3280ca03ab1d6c1365ab1f5d10debe95ceb29dc73bb6d14fa2a44fe7bdd8694f

Sharing

Copy URL Twitter E-mail

General

Target

3280ca03ab1d6c1365ab1f5d10debe95ceb29dc73bb6d14fa2a44fe7bdd8694f
Size

44KB
MD5

4787867697607bf82b0ee9d1d8376210
SHA1

458ad9977b0610f3e962aa2d4b4c434e88b75b1b
SHA256

3280ca03ab1d6c1365ab1f5d10debe95ceb29dc73bb6d14fa2a44fe7bdd8694f
SHA512

2c46a1b01814152f6e601e3c73ae1e56eb3ea05577e3ec568a4906ad6ab41cd9e13904ceadf4cdbe2f872a583043a74c9005983e72da388fed11bdc93b26650e
SSDEEP

768:cs000AM38tjly8AfSXB5kFA7DsEYaZnMk/Is2eo5YALaneR5vx:cs94IypqoFA7DsnavIsPJneF

Score

N/A

Malware Config

Signatures

Files

3280ca03ab1d6c1365ab1f5d10debe95ceb29dc73bb6d14fa2a44fe7bdd8694f
.dll windows x86

57d0b7aacf554cf45c7330d4d46ca4aa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
wsprintfA
DefWindowProcA
PostQuitMessage
SetTimer
RegisterClassExA
CreateWindowExA
MoveWindow
SendMessageA
GetMessageA
TranslateMessage
DispatchMessageA
KillTimer

advapi32

OpenProcessToken
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey

ws2_32

htonl
gethostbyname
gethostname
inet_ntoa

mpr

WNetEnumResourceA
WNetOpenEnumA
WNetCancelConnection2A
WNetAddConnection2A
WNetCloseEnum

msvcrt

free
time
srand
tolower
_strlwr
strstr
_stricmp
rand
strcpy
_initterm
memcmp
strlen
strcat
sprintf
memcpy
_except_handler3
strcmp
strncpy
malloc
_adjust_fdiv
memset

kernel32

Sleep
lstrcmpiA
FindFirstFileA
GetDriveTypeA
GetLogicalDrives
FindNextChangeNotification
WaitForMultipleObjects
DeviceIoControl
WaitForSingleObject
OpenEventA
ExitThread
CreateThread
DisableThreadLibraryCalls
LoadLibraryA
FindNextFileA
FindClose
FindFirstChangeNotificationA
GlobalAlloc
OpenMutexA
OpenThread
QueueUserAPC
Thread32First
Thread32Next
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemDirectoryA
GetModuleHandleA
lstrlenA
MultiByteToWideChar
SetFileAttributesA
GetFileTime
CreateFileMappingA
MapViewOfFile
GetFileSize
SetFilePointer
SetFileTime
UnmapViewOfFile
CopyFileA
OpenProcess
ReadProcessMemory
RemoveDirectoryA
GetTempFileNameA
MoveFileA
TerminateProcess
GetThreadContext
VirtualAllocEx
WriteProcessMemory
SetThreadContext
WideCharToMultiByte
GetModuleFileNameA
FreeLibrary
GetProcAddress
GetCurrentProcess
WriteFile
DeleteFileA
CloseHandle
CreateFileA
GetTempPathA
ReadFile
GetCurrentProcessId
CreateProcessA
GetVolumeInformationA
GetVersionExA
GetFileAttributesA
lstrcpynA
lstrcatA
GetWindowsDirectoryA
ExitProcess
VirtualFree
VirtualAlloc
GetLastError
CreateMutexA
ResumeThread

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57d0b7aacf554cf45c7330d4d46ca4aa

Headers

File Characteristics

Imports

user32

advapi32

ws2_32

mpr

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 1016B

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 1016B

.reloc
Size: 4KB - Virtual size: 1KB