bb60924bfbb36cf35ddd3d967952f867e886de74f7cf2803c0ed7fd34f8307ec

Sharing

Copy URL Twitter E-mail

General

Target

bb60924bfbb36cf35ddd3d967952f867e886de74f7cf2803c0ed7fd34f8307ec
Size

135KB
MD5

8178bbc89bd3ad1ffddff21f07f28230
SHA1

7bb4bf5024d7a4bd903709cea8876f1013223662
SHA256

bb60924bfbb36cf35ddd3d967952f867e886de74f7cf2803c0ed7fd34f8307ec
SHA512

0bf58cf79c71313802f50bda2b85974048d7e54725992ed40d631c096f501ea6c9c16629fb9105e7c98f7b3697669444bd0b549ba274fd2dac90e5cc7399183c
SSDEEP

3072:j3C58JCqi7nWOKyx9xZr+HgUAqZJeTpAL:j3CRLWOKEXhlqPeAL

Score

N/A

Malware Config

Signatures

Files

bb60924bfbb36cf35ddd3d967952f867e886de74f7cf2803c0ed7fd34f8307ec
.dll windows x86

c0811eaf4700a57253851fa98f5472e5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90

ord1254
ord945
ord2082
ord5963
ord310
ord581
ord782
ord316
ord601
ord266
ord265
ord1087
ord801
ord322
ord1075
ord1145
ord1275
ord1277
ord1152
ord391
ord2084
ord1233
ord1180
ord1268
ord1241
ord1243
ord321
ord1278
ord605
ord4434
ord4409
ord6783
ord4159
ord6781
ord4733
ord2251
ord2206
ord6018
ord4165
ord1046
ord5533
ord6721
ord5813
ord4199
ord2087
ord5657
ord5659
ord4333
ord4981
ord5663
ord5646
ord6001
ord2766
ord2978
ord3107
ord4714
ord2961
ord3110
ord2769
ord2888
ord2759
ord4066
ord4067
ord4057
ord2886
ord4334
ord4890
ord4667
ord3659
ord1144
ord3209
ord2447
ord1137
ord4197
ord793
ord589
ord4029
ord800

msvcr90

_unlock
??2@YAPAXI@Z
__CxxFrameHandler3
_mbsnbcpy_s
sprintf_s
memcpy
vsprintf_s
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
memset
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
__dllonexit
_encode_pointer
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_lock
wcsrchr
_mbsninc
swprintf_s
malloc
_wcsicmp
wcsncpy_s
wcslen
_invalid_parameter_noinfo
_onexit
_decode_pointer
wcscpy_s
_CxxThrowException
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
?terminate@@YAXXZ
__CppXcptFilter
_mbstok_s
strlen
_ultoa_s
_mbsstr
atol
_time64
_localtime64_s
strftime
strcat_s
_mbctoupper
_mbsnbicmp
strcpy_s
wcsstr

kernel32

WideCharToMultiByte
InterlockedDecrement
GetProcessHeap
HeapAlloc
HeapFree
RaiseException
GetVolumeInformationA
ReadFile
OutputDebugStringA
GetFileAttributesA
GetTempPathA
QueryPerformanceFrequency
DeleteCriticalSection
GetFileSize
WaitForSingleObject
GetModuleHandleA
GetCommandLineA
GetPrivateProfileIntA
InitializeCriticalSection
FormatMessageA
GetSystemDefaultLangID
FreeLibrary
GetProcAddress
LoadLibraryA
GetVersionExA
CreateEventA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryDosDeviceA
GetDriveTypeA
GetModuleFileNameA
CreateFileA
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
LocalAlloc
LocalFree
GetLastError
CloseHandle
lstrlenA
WriteFile
SetFilePointer
GetLogicalDriveStringsA
GetTickCount
SetLastError
Sleep
LeaveCriticalSection
EnterCriticalSection

user32

MessageBoxA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
OleRun

oleaut32

SysStringLen
SysAllocString
SysFreeString

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

crypt32

CryptUnprotectData

advapi32

OpenSCManagerA
CloseServiceHandle
QueryServiceStatusEx
OpenServiceA

shell32

SHGetSpecialFolderPathA

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Move_s@?$char_traits@D@std@@SAPADPADIPBDI@Z
?_Copy_s@?$char_traits@D@std@@SAPADPADIPBDI@Z
?deallocate@?$allocator@D@std@@QAEXPADI@Z
?allocate@?$allocator@D@std@@QAEPADI@Z
?_Xlen@_String_base@std@@SAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?_Xran@_String_base@std@@SAXXZ
?length@?$char_traits@D@std@@SAIPBD@Z

ws2_32

inet_addr
inet_ntoa
WSAGetLastError
WSAAddressToStringA

Exports

Exports

DeleteSettings
EnumAvailableDevices
EnumMethods
EnumSettings
GetCapabilities
GetInstance
GetName
GetSerialNumber
GetVSACodes
Init
IsPresent
PresentWifiDiagnosis
Refresh
SetLogLevel
SetSettings
StoreWifiDiagnosis
Terminate
UnmountTransportMedia
VerifySettings
WaitForNewDevice

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c0811eaf4700a57253851fa98f5472e5

Headers

File Characteristics

Imports

mfc90

msvcr90

kernel32

user32

ole32

oleaut32

version

crypt32

advapi32

shell32

msvcp90

ws2_32

Exports

Exports

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 6KB - Virtual size: 135KB

.rsrc Size: 62KB - Virtual size: 62KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 6KB - Virtual size: 135KB

.rsrc
Size: 62KB - Virtual size: 62KB

.reloc
Size: 10KB - Virtual size: 9KB