97e00299bab8fb6291b9221186c8e4b0

General

Target

97e00299bab8fb6291b9221186c8e4b0
Size

261KB
MD5

97e00299bab8fb6291b9221186c8e4b0
SHA1

ebe53ebfdc482a39f1c2e4e9d2c32c6694cc3f3a
SHA256

34c441ad29a2a75ddd512aa57b2c0a03b27250a70794eebd0c0ff592ee1fc023
SHA512

d51ae6f43eead8b05a61a6ea234499284359ba0116d7973ed91298d7c05a6a6919e868f6376c727ea58b8085964568a7845c6671d13795b23bfb7aa7940482e5
SSDEEP

6144:cDSoSlaYAiOMm0neGCKv33atdVfHFvyEYEv/eyJ05b1wM2:cDS3lFAzueGr/aVfIEYceo0By

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
97e00299bab8fb6291b9221186c8e4b0

Files

97e00299bab8fb6291b9221186c8e4b0
.exe windows:4 windows x86 arch:x86

2fda39f0ce1fcc50606807d5434011ef

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EnumChildWindows
IsWindow
SendMessageA
CreateWindowExW
DestroyWindow
GetDlgItem
GetWindowThreadProcessId

newdev

UpdateDriverForPlugAndPlayDevicesW

setupapi

CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status

kernel32

GetACP
SetHandleCount
AddAtomA
HeapCreate
GetSystemInfo
VirtualQuery
GetEnvironmentStrings
GetFileType
GetCurrentProcess
GetCurrentProcessId
GetVersionExA
GetStdHandle
TlsAlloc
UnhandledExceptionFilter
SetLastError
GetOEMCP
TlsFree
FreeEnvironmentStringsA
TlsSetValue
HeapSize
TlsGetValue
TerminateProcess
EnumResourceNamesW
GetSystemTimeAsFileTime
GetStartupInfoA
VirtualFree
InterlockedExchange
GetCPInfo
FreeEnvironmentStringsW
lstrcatW
SetEndOfFile
GetModuleFileNameA
GetEnvironmentStringsW
WriteFile
GetLocaleInfoA
QueryPerformanceCounter
IsBadWritePtr
HeapDestroy
VirtualAlloc
SetUnhandledExceptionFilter

shell32

SHGetFolderPathW

iphlpapi

GetIpAddrTable

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

Sections

.text
Size: 128KB - Virtual size: 276KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fda39f0ce1fcc50606807d5434011ef

Headers

File Characteristics

Imports

user32

newdev

setupapi

kernel32

shell32

iphlpapi

mprapi

Sections

.text Size: 128KB - Virtual size: 276KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 129KB - Virtual size: 129KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 128KB - Virtual size: 276KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 129KB - Virtual size: 129KB

.rsrc
Size: 512B - Virtual size: 4KB