07227f0580e4c7da2fefefe72cb9b7e9fff9b7e917cec7b9291e7553b38e4033_unpacked

Sharing

Copy URL

Twitter E-mail

General

Target

07227f0580e4c7da2fefefe72cb9b7e9fff9b7e917cec7b9291e7553b38e4033_unpacked
Size

205KB
MD5

6d8b3be344be5f6d15ca7d953d612f45
SHA1

347a449b06a00d7754808343436c63ff10e089ba
SHA256

c8d595ac5183b6962de4ee1c247cb6f43b783616d2172813fd4c08c3dc11ff1f
SHA512

8605a0303c53fb44ce17246c6c8b609b30b7142468e27e33a074f68e9f2c8dfd769f09b12c6cb8545651c1784f57d75205a71d97a18d82998aad6c7000020f2a
SSDEEP

3072:U3h0EnKc5bWZEplmlrcqpdVuZpaX0mGN2sZDEhgvKcRxVl1om7cc5VScpOc4V+BT:Gh5qZEpkQEhgvjHJoI5H4FV+B

Score

N/A

Malware Config

Signatures

Files

07227f0580e4c7da2fefefe72cb9b7e9fff9b7e917cec7b9291e7553b38e4033_unpacked
.dll windows x86

560ed02eb0058b30d51eb14087d6943f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateProcessA
GetExitCodeProcess
UnregisterWait
ResumeThread
WaitForMultipleObjects
CreateFileA
lstrlenW
CreateDirectoryA
GetTickCount
OpenEventA
TerminateProcess
CreateEventA
TerminateThread
WaitForSingleObject
WinExec
GetSystemDirectoryA
IsBadCodePtr
RegisterWaitForSingleObject
CreateThread
CloseHandle
TlsFree
TlsAlloc
TlsSetValue
GetCommandLineA
GetCommandLineW
IsBadReadPtr
TlsGetValue
IsBadWritePtr
GetCurrentProcessId
GetCurrentThreadId
SetLastError
GetLastError
lstrcpyW
GetModuleHandleA
ExitProcess
lstrcpynA
SetEvent
lstrcatW
DeleteFileA
SetErrorMode
lstrcmpiA
lstrlenA
lstrcpyA
lstrcatA
SuspendThread
GetModuleFileNameA
LoadLibraryA
GetProcAddress
GetCurrentProcess
Process32First
GetModuleHandleW
ReadProcessMemory
GetModuleFileNameW
VirtualProtectEx
Process32Next
lstrcmpiW
CreateToolhelp32Snapshot
WriteProcessMemory
RemoveVectoredExceptionHandler
SetFileAttributesW
VirtualAlloc
AddVectoredExceptionHandler
ExpandEnvironmentStringsA
SearchPathA
GetTempPathA
GetFileSize
FindFirstFileW
WriteFile
ReadFile
CreateFileW
FindFirstFileA
RemoveDirectoryA
FindClose
FindNextFileA
FindNextFileW
QueryPerformanceCounter
GetSystemTimeAsFileTime
OpenProcess
GetVolumeInformationA
GetSystemInfo
QueryPerformanceFrequency
GetVersionExA
SetFilePointer
HeapReAlloc
HeapAlloc
HeapFree
HeapCreate
LoadLibraryExA
InitializeCriticalSection
WideCharToMultiByte
LeaveCriticalSection
MultiByteToWideChar
EnterCriticalSection
DeleteCriticalSection
FreeLibrary
SetCurrentDirectoryA
GetCurrentDirectoryA
SetUnhandledExceptionFilter
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
CreateFileMappingW
OpenFileMappingW
OpenFileMappingA
GetLocalTime
VirtualFreeEx
VirtualAllocEx
GetThreadContext
CreateRemoteThread
GetWindowsDirectoryW
CallNamedPipeA
ConnectNamedPipe
CreateNamedPipeW
DisconnectNamedPipe
FlushFileBuffers
CreateNamedPipeA
FindResourceA
LoadLibraryExW
EnumResourceNamesA
lstrcmpA
FreeResource
LoadResource
SizeofResource
LockResource
LocalFree
GetWindowsDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
MoveFileExA
Sleep
GetCurrentThread
GlobalFree
GlobalSize
GlobalLock
GlobalAlloc
VirtualFree
GlobalUnlock
GetModuleHandleExA

