367f3f4c9caf6544697074de622f7e568269b597d49f06eefe70cadb9c9cba93

Sharing

Copy URL Twitter E-mail

General

Target

367f3f4c9caf6544697074de622f7e568269b597d49f06eefe70cadb9c9cba93
Size

256KB
MD5

824b658b6a8ca2d243a3181f68baa169
SHA1

63a95cfcf0754a71ba412fedf8a2e0374e0e1f26
SHA256

367f3f4c9caf6544697074de622f7e568269b597d49f06eefe70cadb9c9cba93
SHA512

00bd9edfdd4a44a72a5d51f033998566fabf350d760899bad643b510102ad7dda7d6a8e0b7adc615489f8e0628921e1f596e4f2164e8471a670c8b54acb76e1f
SSDEEP

6144:kFAryEIvQ8sJuP/kaAjYfkfe3aXkiiJB2MH4P4oLdbk:F/7JuP/JAks5XkBGMy4v

Score

N/A

Malware Config

Signatures

Files

367f3f4c9caf6544697074de622f7e568269b597d49f06eefe70cadb9c9cba93
.dll windows x86

6412f4bfa52f7921e3a4b42e262e1abd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

kernel32

CreateFileA
CreateFileMappingA
CreateMutexA
CreateSemaphoreA
DeleteCriticalSection
DeviceIoControl
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryA
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
HeapValidate
HeapWalk
CreateEventA
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LCMapStringW
CloseHandle
LoadLibraryA
MapViewOfFile
MultiByteToWideChar
OpenFileMappingA
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
ReleaseSemaphore
ResetEvent
ResumeThread
RtlUnwind
SetEndOfFile
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
InitializeCriticalSection
LeaveCriticalSection

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ws2_32

gethostbyname
htons
inet_addr
ioctlsocket
recv
gethostbyaddr
socket
closesocket
WSAStartup
WSAGetLastError
send
connect

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList

Exports

Exports

BAOOpenFile
D3D9RegisterVertexBuffer
GetMCCustomSetNumberCount
GetPreviousDeviceInfo
SetupArgument

Sections

.text
Size: 160KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 84KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6412f4bfa52f7921e3a4b42e262e1abd

Headers

File Characteristics

Imports

user32

kernel32

advapi32

ws2_32

setupapi

Exports

Exports

Sections

.text Size: 160KB - Virtual size: 160KB

.data Size: 84KB - Virtual size: 120KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 160KB - Virtual size: 160KB

.data
Size: 84KB - Virtual size: 120KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB