dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7

General

Target

dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7
Size

278KB
MD5

52f6c31d1417a2aed54bc80a7b8e2b5c
SHA1

2c92f113fd4d385ef8d1945bc774f2bcac3f7211
SHA256

dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7
SHA512

296e557a01bc305850516750a4a1f7044652a952c8f380ad6b6dc59c3b1658e07030c2e3373c4718720971c44ff22b520834eef8f9fab413172de3ba40bb4502
SSDEEP

6144:LbYJKTU3oCUI8y+tTVB9pDtF4/hWYq8KG1t4qeiiw:LXIUI8PVLpDtGwYMxi/

Score

N/A

Malware Config

Signatures

Files

dd6afba68e35151c81c18d3440014143e2f2f33dd6d9a3b7e9a15d3dba5265a7
.exe windows x86

5381f0a66dd8a3a75e81bd6394d374e1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_DragLeave
ImageList_DragMove
ImageList_DragEnter

shell32

SHGetFolderPathW

shlwapi

StrCmpNIA
StrStrA

iphlpapi

GetIpAddrTable

kernel32

InterlockedIncrement
GetSystemInfo
LeaveCriticalSection
InterlockedDecrement
GlobalAlloc
AddAtomA
SetThreadPriority
EnterCriticalSection
TerminateThread
CreateFileW
GetCurrentProcessId
GetProcAddress
CreateSemaphoreA
ResetEvent
lstrlenA
GetExitCodeThread
GetCurrentThread
GetSystemTime
LockResource
LoadLibraryW
FreeLibrary
GetLastError
Sleep
GetProcessHeap
QueryPerformanceCounter
MultiByteToWideChar
ReleaseSemaphore
EnumResourceTypesW
GetTickCount
IsBadWritePtr
GetGeoInfoA
VirtualFree
DisableThreadLibraryCalls
IsBadReadPtr
WaitForMultipleObjects
GetThreadPriority
VirtualAlloc
HeapFree
FindResourceA
GetModuleFileNameW
ReleaseMutex
CreateMutexA
LoadLibraryA
LoadResource
GetModuleFileNameA
GetCurrentThreadId
WideCharToMultiByte
ExitProcess

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

CM_Get_Sibling
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 136KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5381f0a66dd8a3a75e81bd6394d374e1

Headers

File Characteristics

Imports

comctl32

shell32

shlwapi

iphlpapi

kernel32

newdev

setupapi

Sections

.text Size: 136KB - Virtual size: 272KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 138KB - Virtual size: 138KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 136KB - Virtual size: 272KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 138KB - Virtual size: 138KB

.rsrc
Size: 512B - Virtual size: 4KB