37720a0803b499eeba0a6ceebe92dd58db8477ca185b1d3473038ee224bce633

Sharing

Copy URL

Twitter E-mail

General

Target

37720a0803b499eeba0a6ceebe92dd58db8477ca185b1d3473038ee224bce633
Size

94KB
MD5

340dadd4a4c8bbba679671a478ba5610
SHA1

987c877c5aba545dfdc96ccd55b8727a9b7793f3
SHA256

37720a0803b499eeba0a6ceebe92dd58db8477ca185b1d3473038ee224bce633
SHA512

0813d842f8bd6f3c553ca99f544c15f4884eeafaa3b29395d3b539d54678fa727880cf03bfcaa253c62a63821128e0c3b843ba00cf199e8029c775956a09a719
SSDEEP

1536:OKcSEuDhHYjYdSSxDbVh+TDfujP8fn+G5PMNOPk4BCOfXjBVtJ1gFTL:OK5DSwbh+GjUfn+G5PsOcoCOfTXt0FT

Score

N/A

Malware Config

Signatures

Files

37720a0803b499eeba0a6ceebe92dd58db8477ca185b1d3473038ee224bce633
.dll windows x86

6b6c15073ae62223f27b874aa67b4a55

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
SetFilePointer
SetEndOfFile
ReadFile
GetFileSize
ClearCommError
HeapCreate
GetCurrentProcess
WaitForSingleObject
ResetEvent
GetCurrentProcessId
CreateMutexW
CreateProcessW
GetModuleHandleW
lstrcpyA
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeFormatW
GetDateFormatW
WriteFile
InitializeCriticalSectionAndSpinCount
CreateEventW
RegisterWaitForSingleObject
FormatMessageW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetSystemTime
SystemTimeToFileTime
GetCurrentThread
GetCommModemStatus
GetCommState
SetCommState
HeapAlloc
ReadFileEx
GetOverlappedResult
GetLastError
HeapFree
SetEvent
GetCommConfig
CreateFileA
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
DisableThreadLibraryCalls
InitializeCriticalSection
LoadLibraryA
DeleteCriticalSection
FreeLibrary
HeapDestroy
SetCommMask
Sleep
lstrlenA
HeapReAlloc
lstrcatA
GetTickCount
WaitForSingleObjectEx
PurgeComm
lstrlenW
SetCommTimeouts
CreateEventA
CloseHandle
CompareFileTime
VirtualProtect

user32

DispatchMessageW
KillTimer
SetTimer
GetWindowLongW
TranslateMessage
SetWindowPos
SendMessageW
SystemParametersInfoW
IsDialogMessageW
DefWindowProcW
IsWindow
GetMessageW
UnregisterClassW
DestroyWindow
IsDlgButtonChecked
CheckDlgButton
GetSystemMetrics
FlashWindowEx
LoadIconW
EnableWindow
MoveWindow
SetFocus
AnimateWindow
PtInRect
GetParent
FillRect
GetWindowTextW
GetSysColor
DrawTextW
GetDlgItem
InvalidateRect
GetWindowRect
RegisterClassW
GetSysColorBrush
LoadStringW
LoadBitmapW
ReleaseDC
GetDC
SetWindowTextW
SetWindowLongW
CreateDialogParamW
CreateWindowExW
GetClientRect
MapWindowPoints
DestroyIcon
GetCursorPos
PostMessageW
ShowWindow
wvsprintfA
wsprintfA
LoadStringA
IsWindowEnabled

advapi32

RegOpenKeyExW
CheckTokenMembership
GetTokenInformation
OpenProcessToken
RegCreateKeyExW
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
OpenThreadToken

gdi32

CreateSolidBrush
LineTo
MoveToEx
SelectObject
ExtCreatePen
GetObjectW
SetLayout
GetLayout
StretchBlt
SetStretchBltMode
CreateCompatibleDC
DeleteDC
CreateFontIndirectW
GetDeviceCaps
SetTextColor
SetBkMode
GetTextExtentExPointW
Rectangle
GetStockObject
DeleteObject

rpcrt4

RpcEpRegisterW
RpcServerRegisterIfEx
RpcBindingVectorFree
RpcServerUseProtseqEpW
RpcServerUseProtseqW
RpcRevertToSelf
RpcImpersonateClient
RpcServerInqBindings
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcServerRegisterAuthInfoW
RpcStringFreeW

msvcrt

_adjust_fdiv
malloc
_initterm
free
_onexit
__dllonexit
_acmdln
exit
_ismbblead
isspace
_vsnwprintf
printf
_wtol
memmove
memset
sprintf
_except_handler3
time
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z

msvcp60

??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 81KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b6c15073ae62223f27b874aa67b4a55

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

rpcrt4

msvcrt

msvcp60

Sections

.text Size: 81KB - Virtual size: 80KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 33KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 81KB - Virtual size: 80KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 33KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 3KB - Virtual size: 3KB