96541c1854d835bc5faffaa1e402ea7ca7fe455a711c83daae7c866a03759bfc

General

Target

96541c1854d835bc5faffaa1e402ea7ca7fe455a711c83daae7c866a03759bfc
Size

185KB
MD5

78a18d8e7ac0035255393a189327eb77
SHA1

c4a99ac335ff8a589b25b7113a1376509f742d95
SHA256

96541c1854d835bc5faffaa1e402ea7ca7fe455a711c83daae7c866a03759bfc
SHA512

5c8bedfadb2d88b9abdb7355266da94cfd775cbd8a0c7f1550a6f21d6a94db16f5d59df8b88d7b787c73b747dc6b7d338207ce99e5e56507149c902f6dd0f487
SSDEEP

3072:x6eKzI39GTBOg7R6CXUZU754d/PB53U79Uh58Vi8jbtjNFtTfzJyF4JLOeAN:x6eKc9GThl7XUZU14VjU79gKQ8jbhtXY

Score

N/A

Malware Config

Signatures

Files

96541c1854d835bc5faffaa1e402ea7ca7fe455a711c83daae7c866a03759bfc
.exe windows x86

b309877ea83c7bf795a3004b2ac1c185

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegEnumKeyA
RegOpenKeyExA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

lz32

LZCopy
LZClose
LZOpenFileA

kernel32

GetTickCount
GlobalFree
AddAtomW
GetCurrentThreadId
Sleep
WaitForSingleObject
MultiByteToWideChar
SetFileAttributesA
GetVolumeInformationA
CreateFileA
GetLastError
LocalFree
InterlockedDecrement
VirtualAlloc
GetCurrentProcessId
ReadFile
GetTempPathA
VirtualFree
CreateMutexA
GetVersionExA
EnumResourceNamesA
GlobalLock
DeleteCriticalSection
CopyFileA
ReleaseMutex
GetModuleFileNameW
QueryPerformanceCounter
CloseHandle
InitializeCriticalSection
CreateHardLinkW
DeviceIoControl
GetSystemTimeAsFileTime
GetSystemTime
GetFileAttributesA
InterlockedIncrement
DeleteFileA
lstrlenA
GlobalUnlock
GetTempFileNameA
DisableThreadLibraryCalls
CreateFileW
GetFileSize
LocalAlloc
SetFilePointer
CreateDirectoryA
GetModuleFileNameA
WideCharToMultiByte
FreeLibrary

setupapi

CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 101KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b309877ea83c7bf795a3004b2ac1c185

Headers

File Characteristics

Imports

advapi32

lz32

kernel32

setupapi

Sections

.text Size: 101KB - Virtual size: 236KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 80KB - Virtual size: 80KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 101KB - Virtual size: 236KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 80KB - Virtual size: 80KB

.rsrc
Size: 512B - Virtual size: 4KB