254a72d6bb0eab8c2b2b5c0d27f8fbec90498b4ae1272e3c35f6835ed3837c5a

Sharing

Copy URL Twitter E-mail

General

Target

254a72d6bb0eab8c2b2b5c0d27f8fbec90498b4ae1272e3c35f6835ed3837c5a
Size

272KB
MD5

4f80199730b6c99466c2e09f69281b6d
SHA1

c69ca61cc6dec4cc26645f5d4b2abae4d27a83ac
SHA256

254a72d6bb0eab8c2b2b5c0d27f8fbec90498b4ae1272e3c35f6835ed3837c5a
SHA512

72d97dc0ac0488c8a0be990fa8ce4a42fd6b5f2cfb85eb02ce54a9286e18dd587dfc3e898df36f0c16f62c63a7da735b90342672ce6fc8e333ab9641bd1396b8
SSDEEP

3072:VwyCcScAdBh3ZOn/Aql8/is5M/rSbpYJroWtNbDZVMlz3Xpi2K3MfQaZpwIGG6ft:FSVrOn/U/AW+XtNrMhxOMfBpwIdC3h

Score

N/A

Malware Config

Signatures

Files

254a72d6bb0eab8c2b2b5c0d27f8fbec90498b4ae1272e3c35f6835ed3837c5a
.dll windows x86

6b5672f831027a039b08b1f6ba2807df

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle

kernel32

DeleteFileA
GetTickCount
GetLastError
LocalFree
GetModuleHandleA
GetTempPathA
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
CloseHandle
FreeLibrary
SetFileAttributesA
LoadLibraryA
GetProcAddress
Sleep
CreateDirectoryA
SetEndOfFile
HeapAlloc
HeapFree
SetFilePointer
ReadFile
WriteFile
RtlUnwind
RaiseException
GetFileType
ExitProcess
ExitThread
ResumeThread
CreateThread
GetCurrentThreadId
GetCommandLineA
GetVersionExA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
SetStdHandle
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSize
InitializeCriticalSection
InterlockedExchange
VirtualQuery
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
FlushFileBuffers
MultiByteToWideChar
VirtualProtect
GetSystemInfo

user32

GetWindowLongA
DefWindowProcA
SetTimer
InvalidateRect
BeginPaint
GetClientRect
FillRect
EndPaint
SetWindowLongA

gdi32

SetBkMode
CreateSolidBrush
GetTextExtentPoint32A
TextOutA
SetTextColor

advapi32

RegQueryValueExA
RegCloseKey
CryptAcquireContextA
CryptImportKey
CryptDestroyKey
CryptReleaseContext
RegOpenKeyExA

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_Shutdown
_DllMain@12

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6b5672f831027a039b08b1f6ba2807df

Headers

File Characteristics

Imports

wininet

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 176KB - Virtual size: 181KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 176KB - Virtual size: 181KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 5KB