b211ec73b94af8b7027858509ee53520df124e55242e53706e62a6bc31d70ef6

Sharing

Copy URL Twitter E-mail

General

Target

b211ec73b94af8b7027858509ee53520df124e55242e53706e62a6bc31d70ef6
Size

123KB
MD5

93c1cde03a6a7b2ddd3b52c9b3e2a76b
SHA1

08e2b9cf1e0a818db16eacbef449acac69679eb6
SHA256

b211ec73b94af8b7027858509ee53520df124e55242e53706e62a6bc31d70ef6
SHA512

d46519e1e1376d67d1eb0203ddbec65549b5148e597bcb0f8e388e6e2c6a6fd6e4f0bc87f547361de71790590baaf5c2c31d902ba17712bac1e33ca0b778d448
SSDEEP

1536:f1mHkSfm5eMGdgbTF+dobwna6LQRc76ifVTes4CDus/iI5b:fwESuGBdIsF0RM60VTes4CDus/i6b

Score

N/A

Malware Config

Signatures

Files

b211ec73b94af8b7027858509ee53520df124e55242e53706e62a6bc31d70ef6
.dll windows x86

dae7db6062a8f09bc9d142d35e37e908

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
CreateIoCompletionPort
ResetEvent
Sleep
WaitForSingleObject
WinExec
lstrcpyA
TerminateThread
lstrcatA
GetLocalTime
lstrcmpA
CreateProcessA
GetSystemDirectoryA
GetStartupInfoA
CreatePipe
DisconnectNamedPipe
TerminateProcess
PeekNamedPipe
WaitForMultipleObjects
GetVersionExA
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateRemoteThread
WriteProcessMemory
VirtualAllocEx
FreeLibrary
GetProcAddress
LoadLibraryA
OpenProcess
GetExitCodeThread
GetTickCount
SetErrorMode
FreeConsole
LocalSize
GetLastError
SetStdHandle
FindClose
LCMapStringW
GetQueuedCompletionStatus
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
SetEvent
CreateEventA
MoveFileA
WriteFile
SetFilePointer
ReadFile
CreateFileA
GetFileSize
CloseHandle
RemoveDirectoryA
InitializeCriticalSection
GetLogicalDriveStringsA
GetVolumeInformationA
lstrlenA
GetDiskFreeSpaceExA
GetDriveTypeA
DeleteFileA
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
VirtualFree
GetEnvironmentStrings
FreeEnvironmentStringsW
LocalAlloc
FindFirstFileA
FreeEnvironmentStringsA
GetModuleFileNameA
GetFileType
GetStdHandle
SetHandleCount
IsBadWritePtr
HeapCreate
HeapDestroy
HeapSize
ExitProcess
TlsGetValue
SetLastError
TlsFree
LocalReAlloc
FindNextFileA
LCMapStringA
LocalFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetModuleHandleA
RaiseException
HeapFree
GetVersion
DeleteCriticalSection
FlushFileBuffers
GetCommandLineA
WideCharToMultiByte
InterlockedIncrement
RtlUnwind
HeapAlloc
HeapReAlloc
InterlockedDecrement

user32

GetWindowTextA
GetActiveWindow
GetKeyNameTextA
GetFocus
CallNextHookEx
SetWindowsHookExA
UnhookWindowsHookEx
ReleaseDC
GetDC
wsprintfA
CloseDesktop
GetDesktopWindow
SetThreadDesktop
GetUserObjectInformationA
OpenInputDesktop
CloseWindow
IsWindow
SendMessageA
CreateWindowExA
GetSystemMetrics
ExitWindowsEx
EnumWindows
IsWindowVisible
GetWindowThreadProcessId

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
CreateDCA
GetDIBits
SelectObject
CreateDIBSection
BitBlt
DeleteDC
DeleteObject

advapi32

RegCloseKey
RegOpenKeyExA
SetServiceStatus
RegisterServiceCtrlHandlerExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyA
RegQueryValueExA
RegQueryValueA

shell32

SHGetFileInfoA

dbghelp

MakeSureDirectoryPathExists

ws2_32

connect
htons
gethostbyname
socket
WSAGetLastError
inet_ntoa
closesocket
getpeername
getsockname
gethostname
WSARecv
WSAStartup
send
ntohs

imm32

ImmGetCompositionStringA
ImmReleaseContext
ImmGetContext

wininet

InternetReadFile
InternetCloseHandle
InternetOpenA
InternetOpenUrlA

urlmon

URLDownloadToFileA

avicap32

capCreateCaptureWindowA

psapi

EnumProcessModules
GetModuleFileNameExA

Exports

Exports

ServiceMain

Sections

.text
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shared
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dae7db6062a8f09bc9d142d35e37e908

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

dbghelp

ws2_32

imm32

wininet

urlmon

avicap32

psapi

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 76KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 16KB

.shared Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 80KB - Virtual size: 76KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 16KB

.shared
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB