fb5aa0e89c3901d1874f108d4e88f6a361d1d382520fbaf449fae940f234d89a

General

Target

fb5aa0e89c3901d1874f108d4e88f6a361d1d382520fbaf449fae940f234d89a
Size

162KB
MD5

06ea4f5576edf3e6ed95d11b66d20097
SHA1

9617e27319b9bea52ce36162d739be8c22ffb165
SHA256

fb5aa0e89c3901d1874f108d4e88f6a361d1d382520fbaf449fae940f234d89a
SHA512

02c8acd94bd76bf4dda393b1923693fdcb34bad9d57b12927caef8a1d1141b2ead87973c11d910a38063b9692271e9495506cc805b57665d9dfce0ff93c7c096
SSDEEP

3072:O/hRUn47ZlMJZpzwqPKCa0EzAbtnEFzl+Jk4R4HhP2p5uoTH7oaEBMv:GC4zMJZJMT0EzInAxoewp5mU

Score

N/A

Malware Config

Signatures

Files

fb5aa0e89c3901d1874f108d4e88f6a361d1d382520fbaf449fae940f234d89a
.exe windows x86

76a75865ab9d8313cf347caabc3cde1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStringsW
lstrcatA
WriteFile
IsBadCodePtr
AddAtomA
IsBadReadPtr
GetStringTypeA
LCMapStringA
WideCharToMultiByte
ReadFile
SetUnhandledExceptionFilter
FindFirstFileA
GetEnvironmentStrings
GetLastError
UnhandledExceptionFilter
GetOEMCP
GetFileAttributesA
GetStartupInfoA
GetStringTypeW
lstrlenA
LeaveCriticalSection
SetStdHandle
VirtualProtect
FreeEnvironmentStringsA
GetTickCount
MulDiv
lstrcmpA
FreeLibrary
InitializeCriticalSection
EnumResourceNamesW
lstrcpyA
lstrcmpiA
GetDiskFreeSpaceA
CreateFileA
EnterCriticalSection
Sleep
GetThreadLocale
lstrlenA
GetCurrentThreadId
LoadLibraryA
DeleteCriticalSection
MultiByteToWideChar
GetModuleHandleA
GetProcAddress
GetCPInfo
lstrcpynA
FreeEnvironmentStringsW
GetFullPathNameA
SetFilePointer
CloseHandle
LCMapStringW
FlushFileBuffers
RaiseException

setupapi

CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 79KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

76a75865ab9d8313cf347caabc3cde1a

Headers

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 79KB - Virtual size: 487KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 79KB - Virtual size: 78KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 79KB - Virtual size: 487KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 79KB - Virtual size: 78KB

.rsrc
Size: 512B - Virtual size: 4KB