fe9f8d7b88db3629d23e8b89ced9aefbfb044c1c945978ce34ea3bbb90bb3261

Sharing

Copy URL Twitter E-mail

General

Target

fe9f8d7b88db3629d23e8b89ced9aefbfb044c1c945978ce34ea3bbb90bb3261
Size

268KB
MD5

6160c47bfbac66a8e93e861446a7af90
SHA1

44f4e815317466b960fc9fe6c8fb964d58283b3e
SHA256

fe9f8d7b88db3629d23e8b89ced9aefbfb044c1c945978ce34ea3bbb90bb3261
SHA512

9fa00ab1d67cf05800c3750d82f1fee7679fe71c52a389962d569f947cd5a099c5d37bd0286aedda981d1bc2761939e890d2fe76d5c0f389b806975c1dc6cab8
SSDEEP

6144:ycRcdy0XVe5u03a543GrJaGmErM+2W5E3Js1:ycMFoK5VdmMM+2Ji

Score

N/A

Malware Config

Signatures

Files

fe9f8d7b88db3629d23e8b89ced9aefbfb044c1c945978ce34ea3bbb90bb3261
.dll windows x86

ff5d8881cf65a8b5aed4dcc0db20fcd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringW
GetVersionExW
GetPrivateProfileIntW
GetLastError
CreateFileW
HeapFree
GetProcessHeap
HeapAlloc
GetModuleFileNameW
LoadLibraryA
FreeLibrary
GetLocalTime
FlushFileBuffers
GetPrivateProfileStringW
Sleep
CloseHandle
ResetEvent
WaitForSingleObject
CreateEventA
GetProcAddress
CreateThread
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
SetFilePointer
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
IsBadWritePtr
RtlUnwind
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc

user32

PostMessageA
PostThreadMessageA

advapi32

RegEnumKeyW
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHGetSpecialFolderPathW

shlwapi

PathRemoveFileSpecW

logmodule

LOGForVC6

rasapi32

RasGetEntryPropertiesW
RasSetEntryPropertiesW
RasSetEntryDialParamsW
RasDialW
RasValidateEntryNameW
RasGetConnectStatusA
RasHangUpA
RasEnumConnectionsW
RasHangUpW

Exports

Exports

AddDisconnectListener
AddDisconnectListener_HWND
Dial
DialEx
Disconnect
GetConnectionStatistics
IsAlreadyConnected
IsDisconnected
RegiterThreadID

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ff5d8881cf65a8b5aed4dcc0db20fcd3

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

logmodule

rasapi32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 8KB - Virtual size: 12KB

.reloc Size: 8KB - Virtual size: 4KB

.text Size: 188KB - Virtual size: 188KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 8KB - Virtual size: 12KB

.reloc
Size: 8KB - Virtual size: 4KB

.text
Size: 188KB - Virtual size: 188KB