user32

MenuItemFromPoint
GetSubMenu
GetWindowThreadProcessId
IsRectEmpty
GetUserObjectInformationA
GetThreadDesktop
GetWindowRect
GetWindowDC
GetCursorPos
SetClassLongA
GetClassLongA
wsprintfA
MessageBoxA
wvsprintfA
wsprintfW
CreateDesktopA
GetTopWindow
GetWindow
CloseClipboard
GetMenu
GetMenuItemRect
TrackPopupMenuEx
GetMenuState
GetMenuItemCount
HiliteMenuItem
EndMenu
ActivateKeyboardLayout
FindWindowExA
IsWindowEnabled
RedrawWindow
PrintWindow
PostMessageW
GetParent
GetWindowInfo
GetClipboardData
EmptyClipboard
OpenClipboard
SendMessageA
GetAncestor
GetWindowLongA
SendMessageTimeoutA
SetWindowPos
SetClipboardData
GetSystemMetrics
MapWindowPoints
ReleaseDC
GetCursorInfo
SendMessageTimeoutW
SetThreadDesktop
IsWindow
PostMessageA
DestroyWindow
GetMessageA
TranslateMessage
UnregisterClassA
CreateWindowExA
DefWindowProcA
DispatchMessageA
RegisterClassA
GetForegroundWindow
GetKeyState
SendMessageW
GetClassNameA
ChildWindowFromPointEx
SetWindowLongA
IsWindowVisible
FindWindowA
MoveWindow
UnhookWinEvent
RegisterWindowMessageA
EnumWindows
SetWinEventHook
GetDC
GetIconInfo
DrawIconEx

gdi32

DeleteDC
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
TextOutA
GetStockObject
CreatePen
Ellipse
SelectObject
DeleteObject
BitBlt
GetTextMetricsA
SetViewportOrgEx
GdiFlush

advapi32

OpenProcessToken
RegCloseKey
RegNotifyChangeKeyValue
RegDeleteValueA
RegEnumValueA
RegOpenKeyA
CredEnumerateA
CredFree
InitiateSystemShutdownExA
GetUserNameW
GetTokenInformation
CryptReleaseContext
CryptAcquireContextA
CryptImportKey
CryptCreateHash
CryptDestroyKey
CryptVerifySignatureA
CryptDestroyHash
CryptHashData
IsTextUnicode
RegSetValueExA
RegQueryValueExA
RegEnumKeyExA
RegCreateKeyA
RegCreateKeyExA
RegOpenKeyExA
LookupPrivilegeValueA
ConvertStringSecurityDescriptorToSecurityDescriptorA
AdjustTokenPrivileges
CryptGetHashParam

shell32

DoEnvironmentSubstA
ShellExecuteA
SHGetFolderPathA

ole32

CoInitialize
CoCreateInstance
CoInitializeEx
CLSIDFromProgID
CoTaskMemFree
StgOpenStorage
OleInitialize

netapi32

NetApiBufferFree
NetWkstaGetInfo
NetUserGetInfo

shlwapi

SHSetValueA
PathParseIconLocationW
AssocQueryStringW
PathUnquoteSpacesA
SHDeleteValueA
SHGetValueA
StrRChrIA
PathFindFileNameA
PathFindFileNameW
StrStrIA
StrCmpNIA
StrToIntA
StrChrA
StrStrIW
StrCmpIW
StrStrA
StrChrIA
StrCmpNIW
StrCmpNA

wininet

InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
HttpEndRequestA
HttpAddRequestHeadersA
FindCloseUrlCache
HttpSendRequestA
InternetOpenA
FindNextUrlCacheEntryW
FindFirstUrlCacheEntryW
DeleteUrlCacheEntry
InternetCloseHandle
HttpOpenRequestW
HttpOpenRequestA
InternetQueryOptionA
InternetSetStatusCallbackA
InternetAttemptConnect
InternetSetOptionA
InternetConnectA
HttpQueryInfoA
HttpSendRequestExA

ws2_32

shutdown
htons
recv
send
gethostbyname
closesocket
WSAStartup
connect
inet_addr
select
socket
setsockopt

msvcrt

_except_handler3

iphlpapi

GetAdaptersInfo

avifil32

AVIMakeCompressedStream
AVIFileRelease
AVIStreamWrite
AVIFileOpenA
AVIStreamSetFormat
AVIFileEndRecord
AVIFileInit
AVIStreamRelease
AVIFileCreateStreamA

oleaut32

SysFreeString
SysAllocString
VariantInit

crypt32

CertDuplicateCertificateContext
CertDeleteCertificateFromStore
CertAddCertificateContextToStore
CertCloseStore
CryptUnprotectData
PFXExportCertStoreEx
CertOpenSystemStoreA
CertEnumCertificatesInStore
PFXImportCertStore

comdlg32

GetSaveFileNameA
GetOpenFileNameA

Sections

.text
Size: 157KB - Virtual size: 157KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

560ed02eb0058b30d51eb14087d6943f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

netapi32

shlwapi

wininet

ws2_32

msvcrt

iphlpapi

avifil32

oleaut32

crypt32

comdlg32

Sections

.text Size: 157KB - Virtual size: 157KB

.rdata Size: 34KB - Virtual size: 34KB

.data Size: 3KB - Virtual size: 288KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 157KB - Virtual size: 157KB

.rdata
Size: 34KB - Virtual size: 34KB

.data
Size: 3KB - Virtual size: 288KB

.reloc
Size: 9KB - Virtual size: 9KB