryW
FindClose
GetLocalTime
Process32NextW
LoadLibraryW
lstrcpyW
FreeLibrary
SetFileAttributesW
Process32FirstW
CreateMutexW
CreateProcessW
lstrcatW
GlobalUnlock
OutputDebugStringW
Sleep
GetTempPathW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetFilePointer
SetStdHandle
FlushFileBuffers
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetStringTypeA
GetStringTypeW
ReleaseMutex
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetConsoleCP
GetConsoleMode
GetLocaleInfoA

user32

GetSystemMetrics
LoadStringW
MessageBoxW
GetProcessWindowStation
GetUserObjectInformationW

advapi32

QueryServiceStatusEx
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegCloseKey
CloseServiceHandle
RegOpenKeyExW
RegDeleteValueW
OpenSCManagerW
OpenServiceW
RegCreateKeyExW
RegEnumKeyExW
StartServiceW
ControlService

shell32

SHGetFolderPathW

Exports

Exports

NVCoInstaller

Sections

.text
Size: 292KB - Virtual size: 289KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b8ae569c6180913224fb3fc2af422915

Headers

File Characteristics

Imports

setupapi

lz32

version

shlwapi

comctl32

kernel32

user32

advapi32

shell32

Exports

Exports

Sections

.text Size: 292KB - Virtual size: 289KB

.rdata Size: 76KB - Virtual size: 74KB

.data Size: 8KB - Virtual size: 16KB

.rsrc Size: 20KB - Virtual size: 18KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 292KB - Virtual size: 289KB

.rdata
Size: 76KB - Virtual size: 74KB

.data
Size: 8KB - Virtual size: 16KB

.rsrc
Size: 20KB - Virtual size: 18KB

.reloc
Size: 12KB - Virtual size: 9KB