6d9fae2f550391d6510523ec443278be45a62178e87de0bf644d22f0c4a40d91

Sharing

Copy URL Twitter E-mail

General

Target

6d9fae2f550391d6510523ec443278be45a62178e87de0bf644d22f0c4a40d91
Size

204KB
MD5

c40453613720f82ed07058b0c336ceae
SHA1

bec37046da533adfd79a4db3de00c93198b30e36
SHA256

6d9fae2f550391d6510523ec443278be45a62178e87de0bf644d22f0c4a40d91
SHA512

eacf9b084adbbfb1f4cae7a7966982d98b0578a5aa9905237c73ec9491b898ba38d75b360993d8c6439b548660ea514c8de2f684f4a10e3c0cd1b1a7df973df8
SSDEEP

3072:Qme1GvjCRltauHGw87EtG5uJtYXdGpdzEwpYaEpMc91+7atMnQ:cuCn3y7EtGGGdGph7pYaEpZ1+3n

Score

N/A

Malware Config

Signatures

Files

6d9fae2f550391d6510523ec443278be45a62178e87de0bf644d22f0c4a40d91
.dll windows x86

241c4a5a9f003096fcc5a41daa20b22f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
CreateDirectoryA
InterlockedDecrement
InitializeCriticalSection
CreateEventA
SetEvent
WaitForSingleObject
CloseHandle
DeleteCriticalSection
GetCurrentThreadId
GetLocalTime
WriteProfileStringA
Sleep
GetModuleFileNameA
GetComputerNameA
TerminateThread
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
CreateProcessA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
CreateFileW
ReadFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoW
GetTimeZoneInformation
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FlushFileBuffers
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
IsValidCodePage
InterlockedIncrement
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetProcAddress
GetModuleHandleA
ExitProcess
ExitThread
ResumeThread
CreateThread
MoveFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
WriteFile
GetStdHandle
LoadLibraryA
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale

ole32

CLSIDFromString

oleaut32

SysAllocString
VariantClear
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime

ws2_32

sendto
WSAIoctl
bind
recv
ntohs
send
setsockopt
recvfrom
connect
htons
socket
ntohl
htonl
WSACleanup
WSAStartup
WSACreateEvent
WSACloseEvent
WSAEventSelect
WSAGetLastError
WSAWaitForMultipleEvents
WSASetLastError
WSAResetEvent
WSAEnumNetworkEvents
closesocket

Exports

Exports

AddTime
Auth
ChangePassword
Decrypt
DeductHour
DeductPoint
Encrypt
GetBulletin
GetCode
GetCurrTime
GetData
GetDownloadLen
GetProductData
GetProductDataSize
GetTotalLen
GetUserType
GetValidity
GetVer
Initialize
IsConnected
IsValid
LeaveMsg
PutData
Release
Unbind
Update
UserAuth
UserRegister

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

241c4a5a9f003096fcc5a41daa20b22f

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 155KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 8KB - Virtual size: 14KB

.reloc Size: 12KB - Virtual size: 9KB

.text
Size: 156KB - Virtual size: 155KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 8KB - Virtual size: 14KB

.reloc
Size: 12KB - Virtual size: 9KB