b66fed73c6f076589dc4ccf839e050a1bfbbf06e9973472225dca8fdfd523d41

Sharing

Copy URL Twitter E-mail

General

Target

b66fed73c6f076589dc4ccf839e050a1bfbbf06e9973472225dca8fdfd523d41
Size

282KB
MD5

6c786e442aad61c271f50a060d62a800
SHA1

d5a6bfce7fa71bd2b86e5b1641d7bc3d517c15b4
SHA256

b66fed73c6f076589dc4ccf839e050a1bfbbf06e9973472225dca8fdfd523d41
SHA512

30fa6eab664bfd2d7c2507188dfca6baecd9a02e859eb2fd85b7fbdf4a7bb01b4f5a089d67590e4ece47d75250137e0db86ea670b19bb825b72f93602642a2d8
SSDEEP

6144:4+dT6ET80ii3T3KQGNauy5nARNMrNHcgZ16h0yDTe2G:1kETNvT0a46xP6h9D62G

Score

N/A

Malware Config

Signatures

Files

b66fed73c6f076589dc4ccf839e050a1bfbbf06e9973472225dca8fdfd523d41
.exe windows x86

75ec5e5ce2f38bd9c55a9c8d69987d77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpynW
LoadResource
QueryPerformanceCounter
GetProcAddress
SetUnhandledExceptionFilter
GetProcessHeap
LoadLibraryW
lstrcmpiW
SizeofResource
lstrlenA
FreeLibrary
HeapFree
lstrcpyW
GetCurrentProcess
GetTickCount
SetLastError
GetLastError
FindResourceW
LoadLibraryExW
lstrcatW
GetCurrentProcessId
InterlockedDecrement
GetUserDefaultLCID
IsValidCodePage
GetModuleFileNameW
InterlockedIncrement
LoadLibraryA
GetSystemTimeAsFileTime
MultiByteToWideChar
DeleteCriticalSection
GetEnvironmentStringsA
FormatMessageW
HeapDestroy
LocalFree
lstrlenW
FlushInstructionCache
OutputDebugStringA
HeapAlloc
GetStartupInfoA
LeaveCriticalSection
VirtualFree
GetSystemInfo

shell32

SHGetFolderPathW
ShellExecuteW

rpcrt4

NdrOleFree
NdrDllGetClassObject
NdrDllRegisterProxy
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Invoke
CStdStubBuffer_QueryInterface
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_AddRef
NdrDllUnregisterProxy
CStdStubBuffer_Connect
NdrOleAllocate

user32

MapWindowPoints
SetFocus
SendMessageW
GetWindow
LoadStringW
GetDlgItemTextW
GetSystemMetrics
GetDialogBaseUnits
CreateDialogParamW
CharNextW
SetWindowPos
DrawTextW
GetWindowLongW
DialogBoxParamW
EndDialog
SendDlgItemMessageW
GetParent
CopyRect
SetWindowLongW
SystemParametersInfoW
MessageBoxW
ShowWindow
GetWindowRect
SetDlgItemTextW
GetClientRect
GetDlgItem
SetWindowTextW
EnableWindow
DestroyWindow
LoadImageW

wldap32

ldap_count_references
ldap_controls_freeW
ldap_count_entries
ldap_count_values

url

OpenURL
TelnetProtocolHandlerA
OpenURLA
TelnetProtocolHandler

advapi32

RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
UnregisterTraceGuids
RegCloseKey
RegisterTraceGuidsW
RegQueryInfoKeyW
TraceMessage
RegSetValueExW
RegDeleteValueW
RegEnumKeyExW
GetTraceLoggerHandle
GetTraceEnableLevel
RegDeleteKeyW
GetTraceEnableFlags

Sections

text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 151KB - Virtual size: 159KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75ec5e5ce2f38bd9c55a9c8d69987d77

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

rpcrt4

user32

wldap32

url

advapi32

Sections

text Size: 123KB - Virtual size: 122KB

.rdata Size: 151KB - Virtual size: 159KB

.rsrc Size: 5KB - Virtual size: 5KB

text
Size: 123KB - Virtual size: 122KB

.rdata
Size: 151KB - Virtual size: 159KB

.rsrc
Size: 5KB - Virtual size: 5KB