88c6d04c95590638d1203ea68851e69d05ac984bebb48d2928bd98bbe8e659e1

Sharing

Copy URL Twitter E-mail

General

Target

88c6d04c95590638d1203ea68851e69d05ac984bebb48d2928bd98bbe8e659e1
Size

829KB
MD5

3f5870eaa80f5deab6ed3a6000e9f34e
SHA1

d4e88ea302c67482335e957153371b2978730817
SHA256

88c6d04c95590638d1203ea68851e69d05ac984bebb48d2928bd98bbe8e659e1
SHA512

69cdcc3231b18558864850bff1a8403781c109ca46fd14c82e05fa9c1cf45086ac3e0590a9478d54a5ea59237fa5dde5514b817f970d43ef590fc389e00ac06a
SSDEEP

24576:aJDUr4EKMXsk8Q8v6bdO0WbAwNat1qH8D7lwH:ausEDXyQ8SbdO0YNaXnwH

Score

N/A

Malware Config

Signatures

Files

88c6d04c95590638d1203ea68851e69d05ac984bebb48d2928bd98bbe8e659e1
.exe windows x86

81584205326fc39a47573641e69a5037

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
OpenEventW
GetCurrentThread
RemoveDirectoryA
SetFileShortNameA
GetPrivateProfileIntW
CloseHandle
DeviceIoControl
GetLocaleInfoA
GetModuleHandleA
GetFileAttributesW
LoadLibraryW
GlobalGetAtomNameA
LocalLock
RaiseException
WritePrivateProfileStringA

ws2_32

shutdown
WSAStartup
WSASocketA
WSAAsyncSelect
WSAAsyncGetHostByName
WSASetServiceA
WSACancelAsyncRequest
WSApSetPostRoutine
WSAGetServiceClassInfoA
getprotobyname

winmm

midiOutPrepareHeader
midiStreamProperty
midiOutShortMsg
SendDriverMessage
waveOutGetPosition
mixerGetLineControlsW
timeEndPeriod
wod32Message
sndPlaySoundA
mod32Message
midiInGetErrorTextA
joyGetDevCapsW
mixerGetControlDetailsW
waveOutSetVolume
midiInClose
midiInStop
mmioAscend
mciSetYieldProc
waveOutGetPitch
midiStreamClose
midiOutUnprepareHeader
waveOutGetVolume
aux32Message
midiInGetID
mmioClose
midiOutGetErrorTextW

netapi32

I_BrowserQueryOtherDomains
NetpwNameCanonicalize
NetGetDisplayInformationIndex
DsGetForestTrustInformationW
DsGetDcNameW
NetDfsRemoveFtRootForced
NetDfsManagerInitialize
NetFileEnum
NetLocalGroupGetMembers
NetpGetConfigTStrArray
NetServiceInstall
NetpHexDump
NetGetAnyDCName
NetWkstaUserGetInfo
I_NetGetDCList
DsRoleGetDcOperationProgress
NetLocalGroupSetMembers
NetUseEnum
NetReplExportDirGetInfo
DsGetDcSiteCoverageW
DsRoleGetDcOperationResults
NetUserGetGroups
NetDfsAddStdRootForced
DsRoleDemoteDc
I_NetServerGetTrustInfo
NetScheduleJobAdd

mpr

WNetAddConnection2A
WNetConnectionDialog1W
WNetGetConnectionW
WNetGetUserA
WNetAddConnection3W
WNetSetLastErrorW
WNetCancelConnectionA
WNetSupportGlobalEnum
WNetUseConnectionA
WNetGetUserW
WNetGetDirectoryTypeW
WNetGetSearchDialog
WNetDisconnectDialog
WNetLogonNotify
WNetAddConnection3A
WNetDisconnectDialog1W
WNetConnectionDialog2
WNetPropertyDialogA
WNetUseConnectionW
WNetGetDirectoryTypeA
MultinetGetConnectionPerformanceW
WNetCancelConnection2W
I_MprSaveConn
WNetOpenEnumW
WNetGetHomeDirectoryW
MultinetGetErrorTextW
WNetGetProviderTypeW

crypt32

I_CryptGetOssGlobal
CryptVerifyMessageSignature
CertRDNValueToStrA
CertVerifyTimeValidity
CryptGetDefaultOIDFunctionAddress
CryptDecodeObjectEx
CertFindCTLInStore
RegCreateKeyExU
CertRegisterSystemStore
CertEnumCRLContextProperties
I_CryptDisableLruOfEntries
CertGetValidUsages
CertOIDToAlgId
CryptSIPGetSignedDataMsg
CertAddSerializedElementToStore

pdh

PdhGetRawCounterValue
PdhGetDllVersion
PdhGetCounterTimeBase
PdhCreateSQLTablesA
PdhTranslate009CounterW
PdhVbAddCounter
PdhGetDefaultPerfCounterA
PdhEnumObjectsA
PdhGetCounterInfoA
PdhGetFormattedCounterArrayA
PdhVbIsGoodStatus
PdhSelectDataSourceA
PdhRemoveCounter
PdhExpandCounterPathA
PdhEnumObjectItemsA
PdhVbGetCounterPathFromList
PdhListLogFileHeaderW
PdhLookupPerfNameByIndexW
PdhBrowseCountersHA
PdhGetLogFileSize
PdhGetDefaultPerfObjectHA
PdhGetRawCounterArrayW

ir41_qc

DllMain
CompressBegin
CompressEnd
CompressFramesInfo
AllocInstanceData
FreeInstanceData
SetScalability
Compress

Sections

.text
Size: 366KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 157KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

81584205326fc39a47573641e69a5037

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

winmm

netapi32

mpr

crypt32

pdh

ir41_qc

Sections

.text Size: 366KB - Virtual size: 365KB

.rdata Size: 131KB - Virtual size: 130KB

.data Size: 157KB - Virtual size: 1.6MB

.rsrc Size: 173KB - Virtual size: 172KB

.reloc Size: 1024B - Virtual size: 824B

.text
Size: 366KB - Virtual size: 365KB

.rdata
Size: 131KB - Virtual size: 130KB

.data
Size: 157KB - Virtual size: 1.6MB

.rsrc
Size: 173KB - Virtual size: 172KB

.reloc
Size: 1024B - Virtual size: 824B