48685ff8d166e91651ef23d805ebf7afc5e81393921449a16a35408cca53acbc

Sharing

Copy URL Twitter E-mail

General

Target

48685ff8d166e91651ef23d805ebf7afc5e81393921449a16a35408cca53acbc
Size

70KB
MD5

38905e549bc436c7772f88212669b2a3
SHA1

148618056454e91219db70ebbd1bd29fab465b85
SHA256

48685ff8d166e91651ef23d805ebf7afc5e81393921449a16a35408cca53acbc
SHA512

f4b1f7d4c1de2cc053681f8003c52aa22afc5593da50625623a674aeb25b1b37601979cf53a6fb4c6376907f66c3320ad2c26ae84ac88f993025df612b424ade
SSDEEP

1536:WNSUFA4aFRTu6SkYeE8h8uup7Kx4yWcqcnwx3aumtYr4B080Tn:WNTFRajTDjYHU244ybqkwx3QtYrSJ0D

Score

N/A

Malware Config

Signatures

Files

48685ff8d166e91651ef23d805ebf7afc5e81393921449a16a35408cca53acbc
.dll windows x86

88a4e66f86df033e8c88fca7f701c95a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
CM_Get_Device_ID_Size
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW

kernel32

GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
QueryDosDeviceW
DeviceIoControl
CreateFileW
CloseHandle
Sleep
InterlockedExchange

user32

wsprintfW

msvcr90

??3@YAXPAX@Z
wcslen
_wcsicmp
memcpy_s
malloc
swscanf_s
free
memset
_wcsnicmp
wcsncpy_s
_wcstoui64
_encode_pointer
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common

Exports

Exports

XpStgDevGetVenIdAndProdId
XpStgDeviceGetUSBSerial
XpStgDeviceGetUSBSerialAndBcdDevice

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 650B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

88a4e66f86df033e8c88fca7f701c95a

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

kernel32

user32

msvcr90

Exports

Exports

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 56KB - Virtual size: 56KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 650B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 56KB - Virtual size: 56KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 650B