43c798f1d971202bb0e40076bb03f829f1f3fcd017c260e1ab5b0ba5a9a14f9a

Sharing

Copy URL Twitter E-mail

General

Target

43c798f1d971202bb0e40076bb03f829f1f3fcd017c260e1ab5b0ba5a9a14f9a
Size

1.3MB
MD5

3f80ff8c6efb9114f63568c48301ae82
SHA1

76f274991b6428d53ea63bcb925e3ccd16fd2f1d
SHA256

43c798f1d971202bb0e40076bb03f829f1f3fcd017c260e1ab5b0ba5a9a14f9a
SHA512

c982a149329c56421384bed8c09b506f8526af7a71c5cebc6a02d0d16e5557a57909871fc45dad9f59dba1ffe81b47cea5af4f606799776ababbef7a1a757786
SSDEEP

24576:AvTP+W1M1BjNf/SUDG3hivExk1uSSpKlH4sAJwuFiKcVAF+ethlZ+m9cB:Q1G1L0RhS9lY9FwvA0etPA

Score

N/A

Malware Config

Signatures

Files

43c798f1d971202bb0e40076bb03f829f1f3fcd017c260e1ab5b0ba5a9a14f9a
.zip
TrumanShare_1.0.19/Cache.ini
TrumanShare_1.0.19/IgnoreList.ini
TrumanShare_1.0.19/Plugins/2009-05-21-12-08-49.dmp
TrumanShare_1.0.19/Plugins/2009-05-21-12-08-49.rpt
TrumanShare_1.0.19/Plugins/CCcam Premium Payserver - Forums IjaChouf.com Tunisia Forum.URL
.url
TrumanShare_1.0.19/Plugins/CCcam-2.1.1.rar.html.URL
.url
TrumanShare_1.0.19/Plugins/CCcam.cfg
TrumanShare_1.0.19/Plugins/FLYCCCAM.cfg
TrumanShare_1.0.19/Plugins/FLYCCCAM.dll
.dll windows x86

4862bd3fee8950d1b8aeed8fce2a5b0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
HeapAlloc
HeapFree
VirtualAlloc
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
GetCommandLineA
HeapReAlloc
HeapSize
HeapDestroy
UnlockFile
VirtualFree
IsBadWritePtr
QueryPerformanceCounter
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedDecrement
ConvertDefaultLocale
EnumResourceLanguagesA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
lstrcpynA
GlobalMemoryStatus
GetProcessWorkingSetSize
GetSystemInfo
IsDebuggerPresent
TerminateProcess
GetCurrentThread
LocalFree
WriteFile
VirtualQuery
LoadLibraryA
SuspendThread
FreeLibrary
GetCurrentThreadId
FormatMessageA
SetUnhandledExceptionFilter
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCurrentProcess
SetPriorityClass
DeviceIoControl
CreateFileA
GetSystemDefaultLangID
GetModuleHandleA
GetProcAddress
IsBadStringPtrA
UnmapViewOfFile
GetCurrentProcessId
OpenFileMappingA
CreateFileMappingA
MapViewOfFile
VirtualProtect
GetTickCount
CreateThread
WaitForSingleObject
CreateEventA
CloseHandle
Sleep
SetEvent
GetModuleFileNameA
GetCurrentDirectoryA
GetTempPathA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcmpA
lstrcpyA
LeaveCriticalSection
EnterCriticalSection
FindResourceA
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
WideCharToMultiByte
CreateDirectoryA
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
HeapCreate
InterlockedExchange

user32

SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
IsWindowEnabled
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
UpdateWindow
PostMessageA
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
GetDlgCtrlID
CallWindowProcA
GetWindowLongA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
PtInRect
GetWindow
GetMenuItemID
GetMenuItemCount
GetSubMenu
LoadMenuA
InsertMenuA
GetMessageA
DispatchMessageA
TranslateMessage
LoadCursorA
GetSysColorBrush
EndPaint
BeginPaint
GetClassNameA
GetWindowTextA
GetSysColor
InvalidateRect
DrawTextA
CopyRect
GetParent
RedrawWindow
GetClientRect
FillRect
wsprintfA
SetForegroundWindow
KillTimer
SetTimer
IsWindowVisible
GetMenu
GetMenuState
CheckMenuItem
DeleteMenu
MessageBoxA
LoadIconA
UnregisterClassA
EnableWindow
SendMessageA
CharUpperA
DefWindowProcA
ClientToScreen
GrayStringA
DrawTextExA
TabbedTextOutA
DestroyMenu
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
ReleaseDC
GetDC
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ShowWindow

