3bc16c378215ffc3befdf6fc76e7498ebe26596d9e884df8c43b8a16457cd6e0

Sharing

Copy URL Twitter E-mail

General

Target

3bc16c378215ffc3befdf6fc76e7498ebe26596d9e884df8c43b8a16457cd6e0
Size

300KB
MD5

0a622815e0970f2d4c8154accb850460
SHA1

064b770ba8488760403e41d76f367041199b0280
SHA256

3bc16c378215ffc3befdf6fc76e7498ebe26596d9e884df8c43b8a16457cd6e0
SHA512

67d5845a93c92887e583857f9205b299a09aae1e41b35411aa52aed0f013699e188b69298822a56f2e0c7a8baf79a86708e378c5ae49bc7d40193c8455cf3968
SSDEEP

6144:r9m5/y8cKysqVpOh3+SsQAvSZk+2K+Lpd3QU:pm5SKy++SsZ8Apd3Q

Score

N/A

Malware Config

Signatures

Files

3bc16c378215ffc3befdf6fc76e7498ebe26596d9e884df8c43b8a16457cd6e0
.dll windows x86

e44d1874d18531973c34e7910b00fe02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

socket
bind
inet_ntoa
setsockopt
sendto
closesocket
select
recvfrom
gethostname
ntohl
WSAStartup
WSACleanup
WSASetLastError
ntohs
getservbyport
gethostbyaddr
htons
getservbyname
htonl
inet_addr
gethostbyname
WSAGetLastError
ioctlsocket

comctl32

ord17

kernel32

ReadFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
SetEvent
CreateThread
ResetEvent
CreateEventA
CloseHandle
WaitForSingleObject
GetProcAddress
FreeLibrary
LoadLibraryA
GetSystemDirectoryA
GetCurrentThreadId
Sleep
GetLastError
GetTickCount
ReleaseMutex
CreateMutexA
GetVersionExA
lstrcpyA
lstrlenA
lstrcmpA
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
GetModuleFileNameA
GetStdHandle
WriteFile
ExitProcess
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
EnterCriticalSection
WaitForMultipleObjects
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
GetProcessHeap
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
DeleteCriticalSection
LeaveCriticalSection

user32

SetWindowLongA
CallWindowProcA
GetWindowTextA
RedrawWindow
MessageBoxA
GetSystemMetrics
GetWindowRect
MoveWindow
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
DialogBoxParamA
SendMessageA
LoadStringA
SetWindowTextA
SetDlgItemTextA
PostMessageA
EndDialog
GetDlgItem
EnableWindow
CreateDialogParamA
ShowWindow
UpdateWindow
DestroyWindow

gdi32

GetStockObject

Exports

Exports

CheckNameResolution
CreateModalDlg
CreateModalDlg2
CreateModalDlgEx
CreateModalDlgEx2
CreateModalDlgEx3
DoDiagnosis
DoDiagnosisIdentify
EndListDlg
GetDeviceAttribute
GetExRecommendedIPSettings
GetIPByName
GetNGNState
GetNumOfDevice
GetNumOfDeviceEx
GetNumOfDeviceMac
GetNumOfDeviceSpecifiedIF
GetRecommendedIPSettings
GetSerialNumber
InitDiagnosis
PrinterSearch
QuitDiagnosis
RestoreSettings
SendExRecommendedIPSettings
SendRecommendedIPSettings
SendRecommendedSMSettings
WinsockClose
WinsockStart
_CreateModelessDlg2@16
_CreateModelessDlg@12

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e44d1874d18531973c34e7910b00fe02

Headers

File Characteristics

Imports

wsock32

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 8KB - Virtual size: 13KB

.rsrc Size: 40KB - Virtual size: 37KB

.reloc Size: 12KB - Virtual size: 10KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 8KB - Virtual size: 13KB

.rsrc
Size: 40KB - Virtual size: 37KB

.reloc
Size: 12KB - Virtual size: 10KB

.rmnet
Size: 60KB - Virtual size: 60KB