18a494b27d14e06bf7fd7db75bf8c9bf62de70d468a94b894c4d2125f0e7a66c

Sharing

Copy URL Twitter E-mail

General

Target

18a494b27d14e06bf7fd7db75bf8c9bf62de70d468a94b894c4d2125f0e7a66c
Size

2.0MB
MD5

986aa624c8c47fd309342d907ec48039
SHA1

3bc912e6fe1d4d55143fade94c37b9ec9848f3e7
SHA256

18a494b27d14e06bf7fd7db75bf8c9bf62de70d468a94b894c4d2125f0e7a66c
SHA512

9e1df8273520f98df6793851dffa2db73b9c601a594d479fd2c3157b14f91f5a98d9eb771cc5a419b46e20ede67232de8329633df3076d5729719f4c3387f8d7
SSDEEP

49152:e8u2EYfjkb8S8dY/mKDJMN9hSKxpU0OupR9:e8pjfjkw/tcMN3OuH9

Score

N/A

Malware Config

Signatures

Files

18a494b27d14e06bf7fd7db75bf8c9bf62de70d468a94b894c4d2125f0e7a66c
.exe windows x86

25e6fcd25454c49ad9378093e3d5b9df

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

kernel32

ExpandEnvironmentStringsW
CreateProcessW
MultiByteToWideChar
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesA
GetSystemTimeAsFileTime
GetModuleFileNameW
GetVersionExW
GetTickCount
OpenJobObjectW
QueryInformationJobObject
SetInformationJobObject
InterlockedDecrement
GetVersion
Sleep
WideCharToMultiByte
IsWow64Process
GetCurrentProcess
GetSystemTime
CopyFileW
WritePrivateProfileStringW
GetTempPathW
GetPrivateProfileSectionNamesW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetFileAttributesW
WritePrivateProfileSectionW
InitializeCriticalSectionAndSpinCount
lstrcmpiW
lstrlenW
LocalAlloc
GlobalAlloc
lstrcatW
GlobalFree
LoadLibraryW
lstrcpyW
FreeLibrary
CreateMutexW
WaitForSingleObject
GetEnvironmentVariableA
MoveFileA
GetCurrentThreadId
ReleaseMutex
GetModuleHandleW
QueryDosDeviceW
GetFileSize
ReadFile
CreateFileW
GetComputerNameW
Module32FirstW
Module32NextW
GetSystemDirectoryW
GetVolumeInformationW
lstrlenA
SetEnvironmentVariableA
SetEndOfFile
OutputDebugStringW
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetProcAddress
RemoveDirectoryW
DeleteFileW
CopyFileExW
FindFirstFileW
TlsFree
FindNextFileW
FindClose
CreateDirectoryW
LocalFree
TerminateProcess
OpenProcess
CloseHandle
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
TlsAlloc
TlsGetValue
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FatalAppExitA
RtlUnwind
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
FlushFileBuffers
GetTimeZoneInformation
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetFileAttributesExW
GetCPInfo
SetConsoleCtrlHandler
GetCommandLineW
IsDebuggerPresent
IsProcessorFeaturePresent
InterlockedExchange
GetConsoleCP
WriteFile
GetFileType
GetStdHandle
ReadConsoleW
GetConsoleMode
DecodePointer
EncodePointer
GetStringTypeW
TlsSetValue
LoadLibraryExW
SetFilePointerEx
SetFilePointer
GetCurrentThread
GetOEMCP
GetACP
IsValidCodePage
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
InterlockedIncrement
GetProcessHeap
HeapSize
HeapFree
CreateSemaphoreW
GetStartupInfoW
RaiseException
HeapDestroy
HeapAlloc
HeapReAlloc

user32

wsprintfW
GetWindowThreadProcessId
MessageBoxW
PostMessageW
LoadStringW
EnumWindows

advapi32

LookupPrivilegeValueW
RegOpenKeyExW
SetNamedSecurityInfoW
SetEntriesInAclW
BuildExplicitAccessWithNameW
GetNamedSecurityInfoW
ConvertStringSidToSidW
RegEnumValueW
RegDeleteKeyW
RegSetValueExW
RegDeleteValueW
GetUserNameW
RegEnumKeyExW
ConvertSidToStringSidW
LookupAccountNameW
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges
RegCreateKeyExW
RegEnumKeyW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW
SHGetSpecialFolderPathW
SHGetFolderPathW
CommandLineToArgvW

