c28f9f9f0df04f0f4da65aeeeb440612405cdc4f1ae808d9e07251fe1e491e7d

Sharing

Copy URL

Twitter E-mail

General

Target

c28f9f9f0df04f0f4da65aeeeb440612405cdc4f1ae808d9e07251fe1e491e7d
Size

292KB
MD5

08b1b0c7b65d0ab7f349a43687b099c0
SHA1

4dcf620ead6885ff49d80145bdaa4d0ddb2dece9
SHA256

c28f9f9f0df04f0f4da65aeeeb440612405cdc4f1ae808d9e07251fe1e491e7d
SHA512

2d69d54f0cb3acc88ae39043dc441d222aff4dba1617625b45a6cf46f3a46e76a342c40886dfd8ac9c6f049da4d7e4db51a55b219cedf7282c0da0ae8d0fed29
SSDEEP

6144:q7zbHwjFnjG+6tvvLEDTVrHqzx+r1lCK:q7zbHCG+0vOhKi7

Score

N/A

Malware Config

Signatures

Files

c28f9f9f0df04f0f4da65aeeeb440612405cdc4f1ae808d9e07251fe1e491e7d
.dll windows x86

b580cd07f0bbbe734889a0bbd8d10651

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
RtlUnwind
RaiseException
HeapFree
GetCommandLineA
ExitProcess
TerminateProcess
HeapAlloc
HeapSize
HeapReAlloc
GetACP
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetEnvironmentVariableA
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
UnmapViewOfFile
SetEndOfFile
FlushFileBuffers
GetCurrentProcess
GetProcessVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
SetLastError
WritePrivateProfileStringA
GlobalFlags
GetVersion
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
Sleep
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetTickCount
GetLocalTime
SystemTimeToFileTime
HeapDestroy
HeapCreate
WriteFile
GetModuleFileNameA
GetSystemDirectoryA
OpenProcess
GetWindowsDirectoryA
GetProcAddress
LoadLibraryA
CloseHandle
GetFileSize
CreateFileA
GetTempPathA
FindClose
FindFirstFileA
ReadFile
SetFilePointer
SearchPathA
FreeLibrary
InterlockedExchange
lstrlenA
GetLastError
GetVersionExA
GetComputerNameA
DeleteFileA
FileTimeToSystemTime
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingA

user32

GetTopWindow
GetCapture
CopyRect
GetClientRect
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
DestroyMenu
SetWindowLongA
GetMenuItemCount
wsprintfA
GetWindowTextA
SetWindowTextA
ClientToScreen
UnhookWindowsHookEx
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnregisterClassA
WinHelpA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
GetDesktopWindow
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
GetDC
GetWindow
ReleaseDC

gdi32

DeleteObject
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

DeleteService
CreateServiceA
ChangeServiceConfigA
ControlService
StartServiceA
OpenServiceA
QueryServiceConfigA
QueryServiceStatus
RegCloseKey
OpenSCManagerA
CloseServiceHandle
GetUserNameA
LookupAccountNameA
IsValidSid
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCreateKeyExA
RegOpenKeyExA
RegEnumValueA

comctl32

ord17

wininet

HttpSendRequestA
HttpOpenRequestA
InternetReadFile
InternetCloseHandle
InternetConnectA
HttpEndRequestA
InternetWriteFile
HttpSendRequestExA
InternetOpenA
HttpAddRequestHeadersA

rpcrt4

UuidToStringA
UuidCreate
RpcStringFreeA

ws2_32

inet_addr

version

GetFileVersionInfoSizeA

Exports

Exports

FileLoad
FileLoadInit
GetUpdate

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b580cd07f0bbbe734889a0bbd8d10651

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

wininet

rpcrt4

ws2_32

version

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 20KB - Virtual size: 32KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 20KB - Virtual size: 19KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 20KB - Virtual size: 32KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 20KB - Virtual size: 19KB

.rmnet
Size: 60KB - Virtual size: 60KB