e1d02e00d20bad811fc071dc2dc50c343917a2cc3d48a1a7d91e6fc4c0cfd8e7

Sharing

Copy URL Twitter E-mail

General

Target

e1d02e00d20bad811fc071dc2dc50c343917a2cc3d48a1a7d91e6fc4c0cfd8e7
Size

140KB
MD5

1e7d781b5e04aae7b4b9496ca244ddaa
SHA1

45fd6fbf1db6778ad6309a24a7f76c2c20c08506
SHA256

e1d02e00d20bad811fc071dc2dc50c343917a2cc3d48a1a7d91e6fc4c0cfd8e7
SHA512

e187e979849a063dd283e6b9b05aa7853b09d672cfe8e76506f334cd33b7c5901838dad16f5d53a2e2a3740395a000eac60dc3999f506beebf84244555b582c8
SSDEEP

3072:LNjMM+fUck04mNSK/JpHLR6lGxDVrYMw6szdpyPdEpUN:LN4M+fUQHhFVhw6cp

Score

N/A

Malware Config

Signatures

Files

e1d02e00d20bad811fc071dc2dc50c343917a2cc3d48a1a7d91e6fc4c0cfd8e7
.dll windows x86

b27b29a8178fc4b4f8683da95133d3bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_putenv
_initterm
_adjust_fdiv
_onexit
strchr
__dllonexit
_purecall
_strcmpi
??2@YAPAXI@Z
_stricmp
??3@YAXPAX@Z
free
malloc
strrchr
strstr
strncpy
sprintf
_ftol
rand
realloc

ole32

CoTaskMemAlloc
CoTaskMemFree
RevokeDragDrop
OleInitialize
CoCreateInstance
CoFreeUnusedLibraries

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

InterlockedIncrement
IsBadReadPtr
WaitForSingleObject
GetEnvironmentVariableA
GetModuleFileNameA
MulDiv
MultiByteToWideChar
GetProcAddress
WideCharToMultiByte
InterlockedDecrement
lstrlenW
FreeLibrary
LoadLibraryA

user32

LoadStringA
MessageBoxA
GetSystemMetrics
CharNextA
PostMessageA
SetRect
GetDC
ReleaseDC
CharPrevA
SetWindowLongA
SetWindowPos
CallWindowProcA
DefWindowProcA
GetClientRect
CopyRect
IsWindow
GetWindow
CharLowerA
PostThreadMessageA
ShowWindow
GetClassNameA
EnumChildWindows

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

gdi32

GetDeviceCaps
DPtoLP
SetMapMode
GetMapMode
LPtoDP

oleaut32

SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SafeArrayAccessData
VariantClear

Exports

Exports

CreateBrowserInstance
GetIEVersion
RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b27b29a8178fc4b4f8683da95133d3bf

Headers

File Characteristics

Imports

pncrt

ole32

version

kernel32

user32

advapi32

gdi32

oleaut32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

.rmnet
Size: 60KB - Virtual size: 60KB