01ce282678fcc112c561863dfeea59fa49f91c459c6339914014ebf72a526431

Sharing

Copy URL

Twitter E-mail

General

Target

01ce282678fcc112c561863dfeea59fa49f91c459c6339914014ebf72a526431
Size

22KB
MD5

60096047f7125ee94cd1d60c20f79ea1
SHA1

9205e957424a5f0071d66bcabab5c965df00a499
SHA256

01ce282678fcc112c561863dfeea59fa49f91c459c6339914014ebf72a526431
SHA512

5eeae54a7973f93b91457d838ccf74fd7640835fe2c5b1e396d5e1f7a64d65cac41e7e1176cb81031602dd5ad04b38803a5ff78a1b8a16ac16db1ed040f0358d
SSDEEP

384:ml5ApXX3ZGb8+aLEIuvSfO98b9SFMLVhK6RaZsb09VK/Rzixr50Ld:2yQ48Sfd9LLVhKWTWKp+xrih

Score

N/A

Malware Config

Signatures

Files

01ce282678fcc112c561863dfeea59fa49f91c459c6339914014ebf72a526431
.dll windows x86

4913c19722b03999a7bf1e818a55e214

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
CreateThread
FreeLibrary
IsBadReadPtr
CreateToolhelp32Snapshot
Process32First
Process32Next
Sleep
GetPrivateProfileStringA
TerminateProcess
GetLastError
lstrcmpA
GetTickCount
lstrcpynA
MultiByteToWideChar
DeleteFileA
WritePrivateProfileStringA
GlobalAlloc
GlobalLock
WriteFile
GlobalUnlock
GlobalFree
GetSystemTime
CreateMutexA
lstrcmpiA
GetModuleFileNameA
lstrlenA
GetModuleHandleA
CloseHandle
lstrcpyA
ReadFile
SetFilePointer
CreateFileA
lstrcatA
GetTempPathA
VirtualProtect
LoadLibraryA
OpenProcess
GetProcAddress

user32

GetSystemMetrics
ReleaseDC
GetDC
FindWindowA
PostThreadMessageA
GetWindowTextA
SetWindowsHookExA
CallNextHookEx
IsRectEmpty

gdi32

CreateDCA
GetObjectA
SelectPalette
RealizePalette
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC
GetDIBits
GetStockObject

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl

msvcrt

??2@YAPAXI@Z
memcpy
??3@YAXPAX@Z
malloc
free
memmove
??1type_info@@UAE@XZ
memset
strstr

gdiplus

GdiplusShutdown
GdipDisposeImage
GdiplusStartup
GdipGetImageEncoders
GdipAlloc
GdipSaveImageToFile
GdipCloneImage
GdipLoadImageFromFile
GdipFree
GdipGetImageEncodersSize

wininet

InternetOpenA
InternetCloseHandle
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA

Exports

Exports

COMResModuleInstance
VVVV
YYYY

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4913c19722b03999a7bf1e818a55e214

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

gdiplus

wininet

Exports

Exports

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1KB - Virtual size: 12KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1KB - Virtual size: 12KB

.reloc
Size: 2KB - Virtual size: 1KB