3ecc680cc9eeb9765c732bc233a80d475723716d60ea3f02763d396419fb8f65

Sharing

Copy URL Twitter E-mail

General

Target

3ecc680cc9eeb9765c732bc233a80d475723716d60ea3f02763d396419fb8f65
Size

683KB
MD5

4b174cec71ef350ccf16d2f2a68af325
SHA1

cee79a58913a71a4d76071e0e8622653f036d886
SHA256

3ecc680cc9eeb9765c732bc233a80d475723716d60ea3f02763d396419fb8f65
SHA512

b5d593a295204fcde56e659daab85d71571c4f37f7a606e2ac53c6a38d6c6d330c6bb698d014865e1132a2e41371560fa689fc520a7d27a1d8ca3f1fb1f276be
SSDEEP

12288:+oNZ3MPwJpwvZ6JijBeVYRo5P21pod/Pqnw6ctp9CWgWtRVUqhFG83lUpn:+P6JYCx2cd/P+1nWgWXVUq68a

Score

N/A

Malware Config

Signatures

Files

3ecc680cc9eeb9765c732bc233a80d475723716d60ea3f02763d396419fb8f65
.dll windows x86

9db11f26c42468830040d630b27afca4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
VirtualAlloc
LoadResource
FindResourceW
FindResourceExW
Sleep
CreateThread
WideCharToMultiByte
CloseHandle
ReadFile
GetFileSize
GetLastError
CreateFileA
FlushFileBuffers
CreateFileW
WriteConsoleW
SetStdHandle
LoadLibraryW
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
GetLocalTime
GetModuleFileNameA
WriteFile
GetCurrentProcessId
GetCurrentThreadId
SetFilePointer
DeleteFileA
GetTempPathA
InterlockedDecrement
LocalFree
FormatMessageA
GetModuleHandleA
MultiByteToWideChar
lstrlenA
LocalAlloc
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedIncrement
InterlockedExchange
InitializeCriticalSection
EncodePointer
DecodePointer
RtlUnwind
GetCommandLineA
LCMapStringW
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetStdHandle
GetModuleFileNameW
GetLocaleInfoW
IsProcessorFeaturePresent
HeapCreate
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW

user32

MessageBoxA
FindWindowA
SetForegroundWindow

shlwapi

PathFileExistsA
PathCombineA

msi

ord73

ws2_32

WSAStartup
gethostname
WSACleanup
WSAGetLastError

shell32

SHGetFolderPathA

ole32

CoCreateInstance
OleRun

oleaut32

GetErrorInfo
SysAllocString
VariantCopy
VariantChangeType
VariantClear
VariantInit
SysFreeString
SysStringLen

Exports

Exports

AddProgramExceptionA
AddProgramExceptionFWAdvSecurityA
AreClientFirewallExceptionsOpenA
AreServerFirewallExceptionsOpenA
CheckLicenseNumberA
CheckOfferingCodeA
GetBooleanPropertyA
GetDateTimePropertyAsStringA
GetIntegerPropertyA
GetStringPropertyA
IsWindowsFirewallAdvSecurityAvailableA
IsWindowsFirewallV1AvailableA
IsWindowsFirewallV2AvailableA
ManageFirewallExceptions
OpenClientFirewallExceptionsA
OpenServerFirewallExceptionsA
RemoveClientFirewallExceptionsA
RemoveProgramExceptionA
RemoveProgramExceptionFWAdvSecurityA
RemoveServerFirewallExceptionsA
RollbackManageFirewallExceptions

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 37KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 512B - Virtual size: 256B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9db11f26c42468830040d630b27afca4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

msi

ws2_32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 265KB - Virtual size: 264KB

.rdata Size: 58KB - Virtual size: 57KB

.data Size: 37KB - Virtual size: 44KB

.data1 Size: 512B - Virtual size: 256B

.rsrc Size: 300KB - Virtual size: 299KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 265KB - Virtual size: 264KB

.rdata
Size: 58KB - Virtual size: 57KB

.data
Size: 37KB - Virtual size: 44KB

.data1
Size: 512B - Virtual size: 256B

.rsrc
Size: 300KB - Virtual size: 299KB

.reloc
Size: 21KB - Virtual size: 21KB