ole32

CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoTaskMemFree
CLSIDFromString
CoCreateInstance
CoInitialize

oleaut32

VariantInit
SetErrorInfo
VariantChangeType
GetErrorInfo
SysAllocString
SysFreeString
CreateErrorInfo
SysStringByteLen
SysAllocStringByteLen
VariantClear

shlwapi

PathFindFileNameW
PathFileExistsW
PathAppendA
PathRemoveFileSpecW
PathAppendW

psapi

EnumProcessModules
GetModuleBaseNameW

iphlpapi

GetAdaptersInfo

winhttp

WinHttpReceiveResponse
WinHttpSetTimeouts
WinHttpSetOption
WinHttpSendRequest
WinHttpWriteData
WinHttpAddRequestHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpOpen
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpCloseHandle
WinHttpConnect

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreate

urlmon

URLDownloadToFileW

Exports

Exports

??0AnalyticsHelper@helpers@@QAE@ABV01@@Z
??0AnalyticsHelper@helpers@@QAE@XZ
??0HttpHelper@helpers@@QAE@ABV01@@Z
??0HttpHelper@helpers@@QAE@PB_W00@Z
??0HttpRequestContent@helpers@@QAE@ABV01@@Z
??0HttpRequestContent@helpers@@QAE@XZ
??0LoggerHelper@helpers@@QAE@XZ
??0PrcssHelper@helpers@@QAE@ABV01@@Z
??0PrcssHelper@helpers@@QAE@XZ
??1AnalyticsHelper@helpers@@UAE@XZ
??1HttpHelper@helpers@@QAE@XZ
??1LoggerHelper@helpers@@QAE@XZ
??1PrcssHelper@helpers@@QAE@XZ
??4AnalyticsHelper@helpers@@QAEAAV01@ABV01@@Z
??4BrowserHelper@helpers@@QAEAAV01@ABV01@@Z
??4DirectoryHelper@helpers@@QAEAAV01@ABV01@@Z
??4HttpHelper@helpers@@QAEAAV01@ABV01@@Z
??4HttpRequestContent@helpers@@QAEAAV01@ABV01@@Z
??4LoggerHelper@helpers@@QAEAAV01@ABV01@@Z
??4PrcssHelper@helpers@@QAEAAV01@ABV01@@Z
??4RegistryHelper@helpers@@QAEAAV01@ABV01@@Z
??4ScheduledTaskHelper@helpers@@QAEAAV01@ABV01@@Z
??4SetupHelper@helpers@@QAEAAV01@ABV01@@Z
??_7AnalyticsHelper@helpers@@6B@
??_7HttpRequestContent@helpers@@6B@
?CheckIfProcessRunning@PrcssHelper@helpers@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVErrorData@@@Z
?CleanStringFromSpecialChar@AnalyticsHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V34@0@Z
?CloseApp@PrcssHelper@helpers@@SA?AW4TerminationResult@12@KKPAVErrorData@@@Z
?CloseApp@PrcssHelper@helpers@@SA?AW4TerminationResult@12@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAVErrorData@@@Z
?CloseBrowsers@BrowserHelper@helpers@@SAXXZ
?ConvertToUtf8@DirectoryHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?CreateDirectoriesIfNotExist@DirectoryHelper@helpers@@SA_NUpathFileConvention@@@Z
?CreateDirectoriesIfNotExist@DirectoryHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?CreateNewTaskXP@ScheduledTaskHelper@helpers@@CAHPB_W@Z
?CreateScheduledTask@ScheduledTaskHelper@helpers@@SA_NPA_W0PB_W@Z
?CreateScheduledTask@ScheduledTaskHelper@helpers@@SA_NPB_W0@Z
?CreateTaskForXP@ScheduledTaskHelper@helpers@@CA_NPA_W0PB_W@Z
?CreateTaskForXP@ScheduledTaskHelper@helpers@@CA_NPB_W0@Z
?CreateTmpDir@DirectoryHelper@helpers@@SAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?EmptyFolder@DirectoryHelper@helpers@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@_N@Z
?FindPathFromExeName@PrcssHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV34@PAVErrorData@@@Z
?FindProcessId@PrcssHelper@helpers@@SAKV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GenerateUniquName@DirectoryHelper@helpers@@SAXAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetAllRunningProcesses@PrcssHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetBrandRegValue@RegistryHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z
?GetBrandRegValue@RegistryHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@AAV34@@Z
?GetBrowserExeName@BrowserHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4BROWSER_TYPE@12@@Z
?GetBrowserName@BrowserHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@W4BROWSER_TYPE@12@@Z
?GetCookies@HttpHelper@helpers@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetDataOfRunningProcess@PrcssHelper@helpers@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAUprocessData@12@@Z
?GetDefaultBrowser@BrowserHelper@helpers@@SAHXZ
?GetDefaultURL@HttpHelper@helpers@@SAABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetFilesInDirectory@DirectoryHelper@helpers@@SAXAAV?$vector@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$allocator@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@2@@std@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?GetFixedParams@AnalyticsHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetFunnelId@RegistryHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetFunnelParam@AnalyticsHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetIEVersion@BrowserHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVErrorData@@@Z
?GetInstance@LoggerHelper@helpers@@SAPAV12@XZ
?GetLogFileFullPath@LoggerHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetMachineIdParam@AnalyticsHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetMajorIEVersion@BrowserHelper@helpers@@SAHPAVErrorData@@@Z
?GetPathFileConvention@DirectoryHelper@helpers@@SA?AUpathFileConvention@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetProcessNameByID@PrcssHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@K@Z
?GetResponseHeaders@HttpHelper@helpers@@QBEABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetStatusCode@HttpHelper@helpers@@QBE?BKXZ
?GetTimeRepresentation@LoggerHelper@helpers@@QAE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ
