5343dafb42bac633cb813d29d6e41011f84524e97effb74c2965314a67f9c2eb

Sharing

Copy URL

Twitter E-mail

General

Target

5343dafb42bac633cb813d29d6e41011f84524e97effb74c2965314a67f9c2eb
Size

92KB
MD5

a6c1b4fd8f23b1163d02365bfd355eca
SHA1

279b4d64791ee9d75413095ea97f5be47f92b787
SHA256

5343dafb42bac633cb813d29d6e41011f84524e97effb74c2965314a67f9c2eb
SHA512

78870fdf43b45a811fdaf378af756f67879beb0ed7897f1bcee70ec0ecad76e67748e8f91b8a679fe4b5fa6e28b218c72ff362bbf3a0a99132ca7b4a6dd6ec81
SSDEEP

1536:ldn6kY9yUvQOV9NKwxTxca18EPDrCQHMGd254uMgDJpoxNSQjx:D29yUv/Vpcc/7FZgDJpoxll

Score

N/A

Malware Config

Signatures

Files

5343dafb42bac633cb813d29d6e41011f84524e97effb74c2965314a67f9c2eb
.dll windows x86

3131a395b26f76f5744ae4c36f613aea

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA
SetCursor
LoadStringA
SetFocus
GetDlgItem
SetWindowTextA
GetWindowTextA
LoadCursorA
DialogBoxParamA
SendDlgItemMessageA
EndDialog

comdlg32

GetSaveFileNameA

shell32

ShellExecuteA

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

wsock32

closesocket
WSAGetLastError
gethostbyname
gethostname
socket
htons
connect
ioctlsocket
WSACleanup
send
recv
WSAStartup

kernel32

GetCurrentThreadId
GetLastError
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
RaiseException
ReadFile
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
lstrcpyA
lstrlenA
FreeLibrary
GetModuleFileNameA
LoadLibraryA
GetModuleHandleA
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
SetHandleCount
GetCurrentProcess
LeaveCriticalSection
ExitProcess
VirtualAlloc
HeapReAlloc
IsBadWritePtr
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
CreateFileA
CloseHandle
FlushFileBuffers
WriteFile
TerminateProcess
IsBadCodePtr
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetProcAddress
SetFilePointer
SetUnhandledExceptionFilter
IsBadReadPtr

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA

Exports

Exports

AskSvrDlgProc
BugReportReg
CheckPrevVers
FWRegisterDlgProc
FreewareReg
GetFwReg
ReportDlgProc
UpdateFwReg

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3131a395b26f76f5744ae4c36f613aea

Headers

File Characteristics

Imports

user32

comdlg32

shell32

version

wsock32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 11KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 11KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 8KB - Virtual size: 4KB