General

Malware Config

Signatures

Files

• 6d5b345798e57ab70021d58adeba8702e9f31c5ea152a6a7099a2d603bebb95a

  .dll windows x86

  531c2c790b163cf07f4fb9bce0ec1285

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  gethostbyaddr

  inet_addr

  connect

  socket

  htons

  send

  closesocket

  recv

  __WSAFDIsSet

  select

  accept

  listen

  bind

  WSACleanup

  WSAStartup

  htonl

  shutdown

  setsockopt

  recvfrom

  sendto

  ioctlsocket

  WSAGetLastError

  gethostname

  inet_ntoa

  gethostbyname

  setupapi

  SetupDiSetClassInstallParamsW

  SetupDiCallClassInstaller

  SetupDiEnumDeviceInfo

  SetupDiGetDeviceInstallParamsW

  SetupDiGetClassDevsW

  SetupDiDestroyDeviceInfoList

  version

  GetFileVersionInfoA

  GetFileVersionInfoSizeA

  VerQueryValueA

  kernel32

  WaitForMultipleObjects

  ClearCommError

  WaitCommEvent

  LocalFree

  FormatMessageA

  GetOverlappedResult

  GetCurrentThreadId

  DuplicateHandle

  SetFilePointer

  FlushFileBuffers

  LockFile

  UnlockFile

  SetEndOfFile

  lstrcpyA

  FindClose

  FindFirstFileA

  GetVolumeInformationA

  lstrcpynA

  GetFullPathNameA

  lstrcmpiA

  SetLastError

  FindNextFileA

  InterlockedIncrement

  InterlockedDecrement

  GlobalDeleteAtom

  GlobalFindAtomA

  GlobalAddAtomA

  GlobalGetAtomNameA

  lstrcatA

  GetVersion

  LockResource

  LoadResource

  FindResourceA

  MulDiv

  GlobalUnlock

  GlobalLock

  GlobalFree

  GetCommMask

  FileTimeToSystemTime

  FileTimeToLocalFileTime

  LocalAlloc

  GlobalAlloc

  TlsAlloc

  GlobalHandle

  TlsFree

  GlobalReAlloc

  TlsSetValue

  LocalReAlloc

  TlsGetValue

  SetErrorMode

  GetFileAttributesA

  GetFileTime

  GlobalFlags

  GetProcessVersion

  GetCPInfo

  GetOEMCP

  GetCurrentDirectoryA

  RtlUnwind

  GetTimeZoneInformation

  GetSystemTime

  GetCommandLineA

  HeapFree

  HeapAlloc

  HeapReAlloc

  RaiseException

  ExitThread

  GetACP

  ExitProcess

  HeapSize

  SetStdHandle

  GetFileType

  SetHandleCount

  GetStdHandle

  FreeEnvironmentStringsA

  FreeEnvironmentStringsW

  GetEnvironmentStrings

  GetEnvironmentStringsW

  GetEnvironmentVariableA

  HeapDestroy

  HeapCreate

  VirtualFree

  VirtualAlloc

  IsBadWritePtr

  GetStringTypeA

  GetStringTypeW

  GetDriveTypeA

  LCMapStringA

  LCMapStringW

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  IsBadReadPtr

  IsBadCodePtr

  CompareStringA

  CompareStringW

  SetEnvironmentVariableA

  SetCommTimeouts

  SetCommMask

  GetCommState

  BuildCommDCBA

  SetCommState

  PurgeComm

  CreateFileMappingA

  OpenFileMappingA

  MapViewOfFile

  UnmapViewOfFile

  ReadProcessMemory

  WriteProcessMemory

  Beep

  CreateToolhelp32Snapshot

  Process32First

  Process32Next

  GetFileSize

  SetThreadPriority

  ResumeThread

  SuspendThread

  TerminateProcess

  GetWindowsDirectoryA

  lstrlenA

  DeviceIoControl

  GetCurrentProcessId

  OpenProcess

  FreeLibrary

  GetStartupInfoA

  CreateProcessA

  ReadFile

  WriteFile

  CopyFileA

  DeleteFileA

  TerminateThread

  ResetEvent

  CreateEventA

  GetTickCount

  VirtualProtect

  LoadLibraryA

  EnterCriticalSection

  LeaveCriticalSection

  DeleteCriticalSection

  InitializeCriticalSection

  Sleep

  WaitForSingleObject

  WideCharToMultiByte

  MultiByteToWideChar

  WritePrivateProfileStringA

  GetPrivateProfileStringA

  CreateFileA

  CloseHandle

  CreateMutexA

  GetLastError

  GetVersionExA

  CreateDirectoryA

  GetModuleFileNameA

  GetLocalTime

  GetModuleHandleA

  GetProcAddress

  GetCurrentThread

  GetCurrentProcess

  CreateThread

  OutputDebugStringA

  SetEvent

  GetSystemDirectoryA

  lstrcmpA

  SetCurrentDirectoryA

  user32

  BeginPaint

  EndPaint

  TabbedTextOutA

  DrawTextA

  GrayStringA

  CreateDialogIndirectParamA

  GetActiveWindow

  ValidateRect

  TranslateMessage