?GetVersionInfo@DirectoryHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V34@_N@Z
?GetVersionParam@AnalyticsHelper@helpers@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?IncrementAndCheckLimit@RegistryHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@00HH@Z
?InitEasyLogger@LoggerHelper@helpers@@SAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z
?InitEasyLoggerW@LoggerHelper@helpers@@SAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?IsBOOActive@RegistryHelper@helpers@@SA_NXZ
?IsBrowserActive@BrowserHelper@helpers@@SAHW4BROWSER_TYPE@12@@Z
?IsCurrentProcessAlreadyRunning@PrcssHelper@helpers@@SA_NPAVErrorData@@@Z
?IsFileExistsOnSystem@DirectoryHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsFileExistsOnSystem@SetupHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0@Z
?IsFileExistsOnSystem@SetupHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsLoggerOn@LoggerHelper@helpers@@QAE_NXZ
?IsSendLogUser@LoggerHelper@helpers@@QAE_NXZ
?IsTaskExists@ScheduledTaskHelper@helpers@@SA_NPB_W@Z
?IsTaskExistsForXp@ScheduledTaskHelper@helpers@@SA_NPB_W@Z
?IsValidUrl@HttpHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?IsWin7OrLater@ScheduledTaskHelper@helpers@@CA_NXZ
?IsWinXP@PrcssHelper@helpers@@SA_NXZ
?LoadProcess@PrcssHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PAVErrorData@@PAVProcessData@12@@Z
?MoveFilesFromOneFolderToAnother@DirectoryHelper@helpers@@SA_NAAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0_N@Z
?NormalizeNTPath@DirectoryHelper@helpers@@SAJPA_WI@Z
?ReadFromRegistry@RegistryHelper@helpers@@SA_NPAUHKEY__@@PB_WV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAV45@PAVErrorData@@@Z
?RemoveFolder@DirectoryHelper@helpers@@SAXPB_W@Z
?RemoveScheduledTask@ScheduledTaskHelper@helpers@@SA_NPB_W@Z
?RemoveScheduledTask@ScheduledTaskHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?RemoveTaskForXp@ScheduledTaskHelper@helpers@@SA_NPB_W@Z
?RolloutHandler@LoggerHelper@helpers@@SAXPBDI@Z
?SendAnalytics@AnalyticsHelper@helpers@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SendAnalyticsByTimerInterval@AnalyticsHelper@helpers@@SA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@I@Z
?SendAnalyticsTREE@AnalyticsHelper@helpers@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@@Z
?SendLogData@LoggerHelper@helpers@@QAEXAAV?$basic_stringstream@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?SendPostData@HttpHelper@helpers@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@@Z
?SendPostRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@V?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?SendQuick@AnalyticsHelper@helpers@@SAXABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@AAV34@V34@@Z
?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z
?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAX@Z
?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVHttpRequestContent@2@@Z
?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV34@@Z
?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@4@@Z
?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@KPAX@Z
?SendRequest@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z
?SendRequest_s@HttpHelper@helpers@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z
?SetAnAppToRunForTaskXp@ScheduledTaskHelper@helpers@@CAHPA_W0PB_W@Z
?SetAnAppToRunForTaskXp@ScheduledTaskHelper@helpers@@CAHPB_W0@Z
?SetTriggerForTaskXp@ScheduledTaskHelper@helpers@@CAHPB_W@Z
?TerminateAppEnum@PrcssHelper@helpers@@CGHPAUHWND__@@J@Z
?UploadFileToS3@HttpHelper@helpers@@QAE_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PA_W0PAV34@@Z
?UploadFileToServerUsingPost@HttpHelper@helpers@@SAHV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@0PA_W00PAV34@@Z
?UseXor@DirectoryHelper@helpers@@SAXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0PAV34@@Z
?ValidatePricemeterFiles@SetupHelper@helpers@@SA_NV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?ValidatePricemeterFiles@SetupHelper@helpers@@SA_NXZ
?ValidateSetUpFiles@SetupHelper@helpers@@SA_NXZ
?WriteToRegistry@RegistryHelper@helpers@@SA_NPAUHKEY__@@PB_WV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2PAVErrorData@@@Z
?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABV34@@Z
?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@KPAX@Z
?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVHttpRequestContent@2@@Z
?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@ABV34@@Z
?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@KPAX@Z
?_SendRequest_s@HttpHelper@helpers@@QAE_NPAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProgress@2@PAVHttpRequestContent@2@@Z
?__autoclassinit@LoggerHelper@helpers@@QAEXI@Z
?char2hex@HttpHelper@helpers@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@D@Z
?covertToMultByte@DirectoryHelper@helpers@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@4@@Z
?domain@HttpHelper@helpers@@2V?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@A
?getSuspentionTime@RegistryHelper@helpers@@SA_KXZ
?instance@LoggerHelper@helpers@@2PAV12@A
?urlencode@HttpHelper@helpers@@SA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV34@@Z
?write@LoggerHelper@helpers@@QAEXV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z
?write@LoggerHelper@helpers@@QAEXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z

