2a724dc75701081ffa781682370e95178d20d128f9b714db890dfdfc86086385

Sharing

Copy URL Twitter E-mail

General

Target

2a724dc75701081ffa781682370e95178d20d128f9b714db890dfdfc86086385
Size

2.0MB
MD5

03e7c25e9894d97040df6a1480fec1d2
SHA1

e18e1d5a753c13632437655ec3ee31b82c715dcf
SHA256

2a724dc75701081ffa781682370e95178d20d128f9b714db890dfdfc86086385
SHA512

051828837ad098bfc49eec549ad738de1751f03efb22182e0618b5cfecb55074dbd9b6694b292ab7b703e84cf32990d1caf3e46e37fec080dc31a30baad7094e
SSDEEP

24576:/58oPUSoU4uGvRa0OP+wEWat9EschjclWTKLKLYbS4KjK5uEyxaZd/112BOcc5Al:/58vxvR4WwErvS41Ty4Dr4Occ5ARDL

Score

N/A

Malware Config

Signatures

Files

2a724dc75701081ffa781682370e95178d20d128f9b714db890dfdfc86086385
.dll windows x86

1ad5047c48c0dcc493a548d9e68c277c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSARecvFrom
WSASendTo
shutdown
inet_ntoa
ntohs
WSAStringToAddressA
htons
inet_addr
getaddrinfo
select
ioctlsocket
WSASocketA
listen
getsockname
setsockopt
connect
bind
accept
freeaddrinfo
__WSAFDIsSet
WSARecv
WSAAddressToStringA
WSASend
closesocket
WSACleanup
getpeername
getsockopt
WSAGetLastError
WSAStartup
htonl
ntohl
WSASetLastError

advapi32

CryptGenRandom
CryptReleaseContext
CryptAcquireContextA

kernel32

FindNextFileW
GetFileAttributesW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
VirtualQuery
GetConsoleOutputCP
WriteConsoleA
SetEndOfFile
GetLocaleInfoW
SetUnhandledExceptionFilter
HeapFree
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
TlsGetValue
TlsSetValue
InterlockedCompareExchange
TlsFree
PostQueuedCompletionStatus
HeapAlloc
GetLastError
TlsAlloc
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
CreateIoCompletionPort
CloseHandle
InterlockedExchange
Sleep
SleepEx
SetEvent
CreateEventA
WaitForSingleObject
GetQueuedCompletionStatus
InterlockedDecrement
InterlockedExchangeAdd
SetLastError
GetCurrentThreadId
QueueUserAPC
TerminateThread
GetSystemTimeAsFileTime
MultiByteToWideChar
WideCharToMultiByte
SetThreadPriority
GetCurrentThread
ReleaseSemaphore
CreateSemaphoreA
DuplicateHandle
GetCurrentProcess
GetTickCount
LocalFree
FormatMessageA
QueryPerformanceCounter
WaitForMultipleObjects
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExA
CreateFileW
ReadFile
CancelIo
IsValidLocale
EnumSystemLocalesA
InitializeCriticalSection
ResetEvent
ResumeThread
SystemTimeToFileTime
SetWaitableTimer
CreateWaitableTimerA
TerminateProcess
UnhandledExceptionFilter
GetLocaleInfoA
IsDebuggerPresent
RtlUnwind
RaiseException
WriteConsoleW
GetFileType
GetStdHandle
GetModuleFileNameW
ExitThread
CreateThread
CreateDirectoryW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
GetModuleHandleW
ExitProcess
GetCPInfo
GetCommandLineA
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeW
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
GetModuleHandleA
WriteFile
GetModuleFileNameA
HeapSize
GetFullPathNameW
GetCurrentDirectoryA
CreateFileA
SetStdHandle
SetHandleCount
GetStartupInfoA
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
LoadLibraryA
GetStringTypeA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
DebugBreak
GetUserDefaultLCID

