5144a1aba6288f563d41edb287c85eb6d7711aaec929905e30f8580aca706112

Sharing

Copy URL Twitter E-mail

General

Target

5144a1aba6288f563d41edb287c85eb6d7711aaec929905e30f8580aca706112
Size

333KB
MD5

84fc16c16ab07c5c40fb026f2da26070
SHA1

16c4a12f316c47d3a51b6c788506a4500a8db15d
SHA256

5144a1aba6288f563d41edb287c85eb6d7711aaec929905e30f8580aca706112
SHA512

b46bde92ade84ef726a98900ab6012764c91d984fb4cf3f2f0649c48b171b7bb82e867b53b540937fe64bed94c6b001be7b9376fab2fe171ed1ad692558ad279
SSDEEP

6144:tSUoN4ymfO5lkOfF3sRrTynuDh/sHcEJRvt89JipMhUuhVcPIg:tSx+zfgORrWn0hcRvt89Jiuhl

Score

N/A

Malware Config

Signatures

Files

5144a1aba6288f563d41edb287c85eb6d7711aaec929905e30f8580aca706112
.dll windows x86

e76981df63ea58f067f6f1b6e391bc92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
GetModuleFileNameW
CreateDirectoryW
GetTempPathW
OpenProcess
FormatMessageW
GetACP
MultiByteToWideChar
GetLastError
Module32FirstW
Process32NextW
CloseHandle
Process32FirstW
WideCharToMultiByte
CreateToolhelp32Snapshot
GetProcessHeap
SetEndOfFile
CreateFileA
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetCurrentProcessId
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
GetProcAddress
ExitProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetOEMCP
IsValidCodePage
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetModuleHandleA

advapi32

RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW

shell32

SHGetSpecialFolderPathW

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveFileSpecW
StrTrimW

wininet

FtpSetCurrentDirectoryW
FtpCreateDirectoryW
FtpPutFileW
InternetOpenW
InternetCloseHandle
FtpGetFileW
InternetConnectW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

CreateFileVersionObj
CreateFtpObj
CreateJsonObj
CreateProcessObj
CreateRegistryObj
CreateXmlObj
GetCmdLineObj
GetThisProgramInfoObj

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e76981df63ea58f067f6f1b6e391bc92

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

shlwapi

wininet

version

Exports

Exports

Sections

.text Size: 206KB - Virtual size: 205KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 12KB - Virtual size: 12KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 206KB - Virtual size: 205KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 12KB - Virtual size: 12KB

.rmnet
Size: 56KB - Virtual size: 60KB