4050db18bed618e03a7335e7faaaabb0947a71767156aa16d7610e5f07530d4b

Sharing

Copy URL Twitter E-mail

General

Target

4050db18bed618e03a7335e7faaaabb0947a71767156aa16d7610e5f07530d4b
Size

88KB
MD5

6bc1310f705ad698c50b26353cd51489
SHA1

32aafe021324a084248d96c9169614fa88f8b74e
SHA256

4050db18bed618e03a7335e7faaaabb0947a71767156aa16d7610e5f07530d4b
SHA512

458cf2add89fb91d521afd3f2903210b356fdaee2d31dfaed01077cd92517c005eb038041c41ee47889d15291c53bccc3969cadf9e60d48acccd9f26149d5101
SSDEEP

1536:jlv+M/aGya43yUCaFbyDJQusVoiBoPJQHbWHCa:ZWqatd3yvqyDJQlVoiBoPJQHbWHC

Score

N/A

Malware Config

Signatures

Files

4050db18bed618e03a7335e7faaaabb0947a71767156aa16d7610e5f07530d4b
.exe windows x86

7e33fffb1529034c0abd44aca3660d54

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Get_Device_IDA
CM_Get_Sibling
CM_Get_Child
CM_Get_Parent

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

LocalFree
FormatMessageA
Sleep
GetVersionExA
GetSystemDirectoryA
lstrcpyA
CloseHandle
CreateProcessA
GetCommandLineA
GetDriveTypeA
RaiseException
GetPrivateProfileStringA
GetPrivateProfileIntA
GetLogicalDriveStringsA
LockResource
LoadResource
FindResourceA
WritePrivateProfileStringA
GetWindowsDirectoryA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
CreateDirectoryA
GetModuleFileNameA
LocalAlloc
InterlockedExchange
DeleteFileA
WaitForSingleObject
SetUnhandledExceptionFilter
RtlUnwind
WriteFile
SetFileAttributesA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
CopyFileA
TerminateProcess
GetLastError
UnhandledExceptionFilter
GetCurrentProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WideCharToMultiByte
GetFileType
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
IsBadCodePtr
SetStdHandle
FlushFileBuffers
IsBadReadPtr
SetFilePointer
HeapFree
HeapAlloc
GetFileAttributesA

user32

LoadStringA
wsprintfA
MessageBoxA

shell32

SHGetSpecialFolderPathA
SHFileOperationA

ole32

CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysFreeString
SysAllocStringLen

shlwapi

SHDeleteKeyA

setupapi

SetupDiGetActualSectionToInstallA
SetupDiCallClassInstaller
SetupDiGetDeviceInstanceIdA
SetupDiEnumDeviceInfo
SetupDiCreateDevRegKeyA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
SetupFindNextLine
SetupOpenInfFileA
SetupFindFirstLineA
SetupGetFieldCount
SetupGetStringFieldA
SetupCloseInfFile
SetupDiClassGuidsFromNameA
SetupDiGetClassDevsA
SetupDiOpenDeviceInfoA
SetupDiOpenDevRegKey
SetupFindNextMatchLineA

advapi32

FreeSid
RegOpenKeyExA
RegCreateKeyExA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegFlushKey
RegQueryValueExA

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e33fffb1529034c0abd44aca3660d54

Headers

File Characteristics

Imports

cfgmgr32

version

kernel32

user32

shell32

ole32

oleaut32

shlwapi

setupapi

advapi32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 20KB - Virtual size: 18KB