Sections

.text
Size: 817KB - Virtual size: 816KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ZAISLVW
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.RBSCHZG
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TVDNKVH
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DWCJCGC
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AQPGIUN
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.axt
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bbb
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.beefdea
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 999KB - Virtual size: 998KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

25e6fcd25454c49ad9378093e3d5b9df

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

psapi

iphlpapi

winhttp

rpcrt4

urlmon

Exports

Exports

Sections

.text Size: 817KB - Virtual size: 816KB

.rdata Size: 169KB - Virtual size: 169KB

.data Size: 39KB - Virtual size: 48KB

.ZAISLVW Size: 512B - Virtual size: 4B

.RBSCHZG Size: 512B - Virtual size: 4B

.TVDNKVH Size: 512B - Virtual size: 4B

.DWCJCGC Size: 512B - Virtual size: 4B

.AQPGIUN Size: 512B - Virtual size: 4B

.axt Size: 512B - Virtual size: 4B

.bbb Size: 512B - Virtual size: 4B

.beefdea Size: 512B - Virtual size: 4B

.rsrc Size: 999KB - Virtual size: 998KB

.text
Size: 817KB - Virtual size: 816KB

.rdata
Size: 169KB - Virtual size: 169KB

.data
Size: 39KB - Virtual size: 48KB

.ZAISLVW
Size: 512B - Virtual size: 4B

.RBSCHZG
Size: 512B - Virtual size: 4B

.TVDNKVH
Size: 512B - Virtual size: 4B

.DWCJCGC
Size: 512B - Virtual size: 4B

.AQPGIUN
Size: 512B - Virtual size: 4B

.axt
Size: 512B - Virtual size: 4B

.bbb
Size: 512B - Virtual size: 4B

.beefdea
Size: 512B - Virtual size: 4B

.rsrc
Size: 999KB - Virtual size: 998KB