e5e226682b79e3dc7c9a4dbe6e7948caf7680aa98a4f8d78752894d5ce2e1bf3

Sharing

Copy URL Twitter E-mail

General

Target

e5e226682b79e3dc7c9a4dbe6e7948caf7680aa98a4f8d78752894d5ce2e1bf3
Size

150KB
MD5

eec10983d7704b928c177ba9047b7b83
SHA1

f502d19b3b7d7241318c5bfa40105d4211cd7bbe
SHA256

e5e226682b79e3dc7c9a4dbe6e7948caf7680aa98a4f8d78752894d5ce2e1bf3
SHA512

d357e8d20a950ea32ff930cb44b2a13b02b442dec8f653d4999dd7d5c6284779e5ff97188d1c5a2a0e641b2adaaa7e0b94305bc753765e28eb0980bdfa83b1df
SSDEEP

3072:xbmXI6FLUNH+TKwUP7W8IaAfo/AlwTw5YiSXsmoGgRheZOfF+2MYEwktka4PU:xbmFFUNeTzUP7W8IaAwiQw5AnB8d+2Mr

Score

N/A

Malware Config

Signatures

Files

e5e226682b79e3dc7c9a4dbe6e7948caf7680aa98a4f8d78752894d5ce2e1bf3
.exe windows x86

12f7b6c96f19edd1dadef7a3cf1c24c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaNtStatusToWinError
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenCurrentUser
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

shlwapi

PathFindFileNameW

shell32

ShellExecuteW
SHGetSettings

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

oleaut32

VariantInit
VariantCopy
VariantClear
VariantChangeType
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SafeArrayUnlock
SafeArrayLock
SafeArrayGetVartype
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy
SafeArrayCreate
SafeArrayCopy
LoadTypeLi
LoadRegTypeLi

kernel32

lstrlenW
WaitForSingleObject
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TerminateProcess
SizeofResource
SetUnhandledExceptionFilter
SetStdHandle
SetLastError
SetHandleCount
SetFilePointer
SetEvent
SetEnvironmentVariableA
RtlUnwind
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
MultiByteToWideChar
MoveFileW
LockResource
LoadResource
LeaveCriticalSection
LCMapStringW
LCMapStringA
CloseHandle
CompareStringA
CompareStringW
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExpandEnvironmentStringsW
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsW
GetFileAttributesW
GetFileSizeEx
GetFileType
GetGeoInfoW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetUserGeoID
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale

setupapi

SetupGetStringFieldW
SetupGetFieldCount
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetClassDevsW
CM_Get_DevNode_Status
CM_Get_Device_IDW
SetupDiDeleteDeviceInfo
SetupDiEnumDeviceInfo

ole32

CoCreateInstance

Sections

.text
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 93KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

12f7b6c96f19edd1dadef7a3cf1c24c4

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

shlwapi

shell32

version

oleaut32

kernel32

setupapi

ole32

Sections

.text Size: 41KB - Virtual size: 41KB

.rdata Size: 93KB - Virtual size: 92KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 3KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 41KB

.rdata
Size: 93KB - Virtual size: 92KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 3KB - Virtual size: 3KB