s7yzrmv13[.]rar

Sharing

Copy URL

Twitter E-mail

General

Target

s7yzrmv13.rar
Size

476KB
MD5

b9df50a14d692e7aac5cf697462379f0
SHA1

0ac013a74fa5f75313774fb1c5294a4e0b9a3a75
SHA256

0e16f533d18ae86ab8cadc43a44e9ff7fd6586658939b6c60d6ed9201c31f33a
SHA512

eeb54214a759e8daef83d0197495b6985db5f37a5a6d8ba3ab941157ded0c149eb6ae3ee930fe7ec5fd22aaee009d0a33c419a9557d4db53c1077c10cb070a9b
SSDEEP

12288:e7fimEsIsmY4K08oM1Wd8t5KQhNdv5z2:e7aVRBn7x6jtU

Score

N/A

Malware Config

Signatures

Files

s7yzrmv13.rar
.dll windows x86

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutGetPitch

ws2_32

WSACleanup
inet_addr

opengl32

glBegin

comctl32

ImageList_ReplaceIcon

kernel32

GetModuleFileNameW
CloseHandle
CreateFileW
GetProcessVersion
DeleteTimerQueue
VirtualAllocEx
InitAtomTable

wininet

InternetReadFile

user32

IsWinEventHookInstalled
GetClassNameA
TranslateMessage
CreateWindowExA
FillRect
BlockInput
DefMDIChildProcW
GetWindowTextA
GetWindowContextHelpId

crypt32

CryptUnregisterOIDFunction
CertCreateContext

setupapi

SetupDiOpenDeviceInterfaceW

esent

JetInit

advapi32

CryptGenKey
RegCloseKey
CryptAcquireContextW
CryptContextAddRef
CreateRestrictedToken

msvcrt

memset
wcscoll

gdi32

GetViewportOrgEx
SetWindowOrgEx
Polyline

imm32

ImmGetCandidateListW

pdh

PdhAddCounterW

ntdsapi

DsGetDomainControllerInfoW

shlwapi

AssocGetPerceivedType

rpcrt4

RpcMgmtSetCancelTimeout
NdrGetUserMarshalInfo

iphlpapi

GetIpAddrTable

ole32

CoCreateInstanceEx
StringFromGUID2
CoGetObjectContext

lz32

LZCopy

oleaut32

VarCyFromR4

wintrust

WintrustSetRegPolicyFlags

Exports

Exports

Vmcoqkxldefhrsw

Sections

.text
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 404KB - Virtual size: 402KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03540fe05cb0473f2f956a0d0a682262

Headers

DLL Characteristics

File Characteristics

Imports

winmm

ws2_32

opengl32

comctl32

kernel32

wininet

user32

crypt32

setupapi

esent

advapi32

msvcrt

gdi32

imm32

pdh

ntdsapi

shlwapi

rpcrt4

iphlpapi

ole32

lz32

oleaut32

wintrust

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 29KB

.rdata Size: 404KB - Virtual size: 402KB

.data Size: 24KB - Virtual size: 31KB

.rsrc Size: 4KB - Virtual size: 752B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 32KB - Virtual size: 29KB

.rdata
Size: 404KB - Virtual size: 402KB

.data
Size: 24KB - Virtual size: 31KB

.rsrc
Size: 4KB - Virtual size: 752B

.reloc
Size: 8KB - Virtual size: 4KB