a0bdad7a0007745e18a59de1ab53abe5bae19b4d89e11c17e0be1e58848ccdcb

General

Target

a0bdad7a0007745e18a59de1ab53abe5bae19b4d89e11c17e0be1e58848ccdcb
Size

33KB
MD5

4bc4951eb5810aff3b0955f2ee3f9c8d
SHA1

7149cdf688d380a42874095ff5eb19b63587c7b1
SHA256

a0bdad7a0007745e18a59de1ab53abe5bae19b4d89e11c17e0be1e58848ccdcb
SHA512

51c9b9f39c2864800d4d46b11c0f364a6f49446c216691f81501adb6ed546ac4a3f468cd35d5c43713d0140fda6b3605d4ca2466cb5672f5de45164971acb1eb
SSDEEP

384:RwTYWtWypKMmCx37XcrBsHTl+jEujjKJ1oXkpzvl1d/4b:TPmlXwwh+jEujKJ1oXktvl1

Score

N/A

Malware Config

Signatures

Files

a0bdad7a0007745e18a59de1ab53abe5bae19b4d89e11c17e0be1e58848ccdcb
.dll windows x86

25c5a1850f7b91e526e73459c3893164

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateNamedPipeA
CreateEventA
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
DeleteFileA
WriteFile
CreateFileA
ReadFile
CreateThread
ConnectNamedPipe
GetCurrentProcess
GetStartupInfoA
WinExec
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
WaitForSingleObject
TerminateThread
CloseHandle
Sleep
HeapFree
DisconnectNamedPipe
SetEvent
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetStdHandle

user32

wsprintfA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CreateProcessAsUserA

urlmon

URLDownloadToFileA

wininet

InternetConnectA
HttpQueryInfoA
InternetReadFile
InternetOpenA
HttpSendRequestA
HttpOpenRequestA

Exports

Exports

DllCanUnloadNowW
DllRegisterServerW
DllShowWinDlg
DllUnregisterServerW
SmartStart

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25c5a1850f7b91e526e73459c3893164

Headers

File Characteristics

Imports

kernel32

user32

advapi32

urlmon

wininet

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 14KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 12KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 14KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 12KB

.reloc
Size: 3KB - Virtual size: 3KB