ee0133974b4e7c4836d3f9cf72cf945e2fb25f6f4cbe51fd170b2ef01cc106cb

Sharing

Copy URL Twitter E-mail

General

Target

ee0133974b4e7c4836d3f9cf72cf945e2fb25f6f4cbe51fd170b2ef01cc106cb
Size

248KB
MD5

04b85051268ef8014374b1eb358a200f
SHA1

401e68d26a0b527d5780f8e00b77be517e7b5660
SHA256

ee0133974b4e7c4836d3f9cf72cf945e2fb25f6f4cbe51fd170b2ef01cc106cb
SHA512

2406abfad9fbe70d3dcd9b489178dda9c93fd6b36dd567f988b646b575a9cde483b15790c0ed6746d33ec8d69a5fb891f36ae751b6288de84f6d030bd0ff424a
SSDEEP

6144:k2v3WU0XrrenniM1daiH5ymXE5DjG4+19wxDqnqQC:dSreniM1daiH50nG4+7bnqn

Score

N/A

Malware Config

Signatures

Files

ee0133974b4e7c4836d3f9cf72cf945e2fb25f6f4cbe51fd170b2ef01cc106cb
.dll windows x86

5a3801b1389a9ec79c82ae1d41df376c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

sharedat

?Change_String@ChangeStringClass@@QAE?AVCString@@V2@@Z
?Log@@YAXPBDZZ
??0InfoFromControlClass@@QAE@XZ
?CompareWildChars@ChangeStringClass@@QAEHPBD0H@Z
??0ChangeStringClass@@QAE@XZ
?GetSharedData@InfoFromControlClass@@QAEHPAX@Z
??1ChangeStringClass@@QAE@XZ
?SendMessageToControl@InfoFromControlClass@@QAEJPAUHWND__@@IIJ@Z
??1InfoFromControlClass@@QAE@XZ

mfc40

ord3346
ord3340
ord2694
ord3580
ord3906
ord546
ord2301
ord286
ord4096
ord3345
ord2176
ord3509
ord2427
ord3695
ord2471
ord2905
ord3326
ord592
ord3626
ord3764
ord1725
ord4819
ord2891
ord4619
ord340
ord819
ord817
ord2620
ord2744
ord3945
ord2843
ord2754
ord2617
ord2822
ord265
ord1559
ord4949
ord5440
ord807
ord5192
ord359
ord450
ord679
ord612
ord1387
ord485
ord729
ord731
ord836
ord481
ord5676
ord479
ord4623
ord4839
ord704
ord762
ord486
ord760
ord483
ord706
ord3717

msvcrt40

_adjust_fdiv
_initterm
_onexit
__dllonexit
?terminate@@YAXXZ
_except_handler3
??1type_info@@UAE@XZ
strncpy
_ftol
_CxxThrowException
free
malloc
sprintf
memmove
_mbsicmp
_mbscmp
__CxxFrameHandler

kernel32

GetModuleHandleA
GetVersion
GlobalAlloc
GlobalFree
LoadLibraryA
GetProcAddress
FreeLibrary
CloseHandle
CreateEventA
FindFirstFileA
FindNextFileA
FindClose
MultiByteToWideChar
GetModuleFileNameA
MoveFileA
GetFileAttributesA
SetFileAttributesA
DeleteFileA
RemoveDirectoryA
GetVersionExA
GetLastError
GetCurrentProcess
SetEvent
OpenEventA
ResetEvent
WaitForMultipleObjects
Sleep
GetTickCount
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
OutputDebugStringA
UnmapViewOfFile
GetShortPathNameA
TerminateProcess
OpenProcess
WaitForSingleObject
DisableThreadLibraryCalls

user32

DdeDisconnect
DdeInitializeA
IsRectEmpty
CopyRect
ExitWindowsEx
SetForegroundWindow
ShowWindow
IsIconic
GetWindow
PtInRect
GetWindowRect
SetWindowPos
SendMessageTimeoutA
DdeUninitialize
DdeFreeStringHandle
DdeCreateStringHandleA
DdeClientTransaction
DdeConnect

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
InitiateSystemShutdownA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

oleaut32

SysFreeString

Exports

Exports

??_EChangeStringClass@@QAEPAXI@Z
??_GChangeStringClass@@QAEPAXI@Z
File_CreateLink_FFFFFF_Playback
File_CreateLink_Register
File_Delete_F_Playback
File_Delete_Register
File_FindLine_FSPN_Playback
File_FindLine_Register
File_GetLineCount_FPN_Playback
File_GetLineCount_Register
File_IsFileExist_F_AnswerToQuestion
File_IsFileExist_F_Playback
File_IsFileExist_Register
File_ReadLine_FNPS_Playback
File_ReadLine_Register
File_RemoveLine_FN_Playback
File_RemoveLine_Register
File_Rename_FF_Playback
File_Rename_Register
File_WriteLine_FNS_Playback
File_WriteLine_Register
FreeVarTypeStruct
GetCyberMacroDispatch
Global_ActivateWindow_Register
Global_ActivateWindow_W_Playback
Global_Event_Reset_Register
Global_Event_Reset_S_Playback
Global_Event_Set_Register
Global_Event_Set_S_Playback
Global_Event_Wait_Register
Global_Event_Wait_SNPN_Playback
Global_ExecuteDDE_FFFPN_Playback
Global_ExecuteDDE_Register
Global_FindInCooky_Register
Global_FindInCooky_SSSSPN_Playback
Global_GetTime_NPS_Playback
Global_GetTime_Register
Global_IsWindowOnTopOfWindow_Register
Global_IsWindowOnTopOfWindow_WW_AnswerToQuestion
Global_IsWindowOnTopOfWindow_WW_Playback
Global_KillProcess_FPN_Playback
Global_KillProcess_Register
Global_LongPath2Short_FPS_Playback
Global_LongPath2Short_Register
Global_MinimizeAll_PN_Playback
Global_MinimizeAll_Register
Global_MinimizeWindow_Register
Global_MinimizeWindow_W_Playback
Global_PingWindow_Register
Global_PingWindow_WNNPN_Playback
Global_PingWindow_WNN_Playback
Global_ShowWindow_Register
Global_ShowWindow_WN_Playback
Global_ShutDown_Register
Global_ShutDown_S_Playback
Global_UndoMinimizeAll_PN_Playback
Global_UndoMinimizeAll_Register
ListView_GetImage_Register
ListView_GetImage_WNPN_Playback
RegisterTrainerCompilerCommand
SimpleRect_Item_NNNN_AnswerToQuestion
SimpleRect_Item_NNNN_GetItemRect
SimpleRect_Item_NNNN_InitExit
SimpleRect_Item_NNNN_Playback
SimpleRect_Item_Register
Tree_GetImage_Register
Tree_GetImage_WSPN_Playback

Sections

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 820B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 171KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5a3801b1389a9ec79c82ae1d41df376c

Headers

File Characteristics

Imports

sharedat

mfc40

msvcrt40

kernel32

user32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 48KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 3KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 820B

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 171KB - Virtual size: 172KB

.text
Size: 48KB - Virtual size: 48KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 3KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 820B

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 171KB - Virtual size: 172KB