15e1b2b28600bc93f8ee87ce33497f13faf577376fdf15a0ab106618bf8fc5a6

Sharing

Copy URL Twitter E-mail

General

Target

15e1b2b28600bc93f8ee87ce33497f13faf577376fdf15a0ab106618bf8fc5a6
Size

3.8MB
MD5

3208fb7d581294c341dbb0c451f64378
SHA1

73b65b6c2a025ca3fbd72438a033b78c0a78894c
SHA256

15e1b2b28600bc93f8ee87ce33497f13faf577376fdf15a0ab106618bf8fc5a6
SHA512

d00a720d81789f2df71fb7b55b69e6abd48847adb8c73b520b2f26bcbaecc114b2e7cf79934e1f2db4fa6c06e06f9b1c48c3d240e89cf0ed139b47e5f9eadd9e
SSDEEP

98304:2qSFg0vM75XXB6JkGeDouK9Y7xu7ztuq5CHglpJ4YXsxpm7isD8ic3CEnK6BZK2x:2qha+5XEkGefV7xu7z8pgrJrXQm7uikb

Score

N/A

Malware Config

Signatures

Files

15e1b2b28600bc93f8ee87ce33497f13faf577376fdf15a0ab106618bf8fc5a6
.dll windows x86

430af1069573ecd3148f2121bb8f9ae4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetGetConnectedState
HttpOpenRequestW
HttpOpenRequestA
HttpSendRequestW
InternetConnectW
InternetReadFile
InternetOpenW

kernel32

GetCurrentProcessId
WriteConsoleW
SetStdHandle
LoadLibraryExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleFileNameA
GetOEMCP
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetFileSize
CreateMutexW
HeapCompact
SetFilePointer
TryEnterCriticalSection
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
FreeLibrary
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
WaitForSingleObject
UnlockFile
LockFile
OutputDebugStringW
GetTickCount
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
Sleep
FormatMessageW
HeapDestroy
GetFileAttributesA
LeaveCriticalSection
HeapCreate
HeapValidate
GetFileAttributesW
ReadFile
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
GetLastError
GetProcAddress
HeapSize
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
LoadLibraryA
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
OutputDebugStringA
CloseHandle
DeleteFileW
SetEnvironmentVariableA
GetTempPathA
LocalFree
GetSystemTime
AreFileApisANSI
DeleteFileA
PeekNamedPipe
GetExitCodeThread
SetNamedPipeHandleState
CreateThread
GetACP
IsValidCodePage
EncodePointer
DecodePointer
GetStringTypeW
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
GetCurrentThreadId
RaiseException
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
GetConsoleCP
GetConsoleMode
GetStdHandle
GetFileType
ReadConsoleW
SetFilePointerEx
GetModuleFileNameW
GetTimeZoneInformation

user32

MessageBoxW

Exports

Exports

ts3plugin_apiVersion
ts3plugin_author
ts3plugin_commandKeyword
ts3plugin_currentServerConnectionChanged
ts3plugin_description
ts3plugin_freeMemory
ts3plugin_infoData
ts3plugin_infoTitle
ts3plugin_init
ts3plugin_name
ts3plugin_offersConfigure
ts3plugin_onChannelMoveEvent
ts3plugin_onClientKickFromChannelEvent
ts3plugin_onClientMoveEvent
ts3plugin_onClientMoveMovedEvent
ts3plugin_onClientMoveTimeoutEvent
ts3plugin_onClientSelfVariableUpdateEvent
ts3plugin_onConnectStatusChangeEvent
ts3plugin_onCustom3dRolloffCalculationClientEvent
ts3plugin_onEditCapturedVoiceDataEvent
ts3plugin_onEditMixedPlaybackVoiceDataEvent
ts3plugin_onEditPostProcessVoiceDataEvent
ts3plugin_onNewChannelEvent
ts3plugin_onPluginCommandEvent
ts3plugin_onServerErrorEvent
ts3plugin_onServerPermissionErrorEvent
ts3plugin_onUpdateChannelEvent
ts3plugin_onUpdateClientEvent
ts3plugin_processCommand
ts3plugin_registerPluginID
ts3plugin_requestAutoload
ts3plugin_setFunctionPointers
ts3plugin_shutdown
ts3plugin_version

Sections

.text
Size: 723KB - Virtual size: 723KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

430af1069573ecd3148f2121bb8f9ae4

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

Exports

Exports

Sections

.text Size: 723KB - Virtual size: 723KB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 12KB - Virtual size: 22KB

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 24KB - Virtual size: 24KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 723KB - Virtual size: 723KB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 12KB - Virtual size: 22KB

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 24KB - Virtual size: 24KB

.text
Size: 108KB - Virtual size: 108KB