97bb57c2aba18e7b9e37f6e3288d9b376be6242cfb5c45c83863d7abbbe2d71a

General

Target

97bb57c2aba18e7b9e37f6e3288d9b376be6242cfb5c45c83863d7abbbe2d71a
Size

278KB
MD5

8196d26c986639b73de784fc2a2cc435
SHA1

92af03d06d2e9ea863eecaa032ff848be094f6a7
SHA256

97bb57c2aba18e7b9e37f6e3288d9b376be6242cfb5c45c83863d7abbbe2d71a
SHA512

3b67d293da78219b38beea92b283b1b78d46f35154687602ca12f47f83d67f2289f5c319011dc699d4f7bdcde1833e779a2f14976f6309963df3addca0442774
SSDEEP

6144:5iKhP5wRb6M1/vtsJpnhqLFsMmxalh7ynM4dV0CDkcLEGW6zUO+:cKNeB6/WeMmxsJcM4dVRDRRB

Score

N/A

Malware Config

Signatures

Files

97bb57c2aba18e7b9e37f6e3288d9b376be6242cfb5c45c83863d7abbbe2d71a
.exe windows x86

277cab2336735a0689c4b5125ead1bf8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileType
GetStringTypeW
FindFirstFileA
AddAtomW
GetFullPathNameA
IsBadReadPtr
GetThreadLocale
GetFileAttributesA
GetCPInfo
GetOEMCP
GetEnvironmentStringsW
CreateFileA
TerminateProcess
GetACP
GetEnvironmentStrings
LCMapStringA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TlsSetValue
EnumResourceNamesA
FlushFileBuffers
ReadFile
SetFilePointer
GetVersionExA
GetStdHandle
GetStartupInfoA
SetStdHandle
HeapSize
VirtualProtect
WideCharToMultiByte
GetStringTypeA
WriteFileGather
IsBadCodePtr
WriteFile
GetCurrentProcess
GetModuleFileNameA
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TlsGetValue
GetLocaleInfoA
SetHandleCount
LCMapStringW
GetDiskFreeSpaceA

advapi32

RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey

lz32

LZClose
LZCopy
LZOpenFileA

setupapi

CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 144KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

277cab2336735a0689c4b5125ead1bf8

Headers

File Characteristics

Imports

kernel32

advapi32

lz32

setupapi

Sections

.text Size: 144KB - Virtual size: 272KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 130KB - Virtual size: 130KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 272KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 130KB - Virtual size: 130KB

.rsrc
Size: 512B - Virtual size: 4KB