f7ae2f8f20dc34e078f53bd01f204d923abbfe68a3bd40971ca13d259fb83079

Sharing

Copy URL Twitter E-mail

General

Target

f7ae2f8f20dc34e078f53bd01f204d923abbfe68a3bd40971ca13d259fb83079
Size

151KB
MD5

fb607ee8a54a24ff72b324ac5c1693e2
SHA1

d2793275fa0cdbb2086bd6400aab311e51307ef8
SHA256

f7ae2f8f20dc34e078f53bd01f204d923abbfe68a3bd40971ca13d259fb83079
SHA512

7719d4e00a2f456641b29822de2fbef16d6d03c7e142ec8b3e45578eeabd82d1017952663c3232d3636cd142c17132bd081a92cef3ed35f1ed0f38ce069493ad
SSDEEP

3072:Q7caUmEWLbl54NTdax5S2yVyDib4mfvhwmly/Xcn3m9SPDm+g6:QrUmEWflW4byVyGh5lH3m9S7m+g6

Score

N/A

Malware Config

Signatures

Files

f7ae2f8f20dc34e078f53bd01f204d923abbfe68a3bd40971ca13d259fb83079
.exe windows x86

8358b810ecdf3e97ff2b4181f5066ec1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetDeviceRegistryPropertyW
CM_Get_Child
CM_Get_Depth
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDA
CM_Get_Device_ID_Size
CM_Get_First_Log_Conf
CM_Get_Parent
CM_Get_Sibling
CM_Locate_DevNodeA
CM_Move_DevNode_Ex
CM_Request_Device_EjectW
CM_Set_HW_Prof
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoList
SetupDiDeleteDeviceInterfaceData
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiEnumDriverInfoW
SetupDiGetClassDevsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupOpenFileQueue
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
CM_Add_Res_Des
SetupDiSetDeviceInterfaceDefault
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoA

user32

MsgWaitForMultipleObjectsEx
PeekMessageA
UnregisterDeviceNotification
MessageBoxW
GetUpdateRect
CharUpperA

shell32

SHGetFolderPathW

ws2_32

WSAAccept
WSAAsyncGetServByPort
WSAGetLastError
__WSAFDIsSet
accept
bind
connect
getsockname
getsockopt
inet_addr
ioctlsocket
recv
select

ole32

CLSIDFromString
CoCreateInstance
CoCreateObjectInContext
CoInitialize
CoQueryProxyBlanket
CoSetProxyBlanket
CoUninitialize
HBRUSH_UserMarshal

kernel32

lstrlenW
lstrcmpiA
_lopen
_lcreat
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFreeEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
TryEnterCriticalSection
TlsSetValue
TlsGetValue
TlsAlloc
TerminateThread
Sleep
SizeofResource
SignalObjectAndWait
SetUnhandledExceptionFilter
SetThreadPriorityBoost
SetLastError
SetFilePointer
SetEvent
Beep
CloseHandle
ConnectNamedPipe
CreateFileA
CreateFileMappingA
CreateNamedPipeW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
EraseTape
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeLibrary
GetACP
GetCommMask
GetComputerNameExW
GetConsoleFontSize
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetHandleInformation
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNamedPipeHandleStateA
GetOverlappedResult
GetProcAddress
GetShortPathNameW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVolumeInformationW
HeapDestroy
HeapUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
Module32FirstW
MoveFileW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadFileScatter
RemoveDirectoryW
ResetEvent
SetCommBreak
SetEndOfFile

advapi32

SystemFunction015
SystemFunction011
StartServiceCtrlDispatcherA
SetServiceStatus
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
SetEntriesInAclW
RevertToSelf
ReportEventW
RegisterEventSourceW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
OpenServiceW
OpenSCManagerW
MapGenericMask
LsaLookupSids
LsaGetQuotasForAccount
IsValidSid
InitializeSecurityDescriptor
ImpersonateSelf
ImpersonateNamedPipeClient
GetUserNameW
GetTokenInformation
GetNamedSecurityInfoW
GetFileSecurityW
GetExplicitEntriesFromAclW
FreeSid
FreeEncryptionCertificateHashList
EqualSid
DeregisterEventSource
DeleteService
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CreateServiceW
ConvertToAutoInheritPrivateObjectSecurity
CloseServiceHandle
AllocateAndInitializeSid
AccessCheck

Exports

Exports

AGetStreamInfo
AddState
HrLPSZToBSTR
PszDupW
UpdateTexturePriority

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 877B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8358b810ecdf3e97ff2b4181f5066ec1

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

user32

shell32

ws2_32

ole32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 51KB - Virtual size: 51KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 1024B - Virtual size: 877B

.text
Size: 51KB - Virtual size: 51KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 1024B - Virtual size: 877B