60b18964f22beea7dcc4d49b98bf6afd2ab3d0377011ad89cdbda541a383a41f

Sharing

Copy URL Twitter E-mail

General

Target

60b18964f22beea7dcc4d49b98bf6afd2ab3d0377011ad89cdbda541a383a41f
Size

33KB
MD5

83d5991c4d0cfe0a2ac0d5fe0a967604
SHA1

2c340e87db662e69dc441ee4c74ae7a170e3f4a2
SHA256

60b18964f22beea7dcc4d49b98bf6afd2ab3d0377011ad89cdbda541a383a41f
SHA512

ffb014a844a817bd8d9dad9b9ece9539c9ea8bad4902f62edf4943a46d5b989cbb79d2a795a751a367bfd2528ee09ab8265f992e35c19d931d3ee84378ed4ffb
SSDEEP

384:eK16YvQ+UH8dw7LZ6nyE59fxeti/dRR1CvefojyS44NyDDvLRsV8baxFTr:fvR28dw7LZ6xdQmoy/4N+Dt1UT

Score

N/A

Malware Config

Signatures

Files

60b18964f22beea7dcc4d49b98bf6afd2ab3d0377011ad89cdbda541a383a41f
.dll windows x86

4d1469f3551e862c8b31f11b0cdc30b0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LocalFree
GetLastError
GetVersionExA
GlobalFree
GlobalAlloc
HeapFree
HeapAlloc
GetProcessHeap
SearchPathA
GetTempPathA
GetTickCount
FreeLibrary
lstrlenA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
CreateRemoteThread
DuplicateHandle
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
VirtualProtectEx
OpenProcess
GetCurrentProcessId
CreateMutexA
CreateThread
ReleaseMutex
GetModuleHandleA
GetSystemDirectoryA
DeleteFileA
GetPrivateProfileStringA
CreateFileA
WriteFile
ReadFile
Sleep
CloseHandle
GetModuleFileNameA
lstrcmpiA
LoadLibraryA
GetProcAddress

user32

GetForegroundWindow
wsprintfA
GetWindowTextA

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDCA

advapi32

LookupPrivilegeValueA
SetSecurityInfo
SetEntriesInAclA
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges

msvcrt

mbstowcs
strlen
memcpy
memset
wcscpy
strstr
strcat
strcpy
wcscmp
free
malloc
fclose
fread
??2@YAPAXI@Z
rewind
ftell
fseek
fopen
??3@YAXPAX@Z
sprintf
printf
strrchr
_strlwr

ws2_32

gethostbyname
WSACleanup
htons
socket
recv
send
WSAStartup
connect
closesocket

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

wininet

InternetCloseHandle
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetReadFile

Exports

Exports

Install

Sections

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4d1469f3551e862c8b31f11b0cdc30b0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

ws2_32

msvcp60

wininet

Exports

Exports

Sections

.bss Size: - Virtual size: 4KB

.data Size: 20KB - Virtual size: 19KB

.reloc Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 19KB

.reloc
Size: 2KB - Virtual size: 1KB