5c3622b18346c749c2a8c0ede03e4087538a2264b417bf6a5044ca1048d46028

Sharing

Copy URL

Twitter E-mail

General

Target

5c3622b18346c749c2a8c0ede03e4087538a2264b417bf6a5044ca1048d46028
Size

284KB
MD5

0b225ee19dfd61a140512acec2776900
SHA1

0961f3d542be05f4e7deeab734d9ccdca4c13352
SHA256

5c3622b18346c749c2a8c0ede03e4087538a2264b417bf6a5044ca1048d46028
SHA512

cf1f69e9be6358a6e06194e9ecb0e7990a55f5f3f2b7e48a3bfafd9de6be4d7c0c960b67d871104870c36044d6a8ffd2f8e8037018e0498ecd41db7d42689acb
SSDEEP

6144:ofgb6Q4bq2NVOOTVClkZsUvHnGWlov065X4W:ofgbiTny86V4W

Score

N/A

Malware Config

Signatures

Files

5c3622b18346c749c2a8c0ede03e4087538a2264b417bf6a5044ca1048d46028
.dll windows x86

6fcdc6d7d0aa9b65c33eddd9e06a7b4e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
CreateEventA
GetVolumeInformationA
GetLocalTime
InterlockedDecrement
ResetEvent
GetLastError
GetOverlappedResult
WaitForSingleObject
CloseHandle
SetEvent
LCMapStringW
LCMapStringA
ReadFile
SetStdHandle
LoadLibraryA
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCPInfo
FlushFileBuffers
SetFilePointer
SetUnhandledExceptionFilter
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
InterlockedExchange
InterlockedIncrement
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
CreateThread
GetCurrentThreadId
TlsSetValue
TlsGetValue
ExitThread
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetProcAddress
GetModuleHandleA
TlsAlloc
TlsFree
SetLastError
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW

oleaut32

SysAllocString
SysFreeString
VariantClear

ws2_32

shutdown
closesocket
setsockopt
socket
htons
inet_addr
htonl
ioctlsocket
recv
gethostbyname
inet_ntoa
WSACleanup
WSAStartup
WSAGetLastError
WSAEnumNetworkEvents
WSAWaitForMultipleEvents
send
WSAEventSelect
WSACreateEvent
WSACloseEvent
WSASetEvent
connect

Exports

Exports

CancelTransfer
ChargeUp
GetBalance
GetPrice
GetSDKVersion
ReceiveSMS
ReceiveSMSCHL
ReceiveSMSCHLPB
ReceiveSMSCHLVB
ReceiveSMSEx
ReceiveSMSExPB
ReceiveSMSExVB
ReceiveSMSPB
ReceiveSMSVB
ReceiveStatusReport
ReceiveStatusReportEx
ReceiveStatusReportExPB
ReceiveStatusReportExVB
ReceiveStatusReportPB
Register
RegistryPwdUpd
RegistryTransfer
SendSMS
SendSMS2
SendSMSEx
SendSMSEx2
SendScheSMS
SendScheSMS2
SendScheSMSEx
SendScheSMSEx2
SetKey
SetProxy
UnRegister

Sections

.text
Size: 168KB - Virtual size: 166KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6fcdc6d7d0aa9b65c33eddd9e06a7b4e

Headers

File Characteristics

Imports

kernel32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 166KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 16KB - Virtual size: 27KB

.reloc Size: 16KB - Virtual size: 12KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 168KB - Virtual size: 166KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 16KB - Virtual size: 27KB

.reloc
Size: 16KB - Virtual size: 12KB

.rmnet
Size: 60KB - Virtual size: 60KB