gdi32

LineTo
MoveToEx
DeleteObject
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
CreatePen
CreateSolidBrush
SetMapMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutA
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
CreateRectRgnIndirect
GetPixel
CreateFontA
SelectObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

shell32

ShellExecuteA
Shell_NotifyIconA

comctl32

ord17
_TrackMouseEvent
ImageList_Destroy

shlwapi

PathFileExistsA
PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsDirectoryA
PathIsUNCA

oleaut32

VariantInit
VariantChangeType
VariantClear

ws2_32

WSASocketA
WSAEventSelect
inet_addr
WSAConnect
WSAGetLastError
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSARecv
WSASend
WSACloseEvent
closesocket
WSACreateEvent
htonl
htons
WSACleanup
WSAStartup
gethostbyname
inet_ntoa

iphlpapi

GetAdaptersInfo

Exports

Exports

Copyright
DVBPLGCall
DVBPLGClose
DVBPLGGetInfo
DVBPLGInit
EventMsg
Execute
LibTyp
MenuItemClick
On_Channel_Change
On_Exit
On_Filter_Close
On_Hot_Key
On_Key_Down
On_Menu_Select
On_Osd_Key
On_Rec_Play
On_Send_Dll_ID_Name
On_Start
PidCallback
PluginName
PluginPriority
SetAppHandle
SetMenuHandle
Version

Sections

.text
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 933KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FLY0
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.FLY1
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
TrumanShare_1.0.19/Plugins/FLYCCCAM.ini
TrumanShare_1.0.19/Plugins/FLYCCCAM.log
TrumanShare_1.0.19/Plugins/FLYCCCAM.txt
TrumanShare_1.0.19/Plugins/SN.txt
TrumanShare_1.0.19/Sid_Cache.ini
TrumanShare_1.0.19/TrumanShare.exe
.exe windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

Size: 324KB - Virtual size: 920KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 255KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 432KB - Virtual size: 436KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TrumanShare_1.0.19/TrumanShare.ini

Sharing

General

Malware Config

Signatures

Files

4862bd3fee8950d1b8aeed8fce2a5b0f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

ws2_32

iphlpapi

Exports

Exports

Sections

.text Size: 212KB - Virtual size: 209KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 8KB - Virtual size: 933KB

.rsrc Size: 104KB - Virtual size: 100KB

.FLY0 Size: 40KB - Virtual size: 36KB

.FLY1 Size: 92KB - Virtual size: 88KB

.reloc Size: 16KB - Virtual size: 14KB

Headers

File Characteristics

Sections

Size: 324KB - Virtual size: 920KB

Size: 6KB - Virtual size: 20KB

Size: - Virtual size: 16KB

Size: 10KB - Virtual size: 12KB

Size: - Virtual size: 4KB

Size: 512B - Virtual size: 4KB

Size: - Virtual size: 64KB

.rsrc Size: 255KB - Virtual size: 704KB

.data Size: 432KB - Virtual size: 436KB

.adata Size: - Virtual size: 4KB

.text
Size: 212KB - Virtual size: 209KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 8KB - Virtual size: 933KB

.rsrc
Size: 104KB - Virtual size: 100KB

.FLY0
Size: 40KB - Virtual size: 36KB

.FLY1
Size: 92KB - Virtual size: 88KB

.reloc
Size: 16KB - Virtual size: 14KB

.rsrc
Size: 255KB - Virtual size: 704KB

.data
Size: 432KB - Virtual size: 436KB

.adata
Size: - Virtual size: 4KB