0cb7380fef176a15e041f6c7e2d3d9a623f4b0a5a7033203f103f480586acebd

Sharing

Copy URL Twitter E-mail

General

Target

0cb7380fef176a15e041f6c7e2d3d9a623f4b0a5a7033203f103f480586acebd
Size

216KB
MD5

353af919584f222961c0c0071b7c221c
SHA1

ab334f804093cf2e7106931baa4fcbf82508bbc2
SHA256

0cb7380fef176a15e041f6c7e2d3d9a623f4b0a5a7033203f103f480586acebd
SHA512

39f482dd2b5407a008b2aac70e5a5ea8c94ef1194b0c39a001854c284e6d5abaf30f0e29e399c50f6bc1c63ad2a74c4c5764cf998c1fbfb46b7e3ddc9ac93723
SSDEEP

3072:utzGeOyW/l+99uGJcHCHUqlmp99EGA90ktc1o2ohw1d2tbnHBHM/:utYy8k7ciHUqlAnEGAektc1osa

Score

N/A

Malware Config

Signatures

Files

0cb7380fef176a15e041f6c7e2d3d9a623f4b0a5a7033203f103f480586acebd
.dll windows x86

52167e7f23aefd881e7bc540109e448e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetModuleFileNameA
InitializeCriticalSection
CreateEventA
WaitForSingleObject
SetEvent
CloseHandle
DeleteCriticalSection
GetCurrentThreadId
GetLocalTime
WriteProfileStringA
Sleep
GetComputerNameA
TerminateThread
InterlockedDecrement
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
CreateProcessA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
CreateFileW
ReadFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileA
GetLocaleInfoW
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
FlushFileBuffers
SetFilePointer
GetStartupInfoA
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
InterlockedIncrement
GetLastError
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
LocalFree
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
FindNextFileA
FindClose
DeleteFileA
GetProcAddress
GetModuleHandleA
ExitProcess
ExitThread
ResumeThread
CreateThread
MoveFileA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapSize
WriteFile
GetStdHandle
LoadLibraryA
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA

ole32

CLSIDFromString
CoCreateGuid

oleaut32

VariantClear
SystemTimeToVariantTime
SysFreeString
VariantTimeToSystemTime
SysAllocString

ws2_32

recvfrom
sendto
WSAIoctl
bind
recv
ntohs
send
WSACreateEvent
closesocket
connect
htons
socket
ntohl
htonl
WSACleanup
WSAStartup
WSACloseEvent
WSAEventSelect
WSAGetLastError
WSAWaitForMultipleEvents
WSASetLastError
WSAResetEvent
WSAEnumNetworkEvents
inet_addr
setsockopt

Exports

Exports

AddTime
Auth
ChangePassword
Decrypt
DeductHour
DeductPoint
Encrypt
GetBulletin
GetCode
GetCurrTime
GetData
GetDownloadLen
GetProductData
GetProductDataSize
GetTotalLen
GetUserType
GetValidity
GetVer
Initialize
IsConnected
IsValid
LeaveMsg
PutData
Release
Unbind
Update
UserAuth
UserRegister

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

52167e7f23aefd881e7bc540109e448e

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 8KB - Virtual size: 15KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 8KB - Virtual size: 15KB

.reloc
Size: 12KB - Virtual size: 10KB