3a738adda00a070a9d48413da9a9ae1ef4c83f05be4b3d40edefc632a354d311

Sharing

Copy URL

Twitter E-mail

General

Target

3a738adda00a070a9d48413da9a9ae1ef4c83f05be4b3d40edefc632a354d311
Size

344KB
MD5

73c2ec9424087728255ee5d4aa2bed02
SHA1

45dd591d72572ded756b5e7cec54489208874ef4
SHA256

3a738adda00a070a9d48413da9a9ae1ef4c83f05be4b3d40edefc632a354d311
SHA512

c9b6b3e550520ec44a937c0c9728613b3baaea41c7e806c62798b62eeb836b27a02b492bbf9c01798ad7b46429aa817cd25f02a1dc569e47471496cd85e40b40

Score

N/A

Malware Config

Signatures

Files

3a738adda00a070a9d48413da9a9ae1ef4c83f05be4b3d40edefc632a354d311
.dll regsvr32 windows x86

2921354e80ae03d8ccd3581d23f25328

Code Sign

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetErrorMode
CreateProcessW
GlobalLock
GlobalAlloc
Sleep
GetFileAttributesW
GlobalFree
CreateSemaphoreW
CreatePipe
VirtualProtect
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
LoadLibraryA
ReadFile
SetEndOfFile
SetFilePointer
GetConsoleMode
GetConsoleCP
RtlUnwind
InitializeCriticalSection
GetLastError
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
GetProcAddress
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
GetFileType
CreateFileA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
HeapSize
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
SetStdHandle
SetHandleCount
GetStartupInfoA
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

wininet

InternetOpenW
InternetCloseHandle
InternetGetLastResponseInfoW
InternetCanonicalizeUrlW
InternetSetFilePointer
HttpOpenRequestW
HttpQueryInfoW
InternetSetStatusCallbackW
HttpSendRequestW
InternetWriteFile
InternetConnectW
InternetReadFile
InternetCrackUrlW
InternetOpenUrlW
InternetQueryDataAvailable
InternetSetOptionExW

comsvcs

MTSCreateActivity

Exports

Exports

Choosewar
DllRegisterServer

Sections

.text
Size: 252KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2921354e80ae03d8ccd3581d23f25328

Code Sign

Headers

File Characteristics

Imports

kernel32

wininet

comsvcs

Exports

Exports

Sections

.text Size: 252KB - Virtual size: 250KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 20KB - Virtual size: 59KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 252KB - Virtual size: 250KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 20KB - Virtual size: 59KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 9KB