e20e11c4d995753bcd9fc9b7a329ecf237cf5e6d0b94bc55285314efed383e04

Sharing

Copy URL

Twitter E-mail

General

Target

e20e11c4d995753bcd9fc9b7a329ecf237cf5e6d0b94bc55285314efed383e04
Size

544KB
MD5

834a74c733c4c71a0bb6cd630a39d6c0
SHA1

08122fe42c40bb75b0531bfd442e8b28f675453b
SHA256

e20e11c4d995753bcd9fc9b7a329ecf237cf5e6d0b94bc55285314efed383e04
SHA512

bfc5de0999700b251c09eaca9d8006690ffcb7fb20360884b2b5bf4e3b684c099d94da1d7bcbbcd8952e9e18fc694668ce64bdafc1e7b0aea959874da986964f
SSDEEP

6144:jkVDlLHDbpra1O1qPkx2ogHgROhuJgfXmjrlH0ahbAiPXHI1e81Se:jwDlLjbplqPkx2ogHP4ifXofGAXHICe

Score

N/A

Malware Config

Signatures

Files

e20e11c4d995753bcd9fc9b7a329ecf237cf5e6d0b94bc55285314efed383e04
.dll windows x86

c4846372f78d510c54ba29e3fffcf5d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoUninitialize

kernel32

GetModuleFileNameA
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
FreeLibrary
GetProcAddress
LoadLibraryA
GetTickCount
SuspendThread
ResumeThread
SetThreadPriority
GetThreadPriority
Sleep
CloseHandle
WaitForSingleObject
GetCurrentThreadId
GetLastError
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
FindClose
GetDiskFreeSpaceA
GetWindowsDirectoryA
QueryPerformanceCounter
CreateDirectoryA
FindFirstFileA
GetDriveTypeA
RemoveDirectoryA
DeleteFileA
SetFileAttributesA
GetFileAttributesA
FindNextFileA
MoveFileA
GetVersionExA
GetCurrentProcessId
ExitProcess
QueryPerformanceFrequency

user32

RegisterClassA
UnregisterClassA
CreateWindowExA
SetWindowLongA
DefWindowProcA
GetWindowLongA
PostQuitMessage
DestroyWindow
wsprintfA
GetSystemMetrics
CharNextA
CharPrevA
PeekMessageA
DispatchMessageA
GetMessageA
PostMessageA
PostThreadMessageA

msvcr71

_itoa
_strdup
_strlwr
_strcmpi
_putenv
_getcwd
_chdir
_ftime
_CxxThrowException
?terminate@@YAXXZ
__CppXcptFilter
_strnicmp
rand
strchr
??3@YAXPAX@Z
??2@YAPAXI@Z
time
_vsnprintf
_stricmp
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_purecall
_i64toa
_atoi64
??_V@YAXPAX@Z
fclose
fwrite
fopen
strstr
strtok
??_U@YAPAXI@Z
??0exception@@QAE@ABV0@@Z
fread
ftell
fseek
atoi
free
toupper
isalnum
localtime
gmtime
isalpha
isdigit
memchr
isspace
islower
isxdigit
sprintf
tolower
isupper
strncpy
strncmp
__CxxFrameHandler
strrchr
memmove
getenv
mktime
sscanf
_beginthreadex
_iob
_CIfmod
floor
_HUGE
_errno
_control87
malloc
realloc
fgets
fprintf
_CIacos
_CIasin
ceil
_CIpow
isprint
printf
strftime
__security_error_handler
_except_handler3
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

Exports

Exports

?AsyncNotifyProc@CAsyncNetThread@@KGJPAUHWND__@@IIJ@Z
?AsyncNotifyProc@CAsyncSockN@@KGJPAUHWND__@@IIJ@Z
CanUnload
JSLL_MaxInt
JSLL_MinInt
JSLL_Zero
JS_ArenaAllocate
JS_ArenaFinish
JS_ArenaGrow
JS_ArenaRelease
JS_CeilingLog2
JS_CompactArenaPool
JS_CompareValues
JS_FinishArenaPool
JS_FloorLog2
JS_FreeArenaPool
JS_GetContextPrivate
JS_HashString
JS_HashTableAdd
JS_HashTableDestroy
JS_HashTableDump
JS_HashTableEnumerateEntries
JS_HashTableLookup
JS_HashTableRawAdd
JS_HashTableRawLookup
JS_HashTableRawRemove
JS_HashTableRemove
JS_InitArenaPool
JS_NewHashTable
JS_SetContextPrivate
JS_smprintf
JS_smprintf_free
JS_snprintf
JS_sprintf_append
JS_sxprintf
JS_vsmprintf
JS_vsnprintf
JS_vsprintf_append
JS_vsxprintf
RMACreateInstance
js_FunctionClass
js_ObjectOps
js_SrcNoteArity
js_SrcNoteName
js_WithObjectOps
js_list_scope_ops

Sections

.text
Size: 272KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c4846372f78d510c54ba29e3fffcf5d8

Headers

File Characteristics

Imports

ole32

kernel32

user32

msvcr71

msvcp71

Exports

Exports

Sections

.text Size: 272KB - Virtual size: 269KB

.rdata Size: 44KB - Virtual size: 41KB

.data Size: 16KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 13KB

.text Size: 188KB - Virtual size: 188KB

.text
Size: 272KB - Virtual size: 269KB

.rdata
Size: 44KB - Virtual size: 41KB

.data
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 13KB

.text
Size: 188KB - Virtual size: 188KB