0114d97460687dc562810731b41a7e83fb5eea7890d394edc5618cc02cbe064f

Sharing

Copy URL Twitter E-mail

General

Target

0114d97460687dc562810731b41a7e83fb5eea7890d394edc5618cc02cbe064f
Size

20KB
MD5

6188067df0137bdea6d6859245298810
SHA1

531432a8cb778065d553cd3b2bb787424a80b0b6
SHA256

0114d97460687dc562810731b41a7e83fb5eea7890d394edc5618cc02cbe064f
SHA512

193f34e1762186306cb5451cef8a4894643ff7217f5d283d1f2f13f91a4c4362cd95691e5a9fbf48bdb0df24b3a2dce62e6afdb6bca093ce0a3f664ab28291fa
SSDEEP

384:IBb9Ysjdh93Q1L2cPzRUno7ej+jByDLvZRie:IxTZhdQ1KcbwoSijB+LH

Score

N/A

Malware Config

Signatures

Files

0114d97460687dc562810731b41a7e83fb5eea7890d394edc5618cc02cbe064f
.dll windows x86

4fddfcc396694ef8399cf41b66d366ff

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrcatA
LocalFree
GetLastError
GetVersionExA
GlobalFree
GlobalAlloc
HeapFree
HeapAlloc
GetProcessHeap
SearchPathA
GetTempPathA
GetTickCount
CreateMutexA
GetModuleHandleA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
CreateRemoteThread
DuplicateHandle
GetCurrentProcess
VirtualProtectEx
CreateThread
ReleaseMutex
CloseHandle
GetModuleFileNameA
lstrcmpiA
GetSystemDirectoryA
DeleteFileA
FindFirstFileA
CreateFileA
WriteFile
ReadFile
Sleep
FreeLibrary
GetCurrentProcessId
OpenProcess
TerminateProcess
LoadLibraryA
GetProcAddress

user32

GetForegroundWindow
wsprintfA
GetWindowTextA

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDCA

advapi32

LookupPrivilegeValueA
SetSecurityInfo
SetEntriesInAclA
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges

msvcrt

mbstowcs
strlen
strcat
memcpy
memset
strstr
strcpy
strrchr
wcscmp
malloc
fclose
fread
??2@YAPAXI@Z
rewind
ftell
fseek
fopen
??3@YAXPAX@Z
sprintf
printf
_strlwr
free

ws2_32

gethostbyname
WSACleanup
htons
socket
recv
send
WSAStartup
connect
closesocket

msvcp60

?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

wininet

InternetCloseHandle
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile

Exports

Exports

Install

Sections

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fddfcc396694ef8399cf41b66d366ff

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

ws2_32

msvcp60

wininet

Exports

Exports

Sections

.bss Size: - Virtual size: 4KB

.data Size: 17KB - Virtual size: 17KB

.reloc Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 4KB

.data
Size: 17KB - Virtual size: 17KB

.reloc
Size: 2KB - Virtual size: 1KB