2392185dafe355dca637196653f6fc04ca901fc2b4cc7b4d0d599db2ee5625a8

Sharing

Copy URL Twitter E-mail

General

Target

2392185dafe355dca637196653f6fc04ca901fc2b4cc7b4d0d599db2ee5625a8
Size

102KB
MD5

d33bce5dd3e8b6ff6c38e34cbb4b4dd8
SHA1

f3888e633aababd4a0c1676ee63a27d403e67885
SHA256

2392185dafe355dca637196653f6fc04ca901fc2b4cc7b4d0d599db2ee5625a8
SHA512

3ebeaf8ff366137f7390180ccb1850b7f1d4c926f0a6890434e5b7cac8c7fb94f2a729bcf0fd05fb41b26534551ff205433e3945267a1677488e8ec2b6dd8020
SSDEEP

3072:4vRweYMWCSlyleGbj1w+4jrM35F8lWZoDIZhT0:BMW2eGp4jrm9oDIZR0

Score

N/A

Malware Config

Signatures

Files

2392185dafe355dca637196653f6fc04ca901fc2b4cc7b4d0d599db2ee5625a8
.exe windows x86

6e6a8763bcb7ba560a87e0613ba4d489

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetProcAddress
GetModuleHandleA
GetVersionExA
GetWindowsDirectoryA
Sleep
CreateMutexA
lstrlenA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
SetUnhandledExceptionFilter
GetFileAttributesA
SetFileAttributesA
DeleteFileA
GetLastError
SetEndOfFile
CreateFileA
SetFilePointer
SetStdHandle
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
VirtualQuery
InterlockedExchange
HeapReAlloc
VirtualAlloc
LoadLibraryA
FlushFileBuffers
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetLocalTime
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetACP
GetOEMCP
GetCPInfo
LCMapStringA
MultiByteToWideChar
LCMapStringW
CloseHandle
ReadFile

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

ntdll

RtlUnwind

setupapi

SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiDestroyDeviceInfoList
SetupDiCallClassInstaller

user32

GetWindowThreadProcessId
SendMessageA
IsWindowVisible
EnumWindows
FindWindowA

newdev

UpdateDriverForPlugAndPlayDevicesA

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e6a8763bcb7ba560a87e0613ba4d489

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

ntdll

setupapi

user32

newdev

Sections

.text Size: 30KB - Virtual size: 30KB

.data Size: 2KB - Virtual size: 7KB

.rsrc Size: 69KB - Virtual size: 72KB

.text
Size: 30KB - Virtual size: 30KB

.data
Size: 2KB - Virtual size: 7KB

.rsrc
Size: 69KB - Virtual size: 72KB