485b64f23737ec195d1bd99e42e1bc5b47a3583c6a45f328599f174a4e5ba09b

Sharing

Copy URL Twitter E-mail

General

Target

485b64f23737ec195d1bd99e42e1bc5b47a3583c6a45f328599f174a4e5ba09b
Size

648KB
MD5

028fd9932c62798199939a5ed9b13e80
SHA1

49899f748149234b327333d30370b8e20c560044
SHA256

485b64f23737ec195d1bd99e42e1bc5b47a3583c6a45f328599f174a4e5ba09b
SHA512

de776024e057614f0c8a5f6c91927ee16525a5df4054544cf7f387ba8503671e3e51d3b28630a91cb1b2671f0ddafdf69215452dce3f7955f6c454f7db88bb9e
SSDEEP

12288:abNrbqV3xMJv2SCGZMSo1NvU7zQ93TmkaitPIPqXBP:2YQ2SCq9Wy4FTmkRHBP

Score

N/A

Malware Config

Signatures

Files

485b64f23737ec195d1bd99e42e1bc5b47a3583c6a45f328599f174a4e5ba09b
.dll windows x86

60755353e0fa2535c1ce50418b212a8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LocalAlloc
LocalFree
GetLastError
SetEnvironmentVariableA
SetCommState
CloseHandle
GetCommState
SetCommMask
CreateFileA
GetOverlappedResult
ReadFile
WriteFile
PurgeComm
ClearCommError
WaitCommEvent
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CreateEventA
WaitForSingleObject
WaitForMultipleObjects
Sleep
ResetEvent
CreateMutexA
ReleaseMutex
CreateThread
TerminateThread
GetExitCodeThread
WritePrivateProfileStringA
GetPrivateProfileStringA
LoadLibraryA
FreeLibrary
GetProcAddress
GetModuleFileNameA
FindClose
FindNextFileA
FindFirstFileA
GetStdHandle
AllocConsole
FreeConsole
GetCurrentThreadId
SetEndOfFile
GetOEMCP
GetACP
SetEvent
DeviceIoControl
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetFilePointer
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
GetEnvironmentStringsW
GetEnvironmentStrings
GetLocaleInfoW
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetLocalTime
GetTimeZoneInformation
SetStdHandle
GetFileType
GetCommandLineA
GetVersion
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetUnhandledExceptionFilter
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapSize
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount

user32

FindWindowA
SendMessageA
wsprintfA
IsWindow

advapi32

RegQueryValueExA

ws2_32

htons
bind
WSACleanup
WSAStartup
sendto
recvfrom
socket
htonl
closesocket
inet_addr

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA

Exports

Exports

CMAnswer
CMCallControl
CMCancelCallForward
CMDialOut
CMDialOutEx
CMDisableCallWait
CMDtmfDial
CMDtmfDialEx
CMEnableCallWait
CMEndCall
CMGetCallInfo
CMGetCallInfoEx
CMGetCallList
CMGetEmergencyCallList
CMQueryCallForwardStatus
CMQueryCallWaitStatus
CMRegisterCallForward
CMRegisterObserver
CMReleaseCallList
CMSendFlashKey
CMUSSDConfirm
CMUSSDRelease
CMUSSDRequest
CMUnRegisterObserver
DEVGetAtCommPort
DEVGetDevStatus
DEVGetDiagCommPort
DEVGetModemCommPort
DEVPowerManagement
DEVRegisterObserver
DEVUnRegisterObserver
DSClearDataCounter
DSGetDSState
DSGetDataCounter
DSRegisterObserver
DSUnRegisterObserver
DebugViewOpen
EWAPIGetVersion
EWAPILoad
EWGetProvider
EWGetProviderCount
EWGetProviderManager
PBDeleteItem
PBGetAbility
PBGetItem
PBGetItemList
PBGetMemAbility
PBGetMemAbilityEx
PBGetMemItemList
PBGetNumInfoList
PBGetOTASPNum
PBGetPBMStatus
PBGetPBMStatusEx
PBInsertItem
PBInsertItemA
PBInsertItemEx
PBInsertItemW
PBInsertMemItemA
PBInsertMemItemW
PBModifyItem
PBModifyItemA
PBModifyItemEx
PBModifyItemW
PBReadItem
PBRegisterObserver
PBReleaseItem
PBReleaseItemList
PBReleaseNumInfoList
PBUnRegisterObserver
SMSDeleteAllMsg
SMSDeleteMsg
SMSGetMemInfo
SMSGetMsgList
SMSGetNvMsgList
SMSGetSimMsgList
SMSGetTag
SMSGetWMSBear
SMSGetWMSCapability
SMSGetWMSConfiguration
SMSGetWMSConfigurationEx
SMSGetWMSStatus
SMSGetWMSStatusEx
SMSGetWmsRoutes
SMSMarkReaded
SMSModifyMsg
SMSModifyMsgA
SMSModifyMsgEx
SMSModifyMsgToSimA
SMSModifyMsgToSimW
SMSModifyMsgW
SMSReadMsg
SMSReadMsgEx
SMSRegisterObserver
SMSReleaseMsgList
SMSSaveMsg
SMSSaveMsgEx
SMSSaveMsgToNvA
SMSSaveMsgToNvW
SMSSaveMsgToSimA
SMSSaveMsgToSimW
SMSSendMsg
SMSSendMsgA
SMSSendMsgW
SMSSetWMSBear
SMSSetWMSConfiguration
SMSSetWMSConfigurationEx
SMSSetWmsRoutes
SMSUnRegisterObserver
SRVChangePin
SRVClearLogEventMask
SRVDisablePin
SRVEnablePin
SRVGetAvailablePLMNs
SRVGetCurPlmn
SRVGetCurRSSI
SRVGetDeviceVolume
SRVGetESN
SRVGetFirmwareVersion
SRVGetHomePLMN
SRVGetImeiInfo
SRVGetImsiInfo
SRVGetMINLockStatus
SRVGetMSStatus
SRVGetManualRegState
SRVGetNetConfiguration
SRVGetPLMNList
SRVGetPinStatus
SRVGetPinStatusEx
SRVGetRoamStatus
SRVGetSimStatus
SRVGetSpnData
SRVGetSrvDomain
SRVGetSrvStatus
SRVGetSystemMode
SRVQueryPLMNLockStat
SRVRegisterObserver
SRVResetMs
SRVSelectCurPlmn
SRVSetAvailablePLMNs
SRVSetDeviceVolume
SRVSetNetConfiguration
SRVSetOffline
SRVSkipVerifyPin
SRVSwitchCiphonyMode
SRVSwitchMsMode
SRVUnRegisterObserver
SRVUnblockPin
SRVVerifyPin

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

60755353e0fa2535c1ce50418b212a8a

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

setupapi

Exports

Exports

Sections

.text Size: 440KB - Virtual size: 439KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 72KB - Virtual size: 106KB

.reloc Size: 28KB - Virtual size: 24KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 440KB - Virtual size: 439KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 72KB - Virtual size: 106KB

.reloc
Size: 28KB - Virtual size: 24KB

.rmnet
Size: 60KB - Virtual size: 60KB