457b7667025f11343b2a4bb002e9041de856a82fcbfb8dd66e4485925a834888

Sharing

Copy URL Twitter E-mail

General

Target

457b7667025f11343b2a4bb002e9041de856a82fcbfb8dd66e4485925a834888
Size

332KB
MD5

6aa9518ec0155970072e9cb53824afec
SHA1

949271e092a54feef9a7b2ab71ada719fe4bdfc8
SHA256

457b7667025f11343b2a4bb002e9041de856a82fcbfb8dd66e4485925a834888
SHA512

d09890bf339ab7bd674fd512ffb1df646bc5ecb4f0e86f17fd15a3f37943580148fe484685c00f2b25ff39c094e3a7d3978d34ac8f604c135148381de8981703
SSDEEP

6144:FSF/65dZCqHbrc0KtnWSrDuFYdIoghK+vSbqWl/Dg+U+9vXBmk3CJ21SM9Xrs7TL:FSF/65dZCqHbH2nWSrDuFYdIoghK+vS4

Score

N/A

Malware Config

Signatures

Files

457b7667025f11343b2a4bb002e9041de856a82fcbfb8dd66e4485925a834888
.dll windows x86

727990838bd8b2264bbbd2688c4ac9e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadStringA
CharPrevA
CharNextA
GetSystemMetrics

advapi32

RegOpenKeyExA
RegEnumKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCloseKey
RegQueryValueExA
RegQueryValueA
RegCreateKeyA
RegSetValueA
RegOpenKeyA

msvcr71

strrchr
strstr
strtol
_vsnprintf
getenv
_errno
strncpy
_chsize
_strnicmp
_timezone
localtime
time
_tzset
sscanf
atof
strchr
malloc
free
_assert
_ftime
_findclose
_findnext
_findfirst
vfprintf
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_except_handler3
?terminate@@YAXXZ
_mbctype
isupper
__CxxFrameHandler
_stricmp
memmove
rename
remove
fgets
tolower
fopen
atol
fgetc
isspace
isalpha
ungetc
isdigit
_iob
fprintf
fclose
strtok
ceil
floor
atoi
sprintf
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_CxxThrowException
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??2@YAPAXI@Z
??3@YAXPAX@Z
_purecall
_read
_write
_unlink
_putenv
_strlwr
_getpid
strpbrk
_get_osfhandle
_fstat
_control87
_tell
_lseek
_sopen
_open
_creat
_close
_strcmpi
_getcwd
_chdir

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

kernel32

GlobalMemoryStatus
WinExec
lstrcpyA
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalAlloc
GetVersion
GetVersionExA
CopyFileA
GetProcAddress
FreeLibrary
SetErrorMode
LoadLibraryA
GetTempPathA
GetTempFileNameA
CloseHandle
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
GetLastError
UnmapViewOfFile
GetSystemInfo
MoveFileA
FindNextFileA
GetFileAttributesA
SetFileAttributesA
DeleteFileA
RemoveDirectoryA
GetDriveTypeA
FindFirstFileA
CreateDirectoryA
GetModuleFileNameA
GetWindowsDirectoryA
GetDiskFreeSpaceA
FindClose
GetFullPathNameA
GetTickCount
GetSystemDirectoryA

ole32

CoCreateGuid

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Exports

Exports

RMACreateRMEdit
RMACreateRMEvents
RMACreateRMFF2Reader
RMACreateRMFFCopy
RMACreateRMFFDump
RMACreateRMFile
RMACreateRealMediaRegistration
SetDLLAccessPath

Sections

.text
Size: 256KB - Virtual size: 252KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

727990838bd8b2264bbbd2688c4ac9e2

Headers

File Characteristics

Imports

user32

advapi32

msvcr71

msvcp71

kernel32

ole32

version

Exports

Exports

Sections

.text Size: 256KB - Virtual size: 252KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 24KB - Virtual size: 23KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 256KB - Virtual size: 252KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 24KB - Virtual size: 23KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 16KB - Virtual size: 12KB