8f70cdcd903234e642a725b60d7aced5955426368ebbe62c2dcedb93e71b45b4

Sharing

Copy URL Twitter E-mail

General

Target

8f70cdcd903234e642a725b60d7aced5955426368ebbe62c2dcedb93e71b45b4
Size

136KB
MD5

721ad82e9d3e072a0f28e39514144d5b
SHA1

8b0271d6847a892fd54deafa10e89084d38f8781
SHA256

8f70cdcd903234e642a725b60d7aced5955426368ebbe62c2dcedb93e71b45b4
SHA512

f87be60d671e253680070c1711e4a45bc414b1407b4029d612f1ab861874a92e6bc5532b81611af3a9310f9a6d532e1bb7f4ac06dc75a5ead446a8fee26a5203
SSDEEP

3072:lHL8yn+S1iAF7IROgvEscn2tJ1jvBDXMGVJCAcb:lHIy0KIROgXht/BDXMGy/

Score

N/A

Malware Config

Signatures

Files

8f70cdcd903234e642a725b60d7aced5955426368ebbe62c2dcedb93e71b45b4
.dll windows x86

9c42d89b0989447979d709310f018742

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ggzip

?decode@gzip@gg@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V34@@Z

kernel32

GetCurrentThreadId
QueryPerformanceCounter
HeapAlloc
GetProcessHeap
CreateEventA
HeapFree
CloseHandle
Sleep
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
SystemTimeToFileTime
GetTickCount
GetSystemTimeAsFileTime
ResumeThread
ResetEvent
TlsSetValue
TlsGetValue
GetCurrentProcessId
CreateMutexA
TlsAlloc
ReleaseMutex
WaitForSingleObject
SetEvent
RaiseException
LoadLibraryA
GetLastError
InterlockedExchange
FreeLibrary
GetProcAddress
LocalAlloc
DisableThreadLibraryCalls

msvcp80

?_Getfacet@locale@std@@QBEPBVfacet@12@I@Z
??0_Lockit@std@@QAE@H@Z
?id@?$ctype@D@std@@2V0locale@2@A
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@IAEX_NI@Z
??1_Lockit@std@@QAE@XZ
??1locale@std@@QAE@XZ
??0locale@std@@QAE@XZ
??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
?reserve@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXI@Z
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDI@Z
?tolower@?$ctype@D@std@@QBEDD@Z
?end@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?begin@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE?AV?$_String_iterator@DU?$char_traits@D@std@@V?$allocator@D@2@@2@V32@0@Z
?_Register@facet@locale@std@@QAEXXZ
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?_Incref@facet@locale@std@@QAEXXZ
??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z
??Bid@locale@std@@QAEIXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr80

_amsg_exit
_adjust_fdiv
__CppXcptFilter
_except_handler4_common
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_initterm_e
_initterm
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_beginthreadex
?terminate@@YAXXZ
_localtime64
_gmtime64
_CxxThrowException
__CxxFrameHandler3
??0bad_cast@std@@QAE@ABV01@@Z
??1bad_cast@std@@UAE@XZ
??0bad_cast@std@@QAE@PBD@Z
_invalid_parameter_noinfo
_purecall
??0exception@std@@QAE@XZ
??8type_info@@QBE_NABV0@@Z
??0exception@std@@QAE@ABQBDH@Z
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??2@YAPAXI@Z
atoi
??0exception@std@@QAE@ABV01@@Z
_encoded_null
?what@exception@std@@UBEPBDXZ

Exports

Exports

??0BreakFunction@http@gg@@QAE@ABV012@@Z
??0BreakFunction@http@gg@@QAE@XZ
??0Headers@http@gg@@QAE@ABV012@@Z
??0Headers@http@gg@@QAE@XZ
??0Request@http@gg@@QAE@ABV012@@Z
??0Request@http@gg@@QAE@XZ
??0Result@http@gg@@QAE@ABV012@@Z
??0Result@http@gg@@QAE@XZ
??1Headers@http@gg@@QAE@XZ
??1Request@http@gg@@QAE@XZ
??1Result@http@gg@@QAE@XZ
??4BreakFunction@http@gg@@QAEAAV012@ABV012@@Z
??4Headers@http@gg@@QAEAAV012@ABV012@@Z
??4Result@http@gg@@QAEAAV012@ABV012@@Z
??AHeaders@http@gg@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z
??_7BreakFunction@http@gg@@6B@
?GlobalHeaders@http@gg@@3V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@A
?_request@Request@http@gg@@AAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0K@Z
?add@Headers@http@gg@@QAEXABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?body@Result@http@gg@@QBEABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?breakCnd@Request@http@gg@@QAEXPAVBreakFunction@23@@Z
?clear@Headers@http@gg@@QAEXXZ
?clear@Request@http@gg@@QAEXXZ
?code@Result@http@gg@@QBEGXZ
?get@Request@http@gg@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@K@Z
?headers@Request@http@gg@@QBEAAVHeaders@23@XZ
?headers@Result@http@gg@@QBEABVHeaders@23@XZ
?multiline@Headers@http@gg@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?out@Request@http@gg@@QBEABVResult@23@XZ
?post@Request@http@gg@@QAEFABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0K@Z
?size@Headers@http@gg@@QBEKXZ

Sections

.text
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 428B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c42d89b0989447979d709310f018742

Headers

File Characteristics

Imports

ggzip

kernel32

msvcp80

msvcr80

Exports

Exports

Sections

.text Size: 40KB - Virtual size: 36KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 1KB

.tls Size: 60KB - Virtual size: 56KB

.rsrc Size: 4KB - Virtual size: 428B

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 40KB - Virtual size: 36KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 1KB

.tls
Size: 60KB - Virtual size: 56KB

.rsrc
Size: 4KB - Virtual size: 428B

.reloc
Size: 8KB - Virtual size: 4KB