cc407c324f7a6749286002ea854e28e21d655f4f3f8e10231e03e4aaaf74b9c2

General

Target

cc407c324f7a6749286002ea854e28e21d655f4f3f8e10231e03e4aaaf74b9c2
Size

172KB
MD5

f74926e220570335e8b52739bc1a3156
SHA1

94d000e733f31d600bc7d1eba429bfc25aa82485
SHA256

cc407c324f7a6749286002ea854e28e21d655f4f3f8e10231e03e4aaaf74b9c2
SHA512

9a661a1ebe5e5461cd1927ce8a3cc01f5fdd659054fb20fa0f0d82ecdb973ae961843719cca98370871fec6e0f2fa818c9625fcc627680e3396f6e573aabd2f1
SSDEEP

3072:uZEz0EJDPUE3NWMZRGKMGxFVHScY8QexPyv2HoZSrRBbj6w0o8:Xz0AjUE3tCKLxCc94CTFB

Score

N/A

Malware Config

Signatures

Files

cc407c324f7a6749286002ea854e28e21d655f4f3f8e10231e03e4aaaf74b9c2
.exe windows x86

3c428e8760dd4415112a5ffb75f20b1d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey

setupapi

CM_Get_Child
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

lz32

LZClose
LZCopy
LZOpenFileA

kernel32

GlobalFree
GetLastError
CreateFileA
InterlockedDecrement
AddAtomW
VirtualFree
CopyFileA
WideCharToMultiByte
GetVolumeInformationA
CreateFileW
GetFileAttributesA
SetFileAttributesA
GetSystemTime
SetFilePointer
lstrlenA
GetTickCount
GetSystemTimeAsFileTime
GetTempFileNameA
WaitForSingleObject
GetCurrentProcessId
InterlockedIncrement
DeviceIoControl
ReadFile
Sleep
GetTempPathA
MultiByteToWideChar
InitializeCriticalSection
VirtualAlloc
EnumResourceNamesA
CreateHardLinkW
CloseHandle
LocalFree
CreateMutexA
GetModuleFileNameA
GlobalLock
LocalAlloc
GlobalUnlock
GetCurrentThreadId
QueryPerformanceCounter
DeleteFileA
GetFileSize
ReleaseMutex
GetVersionExA
CreateDirectoryA
DisableThreadLibraryCalls
GetModuleFileNameW
DeleteCriticalSection
FreeLibrary

Sections

.text
Size: 87KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3c428e8760dd4415112a5ffb75f20b1d

Headers

File Characteristics

Imports

advapi32

setupapi

lz32

kernel32

Sections

.text Size: 87KB - Virtual size: 231KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 81KB - Virtual size: 81KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 87KB - Virtual size: 231KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 81KB - Virtual size: 81KB

.rsrc
Size: 512B - Virtual size: 4KB