be8faccabf3692efad4a87cc03d560c550f5be7dca5e3dea69fb6db7576fe61e

Sharing

Copy URL Twitter E-mail

General

Target

be8faccabf3692efad4a87cc03d560c550f5be7dca5e3dea69fb6db7576fe61e
Size

360KB
MD5

7ad59b3efa09b728dd0770852398626e
SHA1

2513ec7306de2dd5ce96358f70d575d70b31fb64
SHA256

be8faccabf3692efad4a87cc03d560c550f5be7dca5e3dea69fb6db7576fe61e
SHA512

cd8cd61812f1626ef2470c191945ff93261ec81e6ad4fc102fd6875998aca6bfcbedba8a2b19c356e877358e9bd019f4bd12bc52565c4ffa3ea61bdb7e786cc2
SSDEEP

6144:byNznDQ87kvCOghwTjp8Kz5l+GyRvwbi1QPFbH05Lyy3ZoibyNCQGFjWG9qUePJM:byNbDQ87kvCJhwTjp8Kz5l+GyRvwbi1/

Score

N/A

Malware Config

Signatures

Files

be8faccabf3692efad4a87cc03d560c550f5be7dca5e3dea69fb6db7576fe61e
.dll windows x86

69e0414a34949e42dbc0247c24becf1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
printf
_mbctype
strncpy
fopen
fseek
ftell
fread
fclose
rename
_chmod
isspace
isalpha
_ismbcspace
_vsnprintf
_stricmp
??2@YAPAXI@Z
_lseeki64
_telli64
_errno
_chsize
_fstat
malloc
getenv
free
realloc
localtime
time
_strdup
_strnicmp
_putenv
_creat
_close
fflush
fwrite
memset
strcmp
strcat
memcpy
strlen
strcpy
_open
_sopen
_lseek
_tell
_read
_write
_unlink
_mkdir
_rmdir
_getcwd
_chdir
??3@YAXPAX@Z
strrchr
atoi
atol
ceil
_ftol
sprintf
strchr
_purecall
isalnum
memmove
strstr
memchr
__CxxFrameHandler
strftime
_stat
rand

ole32

CoUninitialize
CoCreateInstance
CoInitialize

kernel32

GetFileSize
FindFirstFileA
GetDriveTypeA
GetModuleFileNameA
GetFileAttributesA
SetEvent
GetWindowsDirectoryA
FindClose
FindNextFileA
GetVersion
GetVersionExA
GetSystemDirectoryA
GetTempFileNameA
CreateFileMappingA
MapViewOfFile
GetLastError
UnmapViewOfFile
GetSystemInfo
LoadLibraryA
GetCurrentProcess
GetProcAddress
FreeLibrary
CreateFileA
DeleteFileA
OpenFile
_lread
_llseek
_lclose
WideCharToMultiByte
lstrcpynA
MoveFileExA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
lstrlenA
GetShortPathNameA
GetProfileStringA
GetPrivateProfileStringA
lstrcpyA
WritePrivateProfileStringA
MultiByteToWideChar
CreateProcessA
SetErrorMode
CreateDirectoryA
InterlockedDecrement
InterlockedIncrement
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CloseHandle
WaitForSingleObject
GetTickCount
GetTempPathA
OpenEventA
GetDiskFreeSpaceA
GetSystemTime
CreateThread
TerminateProcess
OpenProcess
Sleep
WinExec
GetExitCodeProcess

user32

CharUpperA
ExitWindowsEx
DdeCreateDataHandle
MessageBoxA
CharLowerA
DdeClientTransaction
DdeGetData
CreateWindowExA
DdeFreeDataHandle
DdeDisconnect
DdeUninitialize
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeFreeStringHandle
IsWindowVisible
wsprintfA
SendMessageTimeoutA
GetWindowThreadProcessId
EnumWindows
FindWindowA
GetWindow
GetWindowTextA
GetClassNameA
IsWindow
GetParent
GetPropA
GetWindowLongA
SetPropA
PostMessageA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
PeekMessageA
DestroyWindow
GetClassInfoA
RegisterClassA
GetSystemMetrics
CharPrevA
CharNextA
DefWindowProcA

advapi32

RegCreateKeyA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wininet

InternetCloseHandle
InternetReadFile
InternetConnectA
InternetOpenA
HttpOpenRequestA
HttpSendRequestA

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
NR_RegAddKey
NR_RegAddKeyRaw
NR_RegClose
NR_RegDeleteEntry
NR_RegDeleteKey
NR_RegDeleteKeyRaw
NR_RegEnumEntries
NR_RegEnumSubkeys
NR_RegGetEntry
NR_RegGetEntryInfo
NR_RegGetEntryString
NR_RegGetKey
NR_RegGetKeyRaw
NR_RegGetUsername
NR_RegIsWritable
NR_RegOpen
NR_RegSetEntry
NR_RegSetEntryString
NR_RegSetUsername
NR_ShutdownRegistry
NR_StartupRegistry
RMACreateInstance
RMAShutdown
RNCreateInstance
RPCreateClass
SetDLLAccessPath
VR_Close
VR_CreateRegistry
VR_Enum
VR_EnumUninstall
VR_GetDefaultDirectory
VR_GetPath
VR_GetRefCount
VR_GetUninstallUserName
VR_GetVersion
VR_InRegistry
VR_Install
VR_Remove
VR_SetDefaultDirectory
VR_SetRefCount
VR_SetRegDirectory
VR_UninstallAddFileToList
VR_UninstallCreateNode
VR_UninstallDeleteFileFromList
VR_UninstallDeleteSharedFilesKey
VR_UninstallDestroy
VR_UninstallEnumSharedFiles
VR_UninstallFileExistsInList
VR_ValidateComponent

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

69e0414a34949e42dbc0247c24becf1b

Headers

File Characteristics

Imports

pncrt

ole32

kernel32

user32

advapi32

version

wininet

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 16KB - Virtual size: 12KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 16KB - Virtual size: 12KB

.rmnet
Size: 60KB - Virtual size: 60KB