4c7b0c83d3aee90558da8687f95828b7f7050d79180e21801a6afad3d9c9d70f

Sharing

Copy URL Twitter E-mail

General

Target

4c7b0c83d3aee90558da8687f95828b7f7050d79180e21801a6afad3d9c9d70f
Size

147KB
MD5

71481a4f2b089a963c81baac980c2590
SHA1

f455d001e25cdad123b44b27348fe3e3cb77c9ac
SHA256

4c7b0c83d3aee90558da8687f95828b7f7050d79180e21801a6afad3d9c9d70f
SHA512

f889ef51e499e906565268ce8d466b66c3d990b888bba458b502e863c122cfd9b5b6a4ce399e210a61359987450f14c170c94e8fb9316176d6092733255fde57
SSDEEP

3072:+N3lJkSklXxqw7tuTQsV1QQuNg/gUmF/KUf3s7z1W/1sStP:U3fUIw7tucx2oF8A1sEP

Score

N/A

Malware Config

Signatures

Files

4c7b0c83d3aee90558da8687f95828b7f7050d79180e21801a6afad3d9c9d70f
.dll windows x86

d926acad7a8368aaefa3e0aec7192f96

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
GetVersion
OutputDebugStringA
GetLastError
MultiByteToWideChar
FormatMessageA
lstrcatA
GetPrivateProfileStringA
CreateProcessA
CloseHandle
lstrlenA
GetPrivateProfileIntA
GetProcAddress
GetCurrentProcess
GetCurrentThreadId
TerminateProcess
GetLocaleInfoA
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
SetFilePointer
GetStringTypeW
GetStringTypeA
LoadLibraryA
LCMapStringW
LCMapStringA
HeapReAlloc
GetLocaleInfoW
TlsSetValue
InterlockedIncrement
InterlockedDecrement
CreateFileA
SetStdHandle
VirtualAlloc
_lclose
_lread
OpenFile
_lwrite
_llseek
lstrcmpiA
GetCommandLineA
lstrcpyA
GetModuleHandleA
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetModuleFileNameA
GetStartupInfoA
WriteFile
FlushFileBuffers
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
VirtualFree
FreeEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
HeapDestroy
HeapCreate

user32

MessageBoxA
SendMessageA
wvsprintfA
GetWindowTextA
DdeConnect
SetWindowPos
EnumWindows
wsprintfA
GetFocus
DdeInitializeA
DdeUninitialize
PostMessageA
FindWindowA
DdeDisconnect
DdeClientTransaction
DdeCreateStringHandleA
PeekMessageA
TranslateMessage
DispatchMessageA
DdeCreateDataHandle
DdeFreeStringHandle

advapi32

RegCloseKey
RegSetValueA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA

shell32

SHFileOperationA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

iq_com32

ord80
ord81
ord83
ord92
ord82

Exports

Exports

ClearReminder
InstallReminder
RemoveReminder
ScheduleReminder
SetReminder
UninstallReminder

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d926acad7a8368aaefa3e0aec7192f96

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

iq_com32

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 14KB - Virtual size: 27KB

.idata Size: 3KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 4KB

.text Size: 76KB - Virtual size: 76KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 14KB - Virtual size: 27KB

.idata
Size: 3KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 4KB

.text
Size: 76KB - Virtual size: 76KB