bafede39ec320a04eb7ddbc1113137d29ce5e31aea390dcfa0a5af93857dcaf5

General

Target

bafede39ec320a04eb7ddbc1113137d29ce5e31aea390dcfa0a5af93857dcaf5
Size

187KB
MD5

a356573c8194a7bf5c877024548e7261
SHA1

9d7b6ce787e594a2ee386e2feb921837a266b0aa
SHA256

bafede39ec320a04eb7ddbc1113137d29ce5e31aea390dcfa0a5af93857dcaf5
SHA512

8bad10a4eab5b026c01a2c7b8d8ef14bc59db2e70f9e29eb4f305a9b3d4cf857373baea85dfbed92076ce682f347f7eaeb351eaa368c507704bc29cac09c7c83
SSDEEP

3072:uwxuN4uk2Wytdq5+Mpdj9g2dwZuu+feK5UQIDzGND4/gAH4Bf/boY2h5psyMAFkS:tB2WPxvpFwZD4eiikAYBf/boY2h5puA

Score

N/A

Malware Config

Signatures

Files

bafede39ec320a04eb7ddbc1113137d29ce5e31aea390dcfa0a5af93857dcaf5
.exe windows x86

7b720dfab9cbeea93e9af8806fc9915f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

AddAtomA
SetStdHandle
FindFirstFileA
FreeEnvironmentStringsA
IsBadReadPtr
GetDiskFreeSpaceA
UnhandledExceptionFilter
GetEnvironmentStringsW
ReadFile
lstrlenA
FreeLibrary
lstrcmpiA
SetUnhandledExceptionFilter
GetEnvironmentStrings
CreateFileA
VirtualProtect
CloseHandle
GetFileAttributesA
FlushFileBuffers
MulDiv
InitializeCriticalSection
FreeEnvironmentStringsW
GetStartupInfoA
EnumResourceNamesW
GetStringTypeW
lstrcatA
GetProcAddress
DeleteCriticalSection
SetFilePointer
lstrcpyA
EnterCriticalSection
WideCharToMultiByte
LeaveCriticalSection
GetCurrentThreadId
LCMapStringA
GetCPInfo
lstrlenW
MultiByteToWideChar
GetThreadLocale
GetFullPathNameA
GetTickCount
GetOEMCP
GetLastError
LCMapStringW
GetModuleHandleA
LoadLibraryA
Sleep
WriteFile
GetStringTypeA
lstrcmpA
IsBadCodePtr
lstrcpynA
RaiseException

setupapi

CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

Sections

.text
Size: 102KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7b720dfab9cbeea93e9af8806fc9915f

Headers

File Characteristics

Imports

kernel32

setupapi

Sections

.text Size: 102KB - Virtual size: 246KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 81KB - Virtual size: 80KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 102KB - Virtual size: 246KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 81KB - Virtual size: 80KB

.rsrc
Size: 512B - Virtual size: 4KB