b821b1c44e4a4c7bf047dd79588b2fc6324616769cf5b365b53da3cbdc24ecae

Sharing

Copy URL Twitter E-mail

General

Target

b821b1c44e4a4c7bf047dd79588b2fc6324616769cf5b365b53da3cbdc24ecae
Size

38KB
MD5

6e4e3903c6b149dfa5997aa3a04337b9
SHA1

44f432401d2c9ca64f56c8f0e016a89899f7baf9
SHA256

b821b1c44e4a4c7bf047dd79588b2fc6324616769cf5b365b53da3cbdc24ecae
SHA512

d9fffbda1c77d364884274d2e8b5253be222ee7ffed1ecc63d8d37b0d883180509c8244a3d0958d07ecf134fd3e7dc8237d14a0fb662a25a897cfe73b2ce89be
SSDEEP

384:v+uMvIIg0+jdZtv8hxKtCKeC/EQyBVjNn0SUGmlZGdZUGAA/LxKZwCh4dNZ69i:j6xCeS4JZGVGAMxKWC4NZ4i

Score

N/A

Malware Config

Signatures

Files

b821b1c44e4a4c7bf047dd79588b2fc6324616769cf5b365b53da3cbdc24ecae
.exe windows x86

15ee33c25604fb7116effb18a37ae2e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetCommandLineA
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
GetModuleHandleA
HeapAlloc
WriteFile
GetCPInfo
GetACP
GetOEMCP
GetStartupInfoA
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW
lstrlenA
GetStringTypeW
GetVersion
DeleteFileA
lstrcatA
GetWindowsDirectoryA
GetPrivateProfileStringA
lstrcpyA
GetCurrentProcess
CloseHandle
lstrcmpiA
GetModuleFileNameA
HeapFree
RtlUnwind
GetStringTypeA

advapi32

RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
GetTokenInformation
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

user32

DispatchMessageA
TranslateMessage
PostQuitMessage
DefWindowProcA
GetSystemMetrics
CreateWindowExA
ShowWindow
UpdateWindow
LoadIconA
LoadCursorA
RegisterClassA
GetMessageA

gdi32

GetStockObject

setupapi

SetupDiSetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupDiOpenDevRegKey
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiSetSelectedDriverA
SetupDiSetDeviceInstallParamsA
SetupDiInstallDevice
SetupDiDestroyDriverInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInstallParamsA
SetupDiRemoveDevice
SetupDiGetClassDevsA

Sections

.text
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

XOR
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

15ee33c25604fb7116effb18a37ae2e8

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

setupapi

Sections

.text Size: 20KB - Virtual size: 16KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 3KB

.rsrc Size: 4KB - Virtual size: 1KB

XOR Size: 2KB - Virtual size: 2KB

.text
Size: 20KB - Virtual size: 16KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 4KB - Virtual size: 1KB

XOR
Size: 2KB - Virtual size: 2KB