581ebd35a06155512f0634c2715fabd2fa8e62a7b73e24ebfb78a8507a4bc4ba

Sharing

Copy URL Twitter E-mail

General

Target

581ebd35a06155512f0634c2715fabd2fa8e62a7b73e24ebfb78a8507a4bc4ba
Size

140KB
MD5

924008a742ad32caac5f818bae4707a0
SHA1

a85fa969310df1d58507f42f7501b064b106f48e
SHA256

581ebd35a06155512f0634c2715fabd2fa8e62a7b73e24ebfb78a8507a4bc4ba
SHA512

3cad7bf3cf32c7bd06ee51e63c31070bb3e3b31b966a0e4ceaebd2ba7783eaaa7e464d86e1fc63325ac1f7c09fde44cf724661020c21e7ccdffb0746887aa1dd
SSDEEP

3072:LNjMM+fUck04mNSK/JpHLROKFTYWJRVuTrbW8MF7T:LN4M+fUQHwKtRJR+W8M

Score

N/A

Malware Config

Signatures

Files

581ebd35a06155512f0634c2715fabd2fa8e62a7b73e24ebfb78a8507a4bc4ba
.dll windows x86

b27b29a8178fc4b4f8683da95133d3bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_putenv
_initterm
_adjust_fdiv
_onexit
strchr
__dllonexit
_purecall
_strcmpi
??2@YAPAXI@Z
_stricmp
??3@YAXPAX@Z
free
malloc
strrchr
strstr
strncpy
sprintf
_ftol
rand
realloc

ole32

CoTaskMemAlloc
CoTaskMemFree
RevokeDragDrop
OleInitialize
CoCreateInstance
CoFreeUnusedLibraries

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

InterlockedIncrement
IsBadReadPtr
WaitForSingleObject
GetEnvironmentVariableA
GetModuleFileNameA
MulDiv
MultiByteToWideChar
GetProcAddress
WideCharToMultiByte
InterlockedDecrement
lstrlenW
FreeLibrary
LoadLibraryA

user32

LoadStringA
MessageBoxA
GetSystemMetrics
CharNextA
PostMessageA
SetRect
GetDC
ReleaseDC
CharPrevA
SetWindowLongA
SetWindowPos
CallWindowProcA
DefWindowProcA
GetClientRect
CopyRect
IsWindow
GetWindow
CharLowerA
PostThreadMessageA
ShowWindow
GetClassNameA
EnumChildWindows

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

gdi32

GetDeviceCaps
DPtoLP
SetMapMode
GetMapMode
LPtoDP

oleaut32

SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SafeArrayAccessData
VariantClear

Exports

Exports

CreateBrowserInstance
GetIEVersion
RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b27b29a8178fc4b4f8683da95133d3bf

Headers

File Characteristics

Imports

pncrt

ole32

version

kernel32

user32

advapi32

gdi32

oleaut32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB