fd6a29795864be6895b1e830219de95cdf7cc6b3a6679749e2108520a5068d94

General

Target

fd6a29795864be6895b1e830219de95cdf7cc6b3a6679749e2108520a5068d94
Size

268KB
MD5

d389164f912d14f973c23fcd1a41b78d
SHA1

16b012b132bd72299c65ecf8719c328c6f4d1206
SHA256

fd6a29795864be6895b1e830219de95cdf7cc6b3a6679749e2108520a5068d94
SHA512

589a1e45c326ab703a5c029999953da793579e0c96fb158c5d6fc5d0f837369057521fb23c88835874b46c224cae7e3c1063bb418dd9d06cb0feb0ed04080ec3
SSDEEP

6144:wH6+w4pSb/m7mWdXnrYJpwH9dsFIujPDL+kNrRWGxs:GZgb+7mWJYJpy9DujdNrRBx

Score

N/A

Malware Config

Signatures

Files

fd6a29795864be6895b1e830219de95cdf7cc6b3a6679749e2108520a5068d94
.exe windows x86

19652999371ccfdb85b89ab616fe090c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
SetFilePointer
AddAtomA
LoadLibraryA
UnhandledExceptionFilter
GetEnvironmentStringsW
FindFirstFileA
DeleteCriticalSection
Sleep
SetUnhandledExceptionFilter
GetCPInfo
CreateFileA
LCMapStringA
MultiByteToWideChar
lstrcmpA
WriteFile
FlushFileBuffers
EnterCriticalSection
IsBadReadPtr
FreeEnvironmentStringsA
LeaveCriticalSection
lstrlenA
EnumResourceNamesW
GetProcAddress
FreeEnvironmentStringsW
VirtualProtect
lstrcpynA
GetStartupInfoA
GetLastError
CloseHandle
MulDiv
InitializeCriticalSection
WideCharToMultiByte
GetFileAttributesA
GetTickCount
GetEnvironmentStrings
GetStringTypeW
GetDiskFreeSpaceA
lstrlenA
GetThreadLocale
GetOEMCP
GetStringTypeA
FreeLibrary
IsBadCodePtr
lstrcmpiA
GetModuleHandleA
GetCurrentThreadId
LCMapStringW
lstrcatA
GetFullPathNameA
SetStdHandle
ReadFile
RaiseException

setupapi

CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 132KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19652999371ccfdb85b89ab616fe090c

Headers

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 132KB - Virtual size: 276KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 132KB - Virtual size: 132KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 132KB - Virtual size: 276KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 132KB - Virtual size: 132KB

.rsrc
Size: 512B - Virtual size: 4KB