993b896cd61b594ad9468ddc53a00b8b8ac855e7a0e49d65d1c100543c9525f9

Sharing

Copy URL

Twitter E-mail

General

Target

993b896cd61b594ad9468ddc53a00b8b8ac855e7a0e49d65d1c100543c9525f9
Size

210KB
MD5

291a5411f970d817751a844d47b262d5
SHA1

7b11ae1b30785cdbd0912ae1e929d8649faf76d9
SHA256

993b896cd61b594ad9468ddc53a00b8b8ac855e7a0e49d65d1c100543c9525f9
SHA512

e231d1e528617354e7002fde5d1f6901b0b50ed19627c8c2ba5dc957638d04562a295a95a14b849b074a91101da6ada84e74739784d66343f8039d3d96f09458
SSDEEP

6144:9NS5VmS/+PRHgzKmHMyTTaPrPXa3rkO2E1eJ+p:9IaxgzKmRUs+Oe0

Score

N/A

Malware Config

Signatures

Files

993b896cd61b594ad9468ddc53a00b8b8ac855e7a0e49d65d1c100543c9525f9
.exe windows x86

433c9027a901ccf1e6e140bd1b5a1d5d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BeginUpdateResourceA
GetCurrentProcessId
DisconnectNamedPipe
GetCurrentThreadId
GetVolumeInformationA
GetUserDefaultLCID
lstrlen
Sleep
GetOEMCP
GetTimeFormatW
ExitProcess
lstrcpyW
SetPriorityClass
GetLogicalDrives
FindResourceW
GetTempPathW
GetNamedPipeInfo
GetProcessHeap
GetLocaleInfoW
GetFileAttributesW
IsBadStringPtrW
GetModuleHandleA
SuspendThread
GetProcAddress
LocalFree
GetCurrentDirectoryW
InitializeCriticalSection
IsValidLocale
CopyFileA
GetLogicalDriveStringsA
GetCommandLineW
GetUserDefaultLangID
CreateSemaphoreW
RemoveDirectoryW
GetExitCodeThread
MultiByteToWideChar
CreateMutexA
GetEnvironmentStringsW
GetSystemDirectoryA
GlobalDeleteAtom
CompareStringW
GetTempFileNameW
FindAtomW
GetAtomNameW

user32

GetMenuItemID
DestroyCursor
InsertMenuW
DrawIcon
CopyImage
EmptyClipboard
GetScrollPos
GetDC
SetDlgItemTextA
LoadMenuW
DefWindowProcA
AdjustWindowRect
FlashWindow

gdi32

GetTextColor
GetRegionData
SetMetaRgn
GetDeviceCaps
CreateHatchBrush
CreatePolygonRgn
CreatePatternBrush
CopyEnhMetaFileA
GetTextCharset

advapi32

RegEnumValueA
RegCreateKeyExW
RegRestoreKeyW
RegQueryValueA
RegOpenKeyExA

setupapi

SetupDiClassGuidsFromNameA
SetupDiCreateDeviceInfoList
CM_Intersect_Range_List
CM_Get_Child_Ex
SetupSetSourceListA
pSetupRegistryDelnode
pSetupGetInfSections
CM_Get_Hardware_Profile_Info_ExW
CM_Register_Device_Driver
SetupAddSectionToDiskSpaceListA
CM_Free_Res_Des_Handle

winmm

mmTaskCreate

Sections

.EN
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.OlNaGi
Size: 2KB - Virtual size: 430KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.Q
Size: 2KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ULUS
Size: 4KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cGOgCW
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.utVE
Size: 6KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 171KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

433c9027a901ccf1e6e140bd1b5a1d5d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

setupapi

winmm

Sections

.EN Size: 10KB - Virtual size: 10KB

.OlNaGi Size: 2KB - Virtual size: 430KB

.Q Size: 2KB - Virtual size: 19KB

.ULUS Size: 4KB - Virtual size: 24KB

.cGOgCW Size: 11KB - Virtual size: 11KB

.utVE Size: 6KB - Virtual size: 136KB

.rsrc Size: 171KB - Virtual size: 170KB

.reloc Size: 1KB - Virtual size: 1KB

.EN
Size: 10KB - Virtual size: 10KB

.OlNaGi
Size: 2KB - Virtual size: 430KB

.Q
Size: 2KB - Virtual size: 19KB

.ULUS
Size: 4KB - Virtual size: 24KB

.cGOgCW
Size: 11KB - Virtual size: 11KB

.utVE
Size: 6KB - Virtual size: 136KB

.rsrc
Size: 171KB - Virtual size: 170KB

.reloc
Size: 1KB - Virtual size: 1KB