c4ea33be9025500bffef987769e7bd867348ffe694f6677770ac5fc755f7282b

Sharing

Copy URL

Twitter E-mail

General

Target

c4ea33be9025500bffef987769e7bd867348ffe694f6677770ac5fc755f7282b
Size

273KB
MD5

655c0a8287ca2163c8f90f55adaf5510
SHA1

87488e910e08dc789bf82904bc5b404cdcb1c010
SHA256

c4ea33be9025500bffef987769e7bd867348ffe694f6677770ac5fc755f7282b
SHA512

48e3ca0ab75cd2fd2d95083a94b6e3a8c9779df056ce093f49fa55338cdce3687bfd8109b7bd187e81f79c7fe5fa652851daa4a492b9044806d9786471c794a9
SSDEEP

6144:sWHWyivQInfxsM/Tx1p3qnGz9hA4sB4tJLBmjv9TBECSzD3:h2yOp9S4xtJLBmjv9T

Score

N/A

Malware Config

Signatures

Files

c4ea33be9025500bffef987769e7bd867348ffe694f6677770ac5fc755f7282b
.dll windows x86

6fd3fb6787ad883793981086447b9058

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
VirtualAllocEx
LoadLibraryA
GetProcessId
CloseHandle
WriteProcessMemory
GetCurrentProcess
CopyFileA
GetModuleFileNameA
OpenMutexA
CreateMutexA
FormatMessageA
ReadProcessMemory
GetProcAddress
VirtualFreeEx
OutputDebugStringA
CreateFileA
GetTimeFormatA
GetDateFormatA
GetExitCodeProcess
CreateProcessA
FileTimeToSystemTime
ExitThread
FreeLibraryAndExitThread
GetCurrentDirectoryA
WinExec
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
HeapSize
OpenProcess
CreateRemoteThread
lstrcpyA
CreateThread
DeleteFileA
FindNextFileA
GetExitCodeThread
VirtualAlloc
FindClose
FindFirstFileA
lstrcatA
GetFileAttributesA
Sleep
VirtualFree
GetTickCount
WaitForSingleObject
GetStringTypeW
CreateFileW
WriteConsoleW
IsProcessorFeaturePresent
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetProcessHeap
LoadLibraryW
FlushFileBuffers
LCMapStringW
SetLastError
TlsFree
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
ExitProcess
DecodePointer
HeapReAlloc
RtlUnwind
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
EncodePointer
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
ReadFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
SetFilePointer
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue

user32

GetDC
ReleaseDC
GetDesktopWindow
GetCursorPos
GetSystemMetrics
OemToCharA

gdi32

BitBlt
DeleteDC
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
Rectangle
GetBitmapBits

advapi32

RegOpenKeyExA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
OpenProcessToken
RegCloseKey

shell32

SHCreateDirectoryExA
ord680

userenv

GetUserProfileDirectoryA
GetAllUsersProfileDirectoryA

psapi

GetProcessImageFileNameA
GetModuleBaseNameA
EnumProcessModules
EnumProcesses

ws2_32

send
gethostbyname
closesocket
recv
htons
connect
shutdown
socket
WSAStartup

Exports

Exports

CommProc
Entry

Sections

.text
Size: 198KB - Virtual size: 197KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fd3fb6787ad883793981086447b9058

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

userenv

psapi

ws2_32

Exports

Exports

Sections

.text Size: 198KB - Virtual size: 197KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 25KB - Virtual size: 33KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 198KB - Virtual size: 197KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 25KB - Virtual size: 33KB

.reloc
Size: 8KB - Virtual size: 8KB