3a8cf52d542aa04e53c1e76ec765f87a3347f555ca297ec579756cb8de9cf9df

Sharing

Copy URL

Twitter E-mail

General

Target

3a8cf52d542aa04e53c1e76ec765f87a3347f555ca297ec579756cb8de9cf9df
Size

142KB
MD5

8c2f3fe8efcbf683350c07202e685080
SHA1

3951f954c328099084b3fb30271351b8078f7fff
SHA256

3a8cf52d542aa04e53c1e76ec765f87a3347f555ca297ec579756cb8de9cf9df
SHA512

022ec596a5089b0cc18e2b9ee0a78c8feacb795ab3601cb6422d5c37ca995b6a8170c611a45ad24a6be86da85e981825eea707fa7d2213a19ea64b28abb1a0e6
SSDEEP

3072:wsUMevsexF8OBgX/4+JAoyipB5P6NCsuHsoRplqqiH:wsUMevsexF8OBgX/4+eoyipB5P6NEHP8

Score

N/A

Malware Config

Signatures

Files

3a8cf52d542aa04e53c1e76ec765f87a3347f555ca297ec579756cb8de9cf9df
.dll windows x86

02ba6ce505d87656bbf266f50ffacd28

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

inet_ntoa
WSACleanup
htonl
sendto
WSAStartup
setsockopt
send
closesocket
select
connect
gethostbyname
htons
inet_addr
socket

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

kernel32

LoadLibraryA
SetStdHandle
FlushFileBuffers
GetSystemInfo
GetModuleFileNameA
GetStringTypeW
SetEndOfFile
OutputDebugStringW
CloseHandle
Sleep
CreateThread
lstrcatW
lstrlenW
lstrlenA
lstrcpyW
GetTempPathW
GetPrivateProfileStringW
CreateFileW
DeleteFileW
SetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
GetTickCount
GetVersionExW
InterlockedExchange
GetACP
GetLocaleInfoA
InitializeCriticalSection
DeleteCriticalSection
HeapAlloc
VirtualProtect
HeapFree
GetProcAddress
GlobalFree
GlobalAlloc
GetCurrentProcess
TerminateProcess
GetLastError
SetFilePointer
ReadFile
CreateProcessW
GetCurrentThreadId
LoadLibraryW
MultiByteToWideChar
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetStringTypeA
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW

user32

wsprintfW
RegisterClassExW
CreateWindowExW
ShowWindow
UpdateWindow
GetWindowLongW
GetClientRect
SetWindowLongW
PostQuitMessage
DefWindowProcW
TranslateMessage
DispatchMessageW
GetMessageW

advapi32

RegSetValueExW
RegOpenKeyExW
RegCloseKey

ole32

CoInitialize
CoCreateInstance
OleInitialize
CoGetClassObject
OleSetContainedObject
CoUninitialize

oleaut32

VariantClear
SysAllocString
VariantInit

Exports

Exports

GetDllModuleControlInit
StartShell

Sections

.text
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02ba6ce505d87656bbf266f50ffacd28

Headers

File Characteristics

Imports

ws2_32

wininet

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 113KB - Virtual size: 112KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 45KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 113KB - Virtual size: 112KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 45KB

.reloc
Size: 12KB - Virtual size: 12KB