91966a85796182058a24a958564988e4bda47e7e9551d180bd5fda46fec68532

General

Target

91966a85796182058a24a958564988e4bda47e7e9551d180bd5fda46fec68532
Size

226KB
MD5

35e286fb35d808e5ccfea9365fae1108
SHA1

908ee241a103c1bc5c7e764d708555fe4f0eee60
SHA256

91966a85796182058a24a958564988e4bda47e7e9551d180bd5fda46fec68532
SHA512

3918100df7a41f51bda2b8ddbbd99207115dcd0615f02dc7517639a9f8105e4fa755637063eb8c89263b0ca82e558e0170d33ffba37b1bb0391d1457c2f58be6
SSDEEP

6144:U3XFdBOdxNQtD3Z40KUAw2Ol3TVsd354:U3VdBMLsIURDVsd35

Score

N/A

Malware Config

Signatures

Files

91966a85796182058a24a958564988e4bda47e7e9551d180bd5fda46fec68532
.exe windows x86

70219ebd70bfa67340ac14c404bb80ba

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED

Imports

user32

IsWindow
SetWindowPlacement
LoadIconW
ShowWindow
IsZoomed
RealGetWindowClass
GetSystemMetrics
UpdateWindow
IsIconic
LoadImageW
DestroyWindow
MapVirtualKeyW
GetParent
SetWindowPos
GetWindowPlacement
SetForegroundWindow

setupapi

CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

CreateFiberEx
TerminateProcess
CloseHandle
FoldStringW
GetLocaleInfoW
LoadLibraryA
GetCurrentProcess
Sleep
GetStartupInfoA
TerminateThread
GetCommandLineW
GetProcAddress
ReleaseSemaphore
RaiseException
GetTickCount
GetLastError
EnumResourceNamesA
WaitForSingleObject
VirtualProtect
TlsFree
UnhandledExceptionFilter
TlsGetValue
LoadLibraryW
FreeLibrary
GetModuleHandleW
InterlockedExchange
FlushFileBuffers
GetCurrentThreadId
GetCurrentProcessId
TlsAlloc
IsDebuggerPresent
LocalAlloc
InterlockedCompareExchange
QueryPerformanceCounter
GetSystemTimeAsFileTime
DeleteFileW
CreateSemaphoreW
SetUnhandledExceptionFilter
GetProcessHeap
GetModuleFileNameW

msimg32

AlphaBlend

Sections

.text
Size: 202KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 320KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70219ebd70bfa67340ac14c404bb80ba

Headers

File Characteristics

Imports

user32

setupapi

kernel32

msimg32

Sections

.text Size: 202KB - Virtual size: 201KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 21KB - Virtual size: 20KB

.tls Size: 512B - Virtual size: 320KB

.text
Size: 202KB - Virtual size: 201KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 21KB - Virtual size: 20KB

.tls
Size: 512B - Virtual size: 320KB