5279ea37f738ddf6fbca1053e67d7cb395f8faf6b8016d7805672d6bd6b85aaf

Sharing

Copy URL Twitter E-mail

General

Target

5279ea37f738ddf6fbca1053e67d7cb395f8faf6b8016d7805672d6bd6b85aaf
Size

291KB
MD5

12553dba503ca28b2fc05e1aee4bc880
SHA1

187a332ee96a3a6e16d3eefef3c7fc2e01af4a14
SHA256

5279ea37f738ddf6fbca1053e67d7cb395f8faf6b8016d7805672d6bd6b85aaf
SHA512

0fc834df0f0567f2419c7b8703d5ac129e88635e4716c17d00313ee7d74ccb3133d9253692ef8693a39a81dacac65451839e32311b02119aa29653990ce8a47e
SSDEEP

6144:kQiDwP+63sD1Y0mNeqx+lWVRMwuw/T9Z4FHzGiHYsHmVVM8Di:yA+68D1uccMWX9TYqM0HM8

Score

N/A

Malware Config

Signatures

Files

5279ea37f738ddf6fbca1053e67d7cb395f8faf6b8016d7805672d6bd6b85aaf
.dll windows x86

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCommandLineA
GetCurrentThreadId
GetFileType
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemInfo
GetTickCount
GetUserDefaultLangID
GetWindowsDirectoryA
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
GetCPInfo
LeaveCriticalSection
MultiByteToWideChar
OpenProcess
OutputDebugStringA
Process32First
Process32Next
QueryPerformanceCounter
RaiseException
RtlUnwind
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
TerminateProcess
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
lstrlenA
GetACP
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FlushFileBuffers
ExitProcess
EnterCriticalSection
DeleteFileA
CreateToolhelp32Snapshot
CreateProcessA
CreateFileA
CopyFileA
LCMapStringW
CloseHandle

setupapi

SetupOpenInfFileA
SetupGetLineTextA
SetupDiOpenDevRegKey
SetupDiGetSelectedDriverA
SetupDiGetDriverInfoDetailA
SetupDiCallClassInstaller
SetupCloseInfFile

advapi32

DeleteAce
CopySid
AccessCheck
LookupAccountNameA
LookupAccountSidA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegSetValueExA
RevertToSelf
SystemFunction008
GetTokenInformation

Exports

Exports

Format
Import
Method_ClearFreeList
SetEncoding
StopIteration
WriteUnraisable
_SetItem
write_init_3

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b37659b03b7b9d64e4d6a898ac1f8b72

Headers

File Characteristics

Imports

kernel32

setupapi

advapi32

Exports

Exports

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 64KB - Virtual size: 63KB

.data Size: 62KB - Virtual size: 63KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 64KB - Virtual size: 63KB

.data
Size: 62KB - Virtual size: 63KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 9KB - Virtual size: 8KB