c61a305ad4f2a7445846f8cf2f15357d55453ff344065acabf935a7f1cc52598

Sharing

Copy URL Twitter E-mail

General

Target

c61a305ad4f2a7445846f8cf2f15357d55453ff344065acabf935a7f1cc52598
Size

32KB
MD5

e390b83531dcd89654966544b3a5c8cd
SHA1

8e41bd9991513aaf4118ef34357ba79c7543c61d
SHA256

c61a305ad4f2a7445846f8cf2f15357d55453ff344065acabf935a7f1cc52598
SHA512

5307d3cc8323987dc418be34952c043f5003c8909386ad6259dbcce72961d5012d85e19259d09ecfa334f16627d1e38e35ae1d403bc70016b5f56769f5baf91b
SSDEEP

192:tZveg0bklihliRf0uSyWNKqjRFDshSRMYkrc6UitW/Wt8:T3BYh0Rf0Zy0KqYhSsrc6RtW/Wt

Score

N/A

Malware Config

Signatures

Files

c61a305ad4f2a7445846f8cf2f15357d55453ff344065acabf935a7f1cc52598
.dll windows x86

d50a175232b59f7ddfe0e20343de8f92

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

urlmon

URLDownloadToFileA

wininet

DeleteUrlCacheEntry

ws2_32

socket
connect
send
htonl
gethostname
inet_ntoa
WSASocketA
setsockopt
htons
inet_addr
gethostbyname
sendto
WSAStartup

msvcrt

strcmp
fopen
fseek
ftell
fgetc
fread
fclose
strcat
_ftol
_kbhit
strstr
strcpy
atoi
sprintf
memset
rand
srand
time
strlen
memcpy

kernel32

LocalAlloc
GetVolumeInformationA
CloseHandle
TerminateThread
ExitThread
Sleep
GetCurrentProcessId
GetTickCount
HeapAlloc
GetProcessHeap
lstrcatA
lstrcpyA
CreateThread
GlobalMemoryStatus
GetVersionExA
GetProcAddress
GetModuleHandleA
SetSystemTime
GetSystemTime
GetFileSize
CreateFileA
WinExec
GetSystemDirectoryA
DeleteFileA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetComputerNameA
lstrlenA

user32

SendMessageA
FindWindowExA
GetClassNameA
GetWindowTextA
PostMessageA
CharUpperA
wsprintfA
EnumWindows

advapi32

QueryServiceConfigA
ChangeServiceConfigA
OpenServiceA
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Exports

Exports

_DllMain@12

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d50a175232b59f7ddfe0e20343de8f92

Headers

File Characteristics

Imports

urlmon

wininet

ws2_32

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 246KB

.rsrc Size: 4KB - Virtual size: 640B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 246KB

.rsrc
Size: 4KB - Virtual size: 640B

.reloc
Size: 4KB - Virtual size: 1KB