7d1b92d2e1a39c90b06b436529a40a84ccc2fde44e0aca70f9058f59ccb71c8f

Sharing

Copy URL Twitter E-mail

General

Target

7d1b92d2e1a39c90b06b436529a40a84ccc2fde44e0aca70f9058f59ccb71c8f
Size

76KB
MD5

cbe096f58a0acb8039317bfd78dddc73
SHA1

0a96aeb44de501654ba72651d591f6c3053e1788
SHA256

7d1b92d2e1a39c90b06b436529a40a84ccc2fde44e0aca70f9058f59ccb71c8f
SHA512

546429e7f266793942a7cbb3dd609281d20373399e0b76a0b19317622289a3a3b5eba4eb39db2de40b40ac95bb5a153b9a2373251a5a3c9fe75c9462fd6e81a2
SSDEEP

1536:oa19mqHCrNbVyB2nkeHNzfXdgV/DIftXGisZ:okoL9VyB2keH5XcDI1XGis

Score

N/A

Malware Config

Signatures

Files

7d1b92d2e1a39c90b06b436529a40a84ccc2fde44e0aca70f9058f59ccb71c8f
.dll windows x86

fa9638435ed6c9f3ee6d1f44b828e973

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord4202
ord922
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord537
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord1199
ord1247
ord858
ord1176
ord1575
ord1168
ord1577
ord1182
ord342
ord1243
ord1197
ord1116
ord1570
ord1253
ord1255
ord6467
ord1578
ord600
ord826
ord269
ord924
ord800
ord540
ord2818
ord535
ord860
ord354
ord5186
ord3318
ord5442
ord1979
ord665
ord803
ord823
ord825
ord543
ord3830
ord3584

msvcrt

_onexit
__dllonexit
free
calloc
srand
rand
_ftol
atol
sprintf
__CxxFrameHandler
time
_initterm
??1type_info@@UAE@XZ
_adjust_fdiv
malloc

kernel32

LocalAlloc
GetPrivateProfileStringA
GetComputerNameA
GetDiskFreeSpaceExA
GetSystemInfo
GetVersionExA
GetSystemDirectoryA
GetPrivateProfileIntA
GetTickCount
WritePrivateProfileStringA
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
Sleep
LocalFree

wsock32

socket
ioctlsocket
htons
connect
send
select
__WSAFDIsSet
recv
closesocket
WSAStartup

msvcp60

??0_Lockit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

Exports

Exports

DC_Check
DC_CheckUpdate
DC_GetCJ
DC_GetImg
DC_GetInfo
DC_GetLastError
DC_Init
DC_Notify
DC_RecogImg
DC_Reg
DC_RegPayUser
DC_SetResult
DC_Uninit
GetUserInfo
RecByte
RecByte_A
RecYZM
RecYZM_A
Reglz
ReportError

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fa9638435ed6c9f3ee6d1f44b828e973

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

wsock32

msvcp60

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 2KB