ec86aa05cc08384a16c147163348bb283ed7852fb9cb9e3fe062c5a69f3faff5

General

Target

ec86aa05cc08384a16c147163348bb283ed7852fb9cb9e3fe062c5a69f3faff5
Size

170KB
MD5

9007b3a3b86e33ec6bd18709d6513c44
SHA1

258842a3fb2592ce3be496f980f38910edcd2a27
SHA256

ec86aa05cc08384a16c147163348bb283ed7852fb9cb9e3fe062c5a69f3faff5
SHA512

8d3463cbac1cdd627180ada4015187ead297753d10a5acc03d5137ae1acad210841d0422823694b575bec04268adc3d517586d2b108d983645301233b5596bb7
SSDEEP

3072:1vsujyS4Foov2OW62bmKwqRw0WizvUpXeL0ZuvaRyODkvntV9kjtgJ+zfYK:mS4lv2j6Vow3ScpX3ZuQyfvzqw4

Score

N/A

Malware Config

Signatures

Files

ec86aa05cc08384a16c147163348bb283ed7852fb9cb9e3fe062c5a69f3faff5
.exe windows x86

ca03b6b5895c8ba1ba5ce1a541bd4a88

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

WriteFile
GetOEMCP
GetStringTypeA
AddAtomA
GetDiskFreeSpaceA
LeaveCriticalSection
UnhandledExceptionFilter
GetCurrentThreadId
SetStdHandle
GetStartupInfoA
GetEnvironmentStringsW
EnterCriticalSection
IsBadReadPtr
ReadFile
lstrcmpA
lstrcpyA
lstrcatA
GetModuleHandleA
GetFullPathNameA
WideCharToMultiByte
lstrcpynA
SetUnhandledExceptionFilter
FlushFileBuffers
MulDiv
GetThreadLocale
LoadLibraryA
SetFilePointer
FreeEnvironmentStringsW
GetCPInfo
GetEnvironmentStrings
EnumResourceNamesW
FreeEnvironmentStringsA
LCMapStringW
lstrlenW
IsBadCodePtr
lstrlenA
lstrcmpiA
GetStringTypeW
Sleep
GetFileAttributesA
FindFirstFileA
FreeLibrary
MultiByteToWideChar
GetTickCount
CloseHandle
InitializeCriticalSection
VirtualProtect
DeleteCriticalSection
CreateFileA
GetProcAddress
LCMapStringA
GetLastError
RaiseException

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

Sections

.text
Size: 93KB - Virtual size: 488KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca03b6b5895c8ba1ba5ce1a541bd4a88

Headers

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 93KB - Virtual size: 488KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 74KB - Virtual size: 73KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 93KB - Virtual size: 488KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 74KB - Virtual size: 73KB

.rsrc
Size: 512B - Virtual size: 4KB