winmm

timeGetTime

Exports

Exports

celt_decode
celt_decode_float
celt_decoder_create
celt_decoder_create_custom
celt_decoder_ctl
celt_decoder_destroy
celt_decoder_get_size
celt_decoder_get_size_custom
celt_decoder_init
celt_decoder_init_custom
celt_encode
celt_encode_float
celt_encoder_create
celt_encoder_create_custom
celt_encoder_ctl
celt_encoder_destroy
celt_encoder_get_size
celt_encoder_get_size_custom
celt_encoder_init
celt_encoder_init_custom
celt_mode_create
celt_mode_destroy
celt_mode_info
celt_strerror
ts3client_acquireCustomPlaybackData
ts3client_activateCaptureDevice
ts3client_allowWhispersFrom
ts3client_cancelRequestSlotsFromProvisioningServer
ts3client_channelset3DAttributes
ts3client_cleanUpConnectionInfo
ts3client_closeCaptureDevice
ts3client_closePlaybackDevice
ts3client_closeWaveFileHandle
ts3client_createIdentity
ts3client_destroyClientLib
ts3client_destroyServerConnectionHandler
ts3client_flushChannelCreation
ts3client_flushChannelUpdates
ts3client_flushClientSelfUpdates
ts3client_freeMemory
ts3client_getCaptureDeviceList
ts3client_getCaptureModeList
ts3client_getChannelClientList
ts3client_getChannelIDFromChannelNames
ts3client_getChannelList
ts3client_getChannelOfClient
ts3client_getChannelVariableAsInt
ts3client_getChannelVariableAsString
ts3client_getChannelVariableAsUInt64
ts3client_getClientID
ts3client_getClientLibVersion
ts3client_getClientLibVersionNumber
ts3client_getClientList
ts3client_getClientSelfVariableAsInt
ts3client_getClientSelfVariableAsString
ts3client_getClientVariableAsInt
ts3client_getClientVariableAsString
ts3client_getClientVariableAsUInt64
ts3client_getConnectionStatus
ts3client_getConnectionVariableAsDouble
ts3client_getConnectionVariableAsString
ts3client_getConnectionVariableAsUInt64
ts3client_getCurrentCaptureDeviceName
ts3client_getCurrentCaptureMode
ts3client_getCurrentPlayBackMode
ts3client_getCurrentPlaybackDeviceName
ts3client_getDefaultCaptureDevice
ts3client_getDefaultCaptureMode
ts3client_getDefaultPlayBackMode
ts3client_getDefaultPlaybackDevice
ts3client_getEncodeConfigValue
ts3client_getErrorMessage
ts3client_getParentChannelOfChannel
ts3client_getPlaybackConfigValueAsFloat
ts3client_getPlaybackDeviceList
ts3client_getPlaybackModeList
ts3client_getPreProcessorConfigValue
ts3client_getPreProcessorInfoValueFloat
ts3client_getServerConnectionHandlerList
ts3client_getServerConnectionVariableAsFloat
ts3client_getServerConnectionVariableAsUInt64
ts3client_getServerVariableAsInt
ts3client_getServerVariableAsString
ts3client_getServerVariableAsUInt64
ts3client_initClientLib
ts3client_initiateGracefulPlaybackShutdown
ts3client_logMessage
ts3client_openCaptureDevice
ts3client_openPlaybackDevice
ts3client_pauseWaveFileHandle
ts3client_playWaveFile
ts3client_playWaveFileHandle
ts3client_processCustomCaptureData
ts3client_registerCustomDevice
ts3client_removeFromAllowedWhispersFrom
ts3client_requestChannelDelete
ts3client_requestChannelDescription
ts3client_requestChannelMove
ts3client_requestChannelSubscribe
ts3client_requestChannelSubscribeAll
ts3client_requestChannelUnsubscribe
ts3client_requestChannelUnsubscribeAll
ts3client_requestClientDBIDfromUID
ts3client_requestClientIDs
ts3client_requestClientKickFromChannel
ts3client_requestClientKickFromServer
ts3client_requestClientMove
ts3client_requestClientSetWhisperList
ts3client_requestClientVariables
ts3client_requestConnectionInfo
ts3client_requestMuteClients
ts3client_requestSendChannelTextMsg
ts3client_requestSendPrivateTextMsg
ts3client_requestSendServerTextMsg
ts3client_requestServerConnectionInfo
ts3client_requestServerVariables
ts3client_requestSlotsFromProvisioningServer
ts3client_requestUnmuteClients
ts3client_set3DWaveAttributes
ts3client_setChannelVariableAsInt
ts3client_setChannelVariableAsString
ts3client_setChannelVariableAsUInt64
ts3client_setClientSelfVariableAsInt
ts3client_setClientSelfVariableAsString
ts3client_setClientVolumeModifier
ts3client_setLocalTestMode
ts3client_setLogVerbosity
ts3client_setPlaybackConfigValue
ts3client_setPreProcessorConfigValue
ts3client_spawnNewServerConnectionHandler
ts3client_startConnection
ts3client_startConnectionEx
ts3client_startConnectionWithProvisioningKey
ts3client_startVoiceRecording
ts3client_stopConnection
ts3client_stopVoiceRecording
ts3client_systemset3DListenerAttributes
ts3client_systemset3DSettings
ts3client_unregisterCustomDevice

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 331KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ad5047c48c0dcc493a548d9e68c277c

Headers

File Characteristics

Imports

ws2_32

advapi32

kernel32

winmm

Exports

Exports

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 331KB - Virtual size: 330KB

.data Size: 50KB - Virtual size: 99KB

.tls Size: 512B - Virtual size: 2B

.reloc Size: 96KB - Virtual size: 95KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 331KB - Virtual size: 330KB

.data
Size: 50KB - Virtual size: 99KB

.tls
Size: 512B - Virtual size: 2B

.reloc
Size: 96KB - Virtual size: 95KB

.rmnet
Size: 56KB - Virtual size: 60KB