af2aaced2d249c4846d593ecfc87afc6b6bedc5c842b13c4803be53a3b475cc6

Sharing

Copy URL Twitter E-mail

General

Target

af2aaced2d249c4846d593ecfc87afc6b6bedc5c842b13c4803be53a3b475cc6
Size

262KB
MD5

3b9fa84a60c9e0793df23d01bec5f210
SHA1

40823d88d523d035b870084e85407d178feb634a
SHA256

af2aaced2d249c4846d593ecfc87afc6b6bedc5c842b13c4803be53a3b475cc6
SHA512

492a4abbdf35a805faeef690234bfae949b77ffb124cff12b9c4a27d83eda376edeca9b3ac4217b73b73d052c7a44ec2acd120f507f3bc595cfa16dbf41cc224
SSDEEP

6144:FtjZD//a6queZ+uE5sk656wUgEr8FqPw:L17/hqueZVqMNlFqP

Score

N/A

Malware Config

Signatures

Files

af2aaced2d249c4846d593ecfc87afc6b6bedc5c842b13c4803be53a3b475cc6
.dll windows x86

e2e1c09879fde6cb7692f5757eff6006

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

dbghelp

MiniDumpWriteDump

kernel32

HeapFree
GetProcessHeap
lstrcmpiA
RaiseException
lstrcpyA
CompareStringA
HeapAlloc
FlushInstructionCache
GetCurrentProcess
GetCurrentThreadId
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameA
MultiByteToWideChar
lstrlenW
GetLastError
WideCharToMultiByte
SizeofResource
LoadLibraryExA
lstrcpynA
IsDBCSLeadByte
InitializeCriticalSection
DebugBreak
GetCurrentProcessId
FreeLibrary
FileTimeToSystemTime
FileTimeToLocalFileTime
GetTempFileNameA
GetTempPathA
FileTimeToDosDateTime
ExitProcess
GetModuleFileNameW
OpenFileMappingA
GetVersion
GetCurrentThread
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
UnmapViewOfFile
VirtualAlloc
WaitForSingleObject
lstrcpynW
OutputDebugStringW
OutputDebugStringA
lstrcpyW
OpenEventA
SetEvent
GetTickCount
GetSystemTimeAsFileTime
GetProcAddress
CopyFileA
LoadResource
ReadFile
FindFirstFileA
FindClose
LoadLibraryA
InterlockedIncrement
DeleteFileA
FindResourceA
CreateFileA
CloseHandle
lstrlenA
IsBadStringPtrA
InterlockedDecrement
GetModuleHandleA
SetUnhandledExceptionFilter
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExA
DisableThreadLibraryCalls
GetSystemInfo
QueryPerformanceCounter

user32

DispatchMessageW
DispatchMessageA
SetWindowPos
TranslateMessage
CreateWindowExA
GetMessageW
IsWindowUnicode
PeekMessageA
MsgWaitForMultipleObjects
SystemParametersInfoA
GetWindowLongA
GetWindowRect
GetMessageA
GetClientRect
GetDlgItem
GetWindow
SetRectEmpty
DestroyCursor
DialogBoxParamA
EndDialog
DestroyMenu
IsMenu
AppendMenuA
InvalidateRect
SetCursor
PtInRect
DefWindowProcA
UpdateWindow
SetCapture
ReleaseCapture
GetCapture
GetCursorPos
ScreenToClient
CreateCursor
GetClassNameA
SetWindowLongA
ReleaseDC
GetDC
EndPaint
BeginPaint
DestroyWindow
UnregisterClassA
CallWindowProcA
DrawFocusRect
FillRect
DrawTextA
IsWindowEnabled
GetSysColor
GetFocus
OffsetRect
MapWindowPoints
GetDlgCtrlID
GetParent
GetSystemMenu
IsWindow
GetWindowTextLengthA
GetWindowTextA
SetFocus
SetWindowTextA
GetSysColorBrush
GetActiveWindow
CharNextA
wvsprintfA
LoadIconA
SendMessageA
MessageBoxA
LoadStringA

gdi32

SetBkMode
GetObjectType
SelectObject
DeleteDC
GetObjectA
GetStockObject
CreateFontIndirectA
SetTextColor
DeleteObject

advapi32

RegDeleteKeyA
RegDeleteValueA
SetThreadToken
RevertToSelf
OpenThreadToken
RegQueryInfoKeyA
RegSetValueExA
RegEnumKeyExA
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA

shell32

ShellExecuteA
SHGetFileInfoA

ole32

CoTaskMemFree
CoRevokeClassObject
CoUnmarshalInterface
CreateStreamOnHGlobal
CoMarshalInterface
CoReleaseMarshalData
CoTaskMemRealloc
CoTaskMemAlloc
CoRegisterClassObject
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocStringLen
SysAllocString
VarUI4FromStr
SysFreeString

comctl32

_TrackMouseEvent

msvcp71d

?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_Nomemory@std@@YAXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

zlib

ord84
ord83
ord82
ord81
ord80

msvcr71d

_free_dbg
_onexit
__dllonexit
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_CRT_RTC_INIT
_callnewh
wcscpy
wcsncpy
wcscmp
memcmp
_snwprintf
_vsnwprintf
_vsnprintf
_snprintf
_mbscspn
_wcsdup
getenv
_except_handler3
_resetstkoflw
_initterm
memset
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
??0exception@@QAE@ABV0@@Z
memmove
_mbscmp
realloc
free
_mbsrchr
_mbschr
atoi
_ismbcdigit
wcslen
??3@YAXPAX@Z
memcpy
??_V@YAXPAX@Z
__CxxFrameHandler
_getpid
_malloc_dbg
_adjust_fdiv
_CrtDbgReport
__CppXcptFilter
__security_error_handler
malloc

Exports

Exports

AddFile
GenerateErrorReport
Install
Uninstall

Sections

.text
Size: 153KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e2e1c09879fde6cb7692f5757eff6006

Headers

File Characteristics

Imports

dbghelp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msvcp71d

zlib

msvcr71d

Exports

Exports

Sections

.text Size: 153KB - Virtual size: 153KB

.rdata Size: 31KB - Virtual size: 30KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 11KB - Virtual size: 10KB

.reloc Size: 8KB - Virtual size: 7KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 153KB - Virtual size: 153KB

.rdata
Size: 31KB - Virtual size: 30KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 11KB - Virtual size: 10KB

.reloc
Size: 8KB - Virtual size: 7KB

.rmnet
Size: 56KB - Virtual size: 60KB