fb0bcd3182de396fcdf9907b4e3e82beb316296d2329c8f4fcd8c3f9116723cc

General

Target

fb0bcd3182de396fcdf9907b4e3e82beb316296d2329c8f4fcd8c3f9116723cc
Size

283KB
MD5

64d98e5f4f668e551b4b604dc1934b2e
SHA1

807de3fe710ec955713bd2433234104f279bc0c8
SHA256

fb0bcd3182de396fcdf9907b4e3e82beb316296d2329c8f4fcd8c3f9116723cc
SHA512

cfa9ef4de7acd64bcda48a44bafc74d8452962e4739f4d584f13e9c04dd318762e7270387e22794581fdd3cab907a377b7b658743a48c8d4af17e207a407b3f0
SSDEEP

6144:HyA2QTDSbyAf69YMzainA/zcorVGUV3+anGGu14:pvDSbJf69YMzayuBDV3xGF4

Score

N/A

Malware Config

Signatures

Files

fb0bcd3182de396fcdf9907b4e3e82beb316296d2329c8f4fcd8c3f9116723cc
.exe windows x86

d41a9b2aa381390197ba50e53fd4e3ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetIpAddrTable

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

shell32

SHGetFolderPathW

kernel32

VirtualAlloc
GetEnvironmentStrings
WriteFile
GetACP
AddAtomA
SetLastError
FreeEnvironmentStringsW
GetStartupInfoA
GetCPInfo
IsBadWritePtr
GetFileType
GetCurrentProcess
VirtualFree
TlsFree
TlsGetValue
GetVersionExA
FreeEnvironmentStringsA
EnumResourceLanguagesA
QueryPerformanceCounter
GetOEMCP
SetHandleCount
HeapDestroy
TerminateProcess
VirtualQuery
lstrcpyW
TlsSetValue
GetEnvironmentStringsW
InterlockedExchange
GetStdHandle
GetSystemInfo
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetLocaleInfoA
HeapSize
UnhandledExceptionFilter
TlsAlloc
HeapCreate
SetEndOfFile
SetUnhandledExceptionFilter

newdev

UpdateDriverForPlugAndPlayDevicesW

user32

EnumChildWindows
IsWindow
DestroyWindow
SendMessageA
GetDlgItem
CreateWindowExW
GetWindowThreadProcessId

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

Sections

.text
Size: 145KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d41a9b2aa381390197ba50e53fd4e3ac

Headers

File Characteristics

Imports

iphlpapi

setupapi

shell32

kernel32

newdev

user32

mprapi

Sections

.text Size: 145KB - Virtual size: 277KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 134KB - Virtual size: 133KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 145KB - Virtual size: 277KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 134KB - Virtual size: 133KB

.rsrc
Size: 512B - Virtual size: 4KB