  GetMessageA

  PostQuitMessage

  SetCursor

  WaitMessage

  KillTimer

  UnregisterClassA

  LoadStringA

  GetClassNameA

  PtInRect

  LoadCursorA

  GetSysColorBrush

  DestroyMenu

  ReleaseDC

  GetDC

  ClientToScreen

  GetMenuCheckMarkDimensions

  LoadBitmapA

  GetMenuState

  ModifyMenuA

  SetMenuItemBitmaps

  CheckMenuItem

  EnableMenuItem

  GetNextDlgTabItem

  IsWindowEnabled

  ShowWindow

  SetWindowTextA

  IsDialogMessageA

  LoadIconA

  UpdateWindow

  SendDlgItemMessageA

  MapWindowPoints

  GetSysColor

  DispatchMessageA

  GetFocus

  SetActiveWindow

  IsWindow

  SetFocus

  AdjustWindowRectEx

  GetClientRect

  CopyRect

  IsWindowVisible

  GetTopWindow

  GetCapture

  WinHelpA

  GetClassInfoA

  RegisterClassA

  GetMenu

  GetMenuItemCount

  GetSubMenu

  GetMenuItemID

  GetDlgItem

  GetWindowTextA

  GetDlgCtrlID

  GetKeyState

  DestroyWindow

  CreateWindowExA

  GetClassLongA

  SetPropA

  GetPropA

  CallWindowProcA

  RemovePropA

  DefWindowProcA

  GetMessageTime

  GetMessagePos

  GetLastActivePopup

  GetWindow

  SetWindowLongA

  RegisterWindowMessageA

  SystemParametersInfoA

  IsIconic

  GetWindowPlacement

  CharUpperA

  GetGUIThreadInfo

  DialogBoxParamA

  EndDialog

  GetDlgItemTextA

  GetWindowRect

  GetSystemMetrics

  GetParent

  GetDesktopWindow

  SetWindowPos

  SetForegroundWindow

  GetCursorPos

  PostMessageA

  ExitWindowsEx

  GetForegroundWindow

  MessageBoxA

  SetWindowsHookExA

  UnhookWindowsHookEx

  CallNextHookEx

  SetTimer

  wsprintfA

  PeekMessageA

  EnableWindow

  SendMessageA

  GetWindowLongA

  gdi32

  SetViewportOrgEx

  OffsetViewportOrgEx

  SetViewportExtEx

  ScaleViewportExtEx

  SetWindowExtEx

  ScaleWindowExtEx

  SetMapMode

  PtVisible

  RectVisible

  TextOutA

  ExtTextOutA

  Escape

  SetBkMode

  GetStockObject

  RestoreDC

  SaveDC

  CreateBitmap

  SetBkColor

  SetTextColor

  GetClipBox

  GetDeviceCaps

  SelectObject

  GetObjectA

  DeleteObject

  DeleteDC

  CreateFontA

  comdlg32

  GetSaveFileNameA

  GetOpenFileNameA

  GetFileTitleA

  winspool.drv

  OpenPrinterA

  DocumentPropertiesA

  ClosePrinter

  advapi32

  RegCreateKeyA

  RegEnumKeyExA

  RegDeleteKeyA

  RegEnumKeyA

  RegQueryValueA

  OpenProcessToken

  LookupPrivilegeValueA

  AdjustTokenPrivileges

  OpenSCManagerA

  DeleteService

  ControlService

  OpenServiceA

  StartServiceA

  CreateServiceA

  CloseServiceHandle

  RegCreateKeyExA

  RegQueryValueExA

  RegOpenKeyExA

  RegCloseKey

  RegSetValueExA

  shell32

  SHGetPathFromIDListA

  SHBrowseForFolderA

  ShellExecuteA

  comctl32

  ord17

  wininet

  HttpQueryInfoA

  InternetSetOptionA

  InternetReadFile

  InternetCloseHandle

  InternetCanonicalizeUrlA

  InternetCrackUrlA

  FtpOpenFileA

  InternetOpenUrlA

  InternetAttemptConnect

  InternetConnectA

  HttpOpenRequestA

  HttpSendRequestA

  InternetOpenA

  wsock32

  WSAAsyncSelect

  WSASetLastError

  psapi

  EnumProcessModules

  GetModuleFileNameExA

  Exports

  Exports

  GetHardType

  GetHtoS

  GetS_PUBKEY

  Getinfo

  IDnotEQU

  InitMd5

  NetState

  OpenHDevice

  Send_S_To_H

  SetMyHandle

  StartDownLoadServer

  StartWork

  StopWork

  Testcardon

  ans_work

  ask_work

  backHard_info

  exeyeji

  jianjine

  newMsg

  new_exeyeji

  newjianjine

  readset_info

  save_process

  setcounter

  setjihao

  settimecard

  tmpshangji

  Sections

  .text

  Size: 340KB - Virtual size: 339KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 48KB - Virtual size: 47KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 52KB - Virtual size: 111KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 80KB - Virtual size: 76KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 36KB - Virtual size: 32KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