b11ebf69e570d1941817da22dfd7e692feeb1798bbb57a6bc65499a10339acbe

Sharing

Copy URL Twitter E-mail

General

Target

b11ebf69e570d1941817da22dfd7e692feeb1798bbb57a6bc65499a10339acbe
Size

112KB
MD5

d9b3fbc26aa609a6086e1dcb54fdd4e8
SHA1

691be7a86ccf3f08c45a562b155e55af1d1c9a0c
SHA256

b11ebf69e570d1941817da22dfd7e692feeb1798bbb57a6bc65499a10339acbe
SHA512

f75aea6a4db60ca0384661847cb7722c29180e51133a68abceabd51c75b9d9337896d8efbfe2c7bcc0da7ab3602454229daadd31def5adc9bcd348fc68b9e0c7
SSDEEP

1536:fyMZ0RlybzbdJ4MP+s7q3PDkJmWgByNJGtan5qAoHk8dMJ4b8D:fh8CbMkQDk8BkJGtan5qNHk8d4k8D

Score

1^/10

Malware Config

Signatures

Files

b11ebf69e570d1941817da22dfd7e692feeb1798bbb57a6bc65499a10339acbe
.exe windows x86

30a37830dc4a914e76c578a9bb431006

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupQueryInfVersionInformationW
SetupGetInfInformationW
SetupDiGetDeviceInstallParamsW
SetupDiCreateDeviceInfoList
SetupDiGetINFClassW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiCallClassInstaller
SetupDiSetDeviceRegistryPropertyW
SetupDiCreateDeviceInfoW
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo

kernel32

RtlUnwind
InitializeCriticalSection
LoadLibraryA
GetStdHandle
WriteFile
SystemTimeToFileTime
CreateFileW
GetLastError
SetFileTime
CloseHandle
FindResourceW
LoadResource
HeapSize
SizeofResource
FindFirstFileW
FindClose
CreateDirectoryW
GetModuleHandleW
GetProcAddress
LocalFree
LocalAlloc
lstrlenW
LoadLibraryW
FreeLibrary
FindNextFileW
GetTempPathW
CopyFileW
SetLastError
DeleteFileW
LockResource
GetOEMCP
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
RaiseException
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
ExitProcess
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
GetLocaleInfoA

advapi32

RegQueryValueExW
RegCloseKey
RegEnumValueW
RegOpenKeyW
RegSetValueExW

Sections

.text
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

30a37830dc4a914e76c578a9bb431006

Headers

File Characteristics

Imports

setupapi

kernel32

advapi32

Sections

.text Size: 44KB - Virtual size: 40KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 6KB

.rsrc Size: 48KB - Virtual size: 48KB

.text
Size: 44KB - Virtual size: 40KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 6KB

.rsrc
Size: 48KB - Virtual size: 48KB