60558b20d7be85314e48769d7cf814bf5d30402b5a4e1212c971891966b30a83

Sharing

Copy URL Twitter E-mail

General

Target

60558b20d7be85314e48769d7cf814bf5d30402b5a4e1212c971891966b30a83
Size

284KB
MD5

2b4d9b7a4c187f5d3a6c2f058003e0e0
SHA1

779e4d8d8ca01e7f3b3617da4614f3d9aa63d8dc
SHA256

60558b20d7be85314e48769d7cf814bf5d30402b5a4e1212c971891966b30a83
SHA512

029843b4ea1b678417bce07caa8f7911f3af859ddc2005c51b3f10bb3d008065648096c10eda5de395afa8afcf3cb03b9d27d0b276da9bd274f6d6770dd68da1
SSDEEP

6144:kp6OERc5/E0g4uXgLF35EwiZeO7kigzvjlM9mxR:lM2YZTVOwRvjlM

Score

N/A

Malware Config

Signatures

Files

60558b20d7be85314e48769d7cf814bf5d30402b5a4e1212c971891966b30a83
.dll windows x86

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemInfo
GetTickCount
GetUserDefaultLangID
GetWindowsDirectoryA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
GetCPInfo
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
Process32First
Process32Next
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
EnterCriticalSection
DeleteFileA
CreateToolhelp32Snapshot
CreateProcessA
CreateFileA
CopyFileA
LCMapStringW
CloseHandle

setupapi

SetupOpenInfFileA
SetupGetLineTextA
SetupDiOpenDevRegKey
SetupDiGetSelectedDriverA
SetupDiGetDriverInfoDetailA
SetupDiCallClassInstaller
SetupCloseInfFile

advapi32

DeleteAce
CopySid
AccessCheck
LookupAccountNameA
LookupAccountSidA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegSetValueExA
RevertToSelf
SystemFunction008
GetTokenInformation

Exports

Exports

AsReprString
StringARepr
_ascii_strtod
_flags
vCleanup

Sections

.text
Size: 89KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

Imports

kernel32

setupapi

advapi32

Exports

Exports

Sections

.text Size: 89KB - Virtual size: 89KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 62KB - Virtual size: 62KB

.rsrc Size: 64KB - Virtual size: 63KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 89KB - Virtual size: 89KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 62KB - Virtual size: 62KB

.rsrc
Size: 64KB - Virtual size: 63KB

.reloc
Size: 9KB - Virtual size: 9KB