525c9783a61f8cfdf6775ed31ff14f993fdcc71c609edabb56568d94ebb17ac3

Sharing

Copy URL Twitter E-mail

General

Target

525c9783a61f8cfdf6775ed31ff14f993fdcc71c609edabb56568d94ebb17ac3
Size

159KB
MD5

6b888e6d44553dd2a2b48897231fe610
SHA1

3897788fb4883ea03b87dceeccffcd936cec2fda
SHA256

525c9783a61f8cfdf6775ed31ff14f993fdcc71c609edabb56568d94ebb17ac3
SHA512

2d8c7c62d97b305a1953f363343e0a7507f75eb35c45bb08bba4d9812360d8e82f46106b72383eaf4d4718a92093c57dbed42b2504e3f0b06a372cd84121435c
SSDEEP

3072:HRccpvUG4OmCnxYWI5SEsjCkoxNSzQF9eseAjLaLvkPdaV8VrIM:yYU7cJcZZNIodjcUEV8p

Score

N/A

Malware Config

Signatures

Files

525c9783a61f8cfdf6775ed31ff14f993fdcc71c609edabb56568d94ebb17ac3
.dll windows x86

4a8471176721c0667754c7ab16216f74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_initterm
memmove
memcmp
strcmp
free
malloc
strlen
_strnicmp
rename
_mbsrchr
sprintf
strncpy
_except_handler3
_vsnprintf
time
srand
rand
memchr
memset
memcpy
strrchr
strcpy
strcat
__CxxFrameHandler

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

kernel32

CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenMutexA
GlobalMemoryStatus
QueryPerformanceFrequency
QueryPerformanceCounter
lstrlenA
CreateMutexA
ReleaseMutex
VirtualAlloc
CreateProcessA
CreateDirectoryA
ExitProcess
lstrcmpiA
IsBadStringPtrA
GetFileAttributesA
GetModuleFileNameA
IsBadReadPtr
GetProcAddress
WriteProcessMemory
GetCurrentProcess
VirtualProtect
VirtualQuery
GetSystemInfo
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetModuleHandleA
GetVersion
GetCommandLineA
VirtualFree
CloseHandle
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadCodePtr
WaitForSingleObject
CreateThread
DuplicateHandle
GetCurrentThreadId
SetErrorMode
LoadLibraryA
FreeLibrary
TlsAlloc
ReadFile
SetFilePointer
CreateFileA
TlsSetValue
TlsGetValue
Sleep
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
IsBadWritePtr
DeleteFileA
SetEndOfFile
GetFileSize
GetTempFileNameA
GetVersionExA
GetThreadContext
GetLastError
TlsFree
GetTickCount
MoveFileA
GetLongPathNameA
OpenProcess
WideCharToMultiByte
InterlockedExchange
TerminateThread
ReleaseSemaphore
TerminateProcess
CreateSemaphoreA
WriteFile
FindClose
FindFirstFileA
FindNextFileA
CopyFileA
ExpandEnvironmentStringsA

user32

LoadStringA
EnumWindows
GetWindowLongA
GetWindowThreadProcessId
CallWindowProcW
GetForegroundWindow
IsWindowUnicode
SetWindowLongW
IsWindow
SetWindowLongA
GetSystemMenu
AppendMenuA
wsprintfA
CallWindowProcA
KillTimer
SetTimer
UnhookWindowsHookEx
GetMenuItemInfoA
GetClassNameA
CallNextHookEx
SetWindowsHookExA
GetWindowTextA
wvsprintfA
EnumChildWindows
IsWindowVisible

advapi32

AdjustTokenPrivileges
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
LookupPrivilegeValueA
OpenThreadToken
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
GetUserNameA

Exports

Exports

FCAddDataToKey
FCAddDateToKey
FCAddIntToKey
FCAddStringToKey
FCAssert
FCAssertInternal1
FCAssertParam
FCAssertParamInternal1
FCCleanup
FCClearCounters
FCClearKey
FCClearKeys
FCCreateCounter
FCCreateKey
FCCreatePersistentCounter
FCCreatePersistentKey
FCCreateSupportIncidentInternal
FCDecrementCounter
FCDeleteDataFromKey
FCDeleteDateFromKey
FCDeleteIntFromKey
FCDeleteKey
FCDeleteStringFromKey
FCEndTimer
FCExceptionHandler
FCFlushNonSharedPersistentKeys
FCGetCounter
FCGetSessionUniqueID
FCHeartbeatTimer
FCIncrementCounter
FCInitialize
FCInitializeInternal
FCInitializeWithManifestInternal
FCInitializeWithManifestInternalEx
FCLibraryVersion
FCRegisterMemory
FCRunMemTest
FCSetCounter
FCSetKeyOptions
FCSetLocale
FCSetMiniDump
FCSetUIState
FCStartTimer
FCTrace
FCTraceInternal
FCTraceParam
FCTraceParamInternal
FCTrigger
FCTriggerInternal
FCTriggerInternal1
FCUnregisterMemory

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a8471176721c0667754c7ab16216f74

Headers

File Characteristics

Imports

msvcrt

rpcrt4

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.rmnet
Size: 56KB - Virtual size: 60KB