ef99b367201ddb043dd0d1bead6c7a548707369654b67823713302d4fa04c034

General

Target

ef99b367201ddb043dd0d1bead6c7a548707369654b67823713302d4fa04c034
Size

170KB
MD5

09f586cb8305edfd60f2f86235ef0503
SHA1

2c3e066a7fd5747490e1128a9109aac7cb7fb8f6
SHA256

ef99b367201ddb043dd0d1bead6c7a548707369654b67823713302d4fa04c034
SHA512

8a412871f22994a342c20feeee53469ff93696c5b8990bcf2cdf928937d8434b615382e70a496c16b39d355ad46539ab361c2837d581f12b2e1d0468f62ab486
SSDEEP

3072:1vsujy14Foov2OW62bmKwqRw0WizvUpXeL0ZuvaRyODkvntV9kjtgJ+zfYK:m14lv2j6Vow3ScpX3ZuQyfvzqw4

Score

N/A

Malware Config

Signatures

Files

ef99b367201ddb043dd0d1bead6c7a548707369654b67823713302d4fa04c034
.exe windows x86

ca03b6b5895c8ba1ba5ce1a541bd4a88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WriteFile
GetOEMCP
GetStringTypeA
AddAtomA
GetDiskFreeSpaceA
LeaveCriticalSection
UnhandledExceptionFilter
GetCurrentThreadId
SetStdHandle
GetStartupInfoA
GetEnvironmentStringsW
EnterCriticalSection
IsBadReadPtr
ReadFile
lstrcmpA
lstrcpyA
lstrcatA
GetModuleHandleA
GetFullPathNameA
WideCharToMultiByte
lstrcpynA
SetUnhandledExceptionFilter
FlushFileBuffers
MulDiv
GetThreadLocale
LoadLibraryA
SetFilePointer
FreeEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
EnumResourceNamesW
FreeEnvironmentStringsA
LCMapStringW
lstrlenW
IsBadCodePtr
lstrlenA
lstrcmpiA
GetStringTypeW
Sleep
GetFileAttributesA
FindFirstFileA
FreeLibrary
MultiByteToWideChar
GetTickCount
CloseHandle
InitializeCriticalSection
VirtualProtect
DeleteCriticalSection
CreateFileA
GetProcAddress
LCMapStringA
GetLastError
RaiseException

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 93KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca03b6b5895c8ba1ba5ce1a541bd4a88

Headers

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 93KB - Virtual size: 488KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 74KB - Virtual size: 73KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 488KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 74KB - Virtual size: 73KB

.rsrc
Size: 512B - Virtual size: 4KB