e2a3a5eba29af906a304798585db2ecab401a7661f500e53c2b00eec6cdb48da

General

Target

e2a3a5eba29af906a304798585db2ecab401a7661f500e53c2b00eec6cdb48da
Size

174KB
MD5

c064b8cabf4f3aae85b422b3798833c2
SHA1

35249dfe2329712e104e7d436cd7ae1646f0e3b1
SHA256

e2a3a5eba29af906a304798585db2ecab401a7661f500e53c2b00eec6cdb48da
SHA512

b6c1854a42e6fc9524c127be72e342cc3b0d06e21e915af3b291ad9d2d28f9266b52622d92b5b93d26900ffd3b64c264313ff108b7b631aec3d216a7b1054cb4
SSDEEP

3072:pbY1rwlmzqhTwuSyDgolzRBA/W2fXX8GCkMLBaNDeINg0jns/6HQFhs9d0:ps1MCgNSyDXRt2fNCkhexSs1Q

Score

N/A

Malware Config

Signatures

Files

e2a3a5eba29af906a304798585db2ecab401a7661f500e53c2b00eec6cdb48da
.exe windows x86

5a6972a56980b90a5a7ea0b2767d371f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

advapi32

RegOpenKeyA
RegEnumKeyA
RegQueryValueExA
RegQueryValueA
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

kernel32

GetModuleFileNameA
GetCurrentThreadId
AddAtomW
GetVolumeInformationA
CreateFileA
MultiByteToWideChar
VirtualFree
LocalAlloc
CreateMutexA
SetFileAttributesA
InterlockedIncrement
GlobalFree
GetFileAttributesA
GlobalUnlock
QueryPerformanceCounter
DeleteFileA
DeleteCriticalSection
CreateDirectoryA
GetFileSize
GetModuleFileNameW
GetLastError
ReadFile
VirtualAlloc
GetTempFileNameA
GetTempPathA
CopyFileA
GetVersionExA
GetSystemTimeAsFileTime
EnumResourceNamesA
ReleaseMutex
GetTickCount
WideCharToMultiByte
Sleep
GlobalLock
InterlockedDecrement
DisableThreadLibraryCalls
CreateHardLinkW
LocalFree
WaitForSingleObject
GetCurrentProcessId
InitializeCriticalSection
SetFilePointer
CloseHandle
lstrlenA
CreateFileW
GetSystemTime
DeviceIoControl
FreeLibrary

Sections

.text
Size: 94KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a6972a56980b90a5a7ea0b2767d371f

Headers

File Characteristics

Imports

setupapi

advapi32

lz32

kernel32

Sections

.text Size: 94KB - Virtual size: 238KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 76KB - Virtual size: 75KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 94KB - Virtual size: 238KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 76KB - Virtual size: 75KB

.rsrc
Size: 512B - Virtual size: 4KB