74c12c1f5ad30a2ff41b4995aa107fd17157ae24e4867da556e18f6beddb4b92

Sharing

Copy URL Twitter E-mail

General

Target

74c12c1f5ad30a2ff41b4995aa107fd17157ae24e4867da556e18f6beddb4b92
Size

648KB
MD5

007de9c9553ff5cc8990c937a1cd6960
SHA1

93ef766e18e2dfabf1b83a2a4cfc7636bdea87b9
SHA256

74c12c1f5ad30a2ff41b4995aa107fd17157ae24e4867da556e18f6beddb4b92
SHA512

e1b88cdbf151600a896c56a1461fd498fb388f3ea63f5dd5140d626701adf1b191a5dcb1e01a23d17c13ad412b76127bedf77e6524e81fdf22df83210852b5a3
SSDEEP

12288:sOR0WjyifqYgZ9iR4aE2nkdMxjLVCzNdceTHh0P1UVE:sORLj5gI5ndtCzNdcahb

Score

N/A

Malware Config

Signatures

Files

74c12c1f5ad30a2ff41b4995aa107fd17157ae24e4867da556e18f6beddb4b92
.dll windows x86

8a668ce63c2a64af78a438d0b3d5b26b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathSkipRootA
PathCombineA

wininet

InternetOpenA
InternetOpenUrlA
InternetSetFilePointer
HttpOpenRequestA
InternetSetOptionA
InternetConnectA
HttpQueryInfoA
InternetReadFile
HttpSendRequestA
InternetCloseHandle

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

kernel32

GetLocaleInfoW
SetEvent
Sleep
ResetEvent
CreateEventA
GlobalFree
lstrcpyA
lstrcpynA
GlobalAlloc
lstrcmpiA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetDriveTypeA
lstrlenA
GetLogicalDriveStringsA
TerminateProcess
GetExitCodeProcess
WaitForSingleObject
GetLastError
CreateProcessA
OpenProcess
DisableThreadLibraryCalls
CloseHandle
GetFileSize
CreateFileA
GetFileAttributesA
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
MoveFileExA
GetPrivateProfileStringA
lstrcmpA
CreateFileW
ReadFile
WriteFile
SetFilePointer
GetVersionExA
GetCurrentThreadId
ResumeThread
GetTickCount
SetFileAttributesA
SetEnvironmentVariableA
WritePrivateProfileStringA
GetVersion
ExpandEnvironmentStringsA
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryA
RemoveDirectoryA
CopyFileA
DeleteFileA
FreeLibrary
GetModuleFileNameA
LoadLibraryA
GetModuleHandleA
LoadLibraryExA
InitializeCriticalSection
GetSystemInfo
GetSystemDirectoryA
lstrcatA
GetWindowsDirectoryA
GetCurrentDirectoryA
SearchPathA
DeviceIoControl
GetFileSizeEx
GetTempFileNameA
GetFullPathNameA
SetCurrentDirectoryA
GetLongPathNameA
GetFileInformationByHandle
GetTempPathA
MoveFileA
SetFileTime
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
GetFileTime
SetEndOfFile
FindNextFileA
FindClose
FindFirstFileA
GetLocaleInfoA
SetConsoleCtrlHandler
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
TlsFree
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
ExitProcess
HeapSize
HeapReAlloc
VirtualAlloc
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
InterlockedExchange
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
InterlockedIncrement
SetLastError
GetProcAddress
CompareStringW
TlsSetValue
TlsAlloc
TlsGetValue
GetSystemTimeAsFileTime
CreateThread
ExitThread
HeapCreate
HeapDestroy
GetStdHandle
GetCurrentThread
GetProcessHeap
GetCommandLineA
IsDebuggerPresent
RaiseException
RtlUnwind
HeapFree
HeapAlloc
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedDecrement

user32

ShowWindow
wsprintfA
SetTimer
KillTimer
GetWindowRect
AttachThreadInput
GetWindowLongA
SystemParametersInfoA
IsWindowVisible
IsIconic
GetForegroundWindow
SetWindowTextA
GetWindowTextA
SetWindowPos
MapWindowPoints
IsZoomed
GetWindowTextLengthA
SetForegroundWindow
GetWindow
GetSystemMetrics
LoadStringW
GetDlgItem
GetActiveWindow
GetParent
GetClientRect
EnumThreadWindows
GetClassNameA
SendMessageA
SendMessageTimeoutA
GetWindowThreadProcessId

advapi32

RegSetValueExA
RegLoadKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteValueA
RegSaveKeyA
RegRestoreKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegQueryInfoKeyA
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegQueryValueExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderPathA

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

oleaut32

SysAllocString
SysFreeString

Exports

Exports

AddToFirewall
ChangeInstDirtoMax
Check360Install
CheckHomeState
CheckInstallLimit
CheckInstalled
CheckKuaibaInstalled
ConvertSoftInstallTime
CreateShortcut
CreateTimer
DestroyTimer
Exec
ExecWait
ForceDeleteFile
Get7zOriginalSize
GetAdvertFileName
GetAdvertID
GetAdvertIcon
GetAdvertLocalFile
GetAdvertName
GetAdvertUrl
GetBaiduHomePageURL
GetChromeHomePageURL
GetExeFileNameFromUrl
GetForceAdvertFileName
GetForceAdvertID
GetForceAdvertLocalFile
GetForceAdvertName
GetForceAdvertUrl
GetHomePageName
GetHomePageName2
GetIEHomePageURL
GetSingleFileSize
GetSougouHomePageURL
GetSpecialBuild
GetSubChannel
HomePageChecksOut
InitPopUpInfo
IsAutoRun
IsCurrHomePageURL
LoadEncrypedXML
LoadEncrypedXMLFromUrl
LoadXMLFromUrl
LoadXml
OpenUrl
PinToTaskbar
PopUp
PopupAD
SendResearchResult
SetHomePage
SetHomePageUrl
SetUnGameList
TaskKillByHwnd
TaskKillByWindow
UnPinFromTaskBar

Sections

.text
Size: 484KB - Virtual size: 481KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8a668ce63c2a64af78a438d0b3d5b26b

Headers

File Characteristics

Imports

shlwapi

wininet

version

kernel32

user32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 484KB - Virtual size: 481KB

.rdata Size: 64KB - Virtual size: 60KB

.data Size: 12KB - Virtual size: 29KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 20KB - Virtual size: 19KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 484KB - Virtual size: 481KB

.rdata
Size: 64KB - Virtual size: 60KB

.data
Size: 12KB - Virtual size: 29KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 20KB - Virtual size: 19KB

.rmnet
Size: 60KB - Virtual size: 60KB