789b8476b57fbe0179190688484832b56f459ad9f4aa0beeabf0681e432e2c1c

Sharing

Copy URL Twitter E-mail

General

Target

789b8476b57fbe0179190688484832b56f459ad9f4aa0beeabf0681e432e2c1c
Size

292KB
MD5

429c1215bcd7c924b98eef37343484c9
SHA1

fb21b1086d5cb9c6975f0f6cadb3374e11dcb0b9
SHA256

789b8476b57fbe0179190688484832b56f459ad9f4aa0beeabf0681e432e2c1c
SHA512

befe4380b0832d50d425a1901110de7da15cb42a734a0b59505821ddcf63e362a3bf8c857c0fd973eb4230b202310bb8e9332f76d1d1d206c68275dc97aba5d5
SSDEEP

6144:AqUvCcfiKeZnniM1daiH5ymXE5DjG4+19wxDqnqQL:A/haK6niM1daiH50nG4+7bnqC

Score

N/A

Malware Config

Signatures

Files

789b8476b57fbe0179190688484832b56f459ad9f4aa0beeabf0681e432e2c1c
.dll windows x86

ba9ac583795e4155f4678bade10cecf6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WideCharToMultiByte
InterlockedIncrement
DebugBreak
OutputDebugStringA
GetStringTypeExA
GetThreadLocale
lstrcpynA
DisableThreadLibraryCalls
GetCurrentProcessId
CloseHandle
GetLastError
WaitForMultipleObjects
CreateEventA
SetEvent
WaitForSingleObject
Sleep
lstrcpyA
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
UnmapViewOfFile
LocalAlloc
FormatMessageA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcmpiA
lstrcmpA
FlushFileBuffers
SetStdHandle
SetFilePointer
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStrings
TlsGetValue
GetCurrentProcess
TerminateProcess
HeapSize
GetACP
GetCPInfo
InterlockedDecrement
LocalFree
RtlUnwind
HeapReAlloc
HeapAlloc
HeapFree
RaiseException
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
LeaveCriticalSection
GetOEMCP
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetModuleFileNameA
ExitProcess
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate

user32

EqualRect
MapWindowPoints
ClientToScreen
GetDC
FillRect
ReleaseDC
CallNextHookEx
IsWindow
GetWindowThreadProcessId
PostMessageA
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA
InflateRect
LoadStringA
wvsprintfA
CharNextA
CharLowerA
GetClassNameA
GetParent
GetWindowLongA
GetWindowRect
CopyRect
IsRectEmpty
IntersectRect
SetRectEmpty
OffsetRect
RegisterWindowMessageA
SetRect

gdi32

CreateSolidBrush
DeleteObject

oleaut32

SysAllocStringLen
VariantChangeType
SysAllocString
VariantCopy
VariantClear
VariantInit
SysFreeString

Exports

Exports

FreeVarTypeStruct
Html_Item_GetProperty_Register
Html_Item_GetProperty_WNSSSSNNNSSPS_InitExit
Html_Item_GetProperty_WNSSSSNNNSSPS_Playback
Html_Item_GetText_Register
Html_Item_GetText_WNSSSSNNNSPS_InitExit
Html_Item_GetText_WNSSSSNNNSPS_Playback
Html_Item_Register
Html_Item_WNSSSSNNNS_AnswerToQuestion
Html_Item_WNSSSSNNNS_GetItemRect
Html_Item_WNSSSSNNNS_InitExit
Html_Item_WNSSSSNNNS_Playback
Html_Item_WNSSSSNNN_AnswerToQuestion
Html_Item_WNSSSSNNN_GetItemRect
Html_Item_WNSSSSNNN_InitExit
Html_Item_WNSSSSNNN_Playback
Html_Navigate_Register
Html_Navigate_WFS_InitExit
Html_Navigate_WFS_Playback
Html_Navigate_WF_InitExit
Html_Navigate_WF_Playback
Html_WaitForLoading_Register
Html_WaitForLoading_WNS_InitExit
Html_WaitForLoading_WNS_Playback
Html_WaitForLoading_WN_InitExit
Html_WaitForLoading_WN_Playback
PerformHTMLCommand
RegisterTrainerCompilerCommand
WaitForCompleteLoading

Sections

.text
Size: 76KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 172KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ba9ac583795e4155f4678bade10cecf6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 73KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 16KB - Virtual size: 38KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 6KB

.text Size: 172KB - Virtual size: 172KB

.text
Size: 76KB - Virtual size: 73KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 16KB - Virtual size: 38KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 172KB - Virtual size: 172KB