cf6abae44e2d554dc574a19beca5afbe6c2ffc74c253773d582d879d74bb3a4d

Sharing

Copy URL Twitter E-mail

General

Target

cf6abae44e2d554dc574a19beca5afbe6c2ffc74c253773d582d879d74bb3a4d
Size

42KB
MD5

6c34e55fcbc805fcdd8472f50ec9b415
SHA1

34278ef26c250de5045fdd5e7b193f6fe8f9e433
SHA256

cf6abae44e2d554dc574a19beca5afbe6c2ffc74c253773d582d879d74bb3a4d
SHA512

1bcd0106ac25fa1f24ec784167cd5b4583bf241621064648407fba039b07c7782d96102152c020b8dcbb95d8c77c4717da58ea8f87a0a5f44e2e75a4150e8ad4
SSDEEP

768:mm+RMl2iz3EdxQGFSxGkhHXX+dUYbSXABNMveyTDCfCRnCNIgUBpL:mm+RMkiz3EdxVFwGGHXOW6tNMveyTm89

Score

N/A

Malware Config

Signatures

Files

cf6abae44e2d554dc574a19beca5afbe6c2ffc74c253773d582d879d74bb3a4d
.dll windows x86

f70fb4a5e7d0d31218e18e8f132a54f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetLastError
GetVersionExA
GlobalFree
GlobalAlloc
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
SearchPathA
GetTempPathA
GetTickCount
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
CreateRemoteThread
DuplicateHandle
GetCurrentProcess
VirtualProtectEx
GlobalReAlloc
lstrcatA
lstrlenA
GetSystemDirectoryA
DeleteFileA
GetPrivateProfileStringA
GetFileAttributesA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
Sleep
FreeLibrary
CreateMutexA
CreateThread
ReleaseMutex
CloseHandle
GetModuleFileNameA
lstrcmpiA
GetCurrentProcessId
OpenProcess
TerminateProcess

user32

GetDC
ReleaseDC
wsprintfA
GetWindowTextA
GetForegroundWindow
GetWindowThreadProcessId
EnumWindows
keybd_event
SetForegroundWindow

gdi32

RealizePalette
SelectPalette
GetObjectA
GetStockObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
GetDIBits
CreateDCA

advapi32

GetTokenInformation
SetEntriesInAclA
SetSecurityInfo
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken

msvcrt

fwrite
printf
sprintf
_strlwr
memcpy
memset
strcpy
strlen
strcat
strrchr
free
malloc
strstr
fclose
fread
??2@YAPAXI@Z
rewind
ftell
fseek
fopen
??3@YAXPAX@Z

ws2_32

send
closesocket
connect
gethostbyname
htons
WSAStartup
WSACleanup
recv
socket

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

wininet

InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile
InternetCloseHandle

Exports

Exports

Install

Sections

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f70fb4a5e7d0d31218e18e8f132a54f4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

ws2_32

msvcp60

wininet

Exports

Exports

Sections

.bss Size: - Virtual size: 4KB

.data Size: 38KB - Virtual size: 38KB

.reloc Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 4KB

.data
Size: 38KB - Virtual size: 38KB

.reloc
Size: 2KB - Virtual size: 2KB