84602deac032936069018da1ca2b4e0f56bbfd8b41656fa4ab411ffd1ebfc3e9

Sharing

Copy URL Twitter E-mail

General

Target

84602deac032936069018da1ca2b4e0f56bbfd8b41656fa4ab411ffd1ebfc3e9
Size

16KB
MD5

6f0bf4e0c41d82cd3f5fc1c287f84206
SHA1

53bc4296c54f0cc31097bb9ba765a3897bb63371
SHA256

84602deac032936069018da1ca2b4e0f56bbfd8b41656fa4ab411ffd1ebfc3e9
SHA512

562426611e2ead4d5b3bf5edf9c2ddd46d057cd16ec3974c6df828032cb667703049b6db65685cf7464464bfd49c8a2569b05bb96480c7975166667887ce5941
SSDEEP

384:+2beQ8beHRqsza7nTA6j/VIlpKz5U0DC2DQztyaMhEj:+2KFKIsza7n39Ilkz5U6Qp5Mu

Score

N/A

Malware Config

Signatures

Files

84602deac032936069018da1ca2b4e0f56bbfd8b41656fa4ab411ffd1ebfc3e9
.dll windows x86

e0cff989331cea473fb90e1362a210d5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

BackupRead
ConvertDefaultLocale
CreateFileW
ExitProcess
GenerateConsoleCtrlEvent
GetBinaryTypeW
GetCPInfoExA
GetConsoleTitleA
GetCurrentDirectoryW
GetLocalTime
GetProfileIntW
GetProfileSectionA
GetTempPathW
GetWindowsDirectoryW
IsDebuggerPresent
OpenFileMappingA
QueryPerformanceFrequency
ReleaseMutex
SetConsoleWindowInfo
SetCurrentDirectoryA
SetFilePointer
SetThreadExecutionState
SetTimeZoneInformation
TlsFree
VirtualAllocEx
VirtualProtectEx
WaitForMultipleObjectsEx
WideCharToMultiByte
lstrlen

advapi32

AddAccessAllowedAce
ChangeServiceConfigW
CloseEventLog
CreateProcessAsUserW
CryptGetHashParam
CryptReleaseContext
CryptSetKeyParam
DeregisterEventSource
GetKernelObjectSecurity
GetMultipleTrusteeOperationW
GetSecurityInfoExW
GetTrusteeTypeW
ImpersonateLoggedOnUser
InitiateSystemShutdownA
InitiateSystemShutdownW
LockServiceDatabase
LookupAccountSidW
RegCreateKeyW
RegDeleteKeyA
RegDeleteValueA
RegGetKeySecurity
RegSetValueExW
RegSetValueW
SetEntriesInAccessListW
SetFileSecurityA
SetKernelObjectSecurity
SetPrivateObjectSecurity
StartServiceCtrlDispatcherW

user32

AdjustWindowRect
CallWindowProcW
CharUpperBuffA
CreateCaret
CreateIconFromResource
DdeFreeDataHandle
DrawFrame
DrawTextA
EmptyClipboard
GetCapture
GetClipboardFormatNameW
GetMessagePos
IsCharAlphaNumericW
IsRectEmpty
LoadIconA
OemKeyScan
RegisterClipboardFormatW
SetDlgItemTextA
SetMenuItemInfoA
SetWindowPos
SwitchToThisWindow
UnionRect

gdi32

ChoosePixelFormat
CloseMetaFile
CreateDCW
CreateFontW
CreateHalftonePalette
CreatePenIndirect
CreatePolygonRgn
DeviceCapabilitiesExA
FloodFill
GdiPlayDCScript
GetAspectRatioFilterEx
GetCharWidthFloatA
GetEnhMetaFilePaletteEntries
GetGlyphOutlineW
GetRandomRgn
GetTextFaceW
GetTextMetricsA
MaskBlt
PaintRgn
PatBlt
SetBoundsRect
SetColorAdjustment
SetEnhMetaFileBits
SetLayout
SetRectRgn
SetWorldTransform
StartPage

Exports

Exports

CmdExec
CmdExecBotID
CmdExecBuild
CmdExecType
CmdExecVersion
CryptKeySet
FileDownload
FileDownloadUnxor
Knock
ModuleDownload
ModuleDownloadUnxor
ModuleLoad
ModuleUnload
ModulesVersionLog
SameFileVersion
SetCmdDelay
SetErrorsURL
SetFileVersion
SetLoadedURL
SetTimeout

Sections

.text
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e0cff989331cea473fb90e1362a210d5

Headers

File Characteristics

Imports

kernel32

advapi32

user32

gdi32

Exports

Exports

Sections

.text Size: 512B - Virtual size: 20KB

.data Size: 15KB - Virtual size: 32KB

.idata Size: - Virtual size: 8KB

.rsrc Size: - Virtual size: 8KB

.text
Size: 512B - Virtual size: 20KB

.data
Size: 15KB - Virtual size: 32KB

.idata
Size: - Virtual size: 8KB

.rsrc
Size: - Virtual size: 8KB