a5fb5236bb6221a73a61c5edf48972f22cc1cb8c7b24de2759402e387067038b

Sharing

Copy URL

Twitter E-mail

General

Target

a5fb5236bb6221a73a61c5edf48972f22cc1cb8c7b24de2759402e387067038b
Size

346KB
MD5

a29b324639c66845e5c14b35276975e9
SHA1

432f0645596f27888156aee3d3932f2296a1654c
SHA256

a5fb5236bb6221a73a61c5edf48972f22cc1cb8c7b24de2759402e387067038b
SHA512

f15662ed2461b90fe821f3cb6886fddb1111dde22b31686837bf3afc99fff356b0d6ac1682a37aee7b66f4a5ad8b38294f29eff705357528d524f7a3423b72ba
SSDEEP

6144:00peQ3DolNQnqlGXzVGcWP66oRftHGrgs1mrBa7iP6AndVAS7Hztrkd:VpDoL8K/elZsYc7iy6+S7pr6

Score

N/A

Malware Config

Signatures

Files

a5fb5236bb6221a73a61c5edf48972f22cc1cb8c7b24de2759402e387067038b
.dll windows x86

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemInfo
GetTickCount
GetUserDefaultLangID
GetWindowsDirectoryA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
GetCPInfo
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
Process32First
Process32Next
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
EnterCriticalSection
DeleteFileA
CreateToolhelp32Snapshot
CreateProcessA
CreateFileA
CopyFileA
LCMapStringW
CloseHandle

setupapi

SetupOpenInfFileA
SetupGetLineTextA
SetupDiOpenDevRegKey
SetupDiGetSelectedDriverA
SetupDiGetDriverInfoDetailA
SetupDiCallClassInstaller
SetupCloseInfFile

advapi32

DeleteAce
CopySid
AccessCheck
LookupAccountNameA
LookupAccountSidA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegSetValueExA
RevertToSelf
SystemFunction008
GetTokenInformation

Exports

Exports

CallFunction5
GetFrame
GetImporter
GetLocals
Long_AsLongLong
Number_Int
SyntaxError
_InPlaceRepeat
vLoadModuleW

Sections

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

Imports

kernel32

setupapi

advapi32

Exports

Exports

Sections

.text Size: 136KB - Virtual size: 136KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 69KB - Virtual size: 71KB

.rsrc Size: 55KB - Virtual size: 55KB

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 136KB - Virtual size: 136KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 69KB - Virtual size: 71KB

.rsrc
Size: 55KB - Virtual size: 55KB

.reloc
Size: 14KB - Virtual size: 14KB