fb5djyes[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

fb5djyes.rar
Size

476KB
MD5

0e078fcb83f7689e0a613d1e1f98592d
SHA1

02c9122c00abce3664344232be0d821647f5438d
SHA256

4cf90ed4044d8025261e4740f1b9a98ed5d2c63d9bd9758257bf0881b2e28aca
SHA512

e9ac5a2955c040120b0c2eaa4326226ebd4699e252bf69899faf366d2ac760c816888c91bb5bef6e5520736645d5f923f1c037c82cf90e981313c911a9ac81be
SSDEEP

12288:m7fimEsIsmY4K08oM1Wd8t5KQhNdv5zf:m7aVRBn7x6jt1

Score

N/A

Malware Config

Signatures

Files

fb5djyes.rar
.dll windows x86

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutGetPitch

ws2_32

WSACleanup
inet_addr

opengl32

glBegin

comctl32

ImageList_ReplaceIcon

kernel32

GetModuleFileNameW
CloseHandle
CreateFileW
GetProcessVersion
DeleteTimerQueue
VirtualAllocEx
InitAtomTable

wininet

InternetReadFile

user32

IsWinEventHookInstalled
GetClassNameA
TranslateMessage
CreateWindowExA
FillRect
BlockInput
DefMDIChildProcW
GetWindowTextA
GetWindowContextHelpId

crypt32

CryptUnregisterOIDFunction
CertCreateContext

setupapi

SetupDiOpenDeviceInterfaceW

esent

JetInit

advapi32

CryptGenKey
RegCloseKey
CryptAcquireContextW
CryptContextAddRef
CreateRestrictedToken

msvcrt

memset
wcscoll

gdi32

GetViewportOrgEx
SetWindowOrgEx
Polyline

imm32

ImmGetCandidateListW

pdh

PdhAddCounterW

ntdsapi

DsGetDomainControllerInfoW

shlwapi

AssocGetPerceivedType

rpcrt4

RpcMgmtSetCancelTimeout
NdrGetUserMarshalInfo

iphlpapi

GetIpAddrTable

ole32

CoCreateInstanceEx
StringFromGUID2
CoGetObjectContext

lz32

LZCopy

oleaut32

VarCyFromR4

wintrust

WintrustSetRegPolicyFlags

Exports

Exports

Vmcoqkxldefhrsw

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ws2_32

opengl32

comctl32

kernel32

wininet

user32

crypt32

setupapi

esent

advapi32

msvcrt

gdi32

imm32

pdh

ntdsapi

shlwapi

rpcrt4

iphlpapi

ole32

lz32

oleaut32

wintrust

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 404KB - Virtual size: 402KB

.data Size: 24KB - Virtual size: 30KB

.rsrc Size: 4KB - Virtual size: 752B

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 404KB - Virtual size: 402KB

.data
Size: 24KB - Virtual size: 30KB

.rsrc
Size: 4KB - Virtual size: 752B

.reloc
Size: 8KB - Virtual size: 5KB