45730d187480d9302b9756519ee2b5acdfaa4c00d67a87d3b55ac77eb023cbf7

Sharing

Copy URL

Twitter E-mail

General

Target

45730d187480d9302b9756519ee2b5acdfaa4c00d67a87d3b55ac77eb023cbf7
Size

188KB
MD5

c9917adcd1c57d3c8d5362c33f5318a0
SHA1

7e08caea7e87ebf770a0ec2e9a8def61a8fbfb30
SHA256

45730d187480d9302b9756519ee2b5acdfaa4c00d67a87d3b55ac77eb023cbf7
SHA512

fbb390f7bf7d207280c254d03c71f026f5d3c75ae75aed8019a906f076798cd8568a2c12ce93aaa2c7aa29b6065f2743ae84edc79b506f70bd2ce46c1b9c3264
SSDEEP

3072:k8Fed+VgklO30z9BMcN3rXi9TBftdwRrPvWYIEOCIQ:bYMVgkuwBFNbS9TBldwRrPvZI

Score

N/A

Malware Config

Signatures

Files

45730d187480d9302b9756519ee2b5acdfaa4c00d67a87d3b55ac77eb023cbf7
.dll regsvr32 windows x86

ec3bd6137cca2eb1024acf4ad6287cd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
SendMessageA
CreateWindowExA
SetRect

kernel32

GetTickCount
WinExec
GetProcAddress
LoadLibraryA
lstrcpyA

msvcrt

_strrev
_ftol
_itoa
_initterm
??1type_info@@UAE@XZ
ceil
_beginthreadex
strstr
wcsstr
time
localtime
strftime
wcstombs
_ultoa
_errno
atoi
sprintf
memmove
??3@YAXPAX@Z
strncmp
strncpy
strrchr
_except_handler3
free
malloc
strchr
_CxxThrowException
??2@YAPAXI@Z
_strcmpi
__CxxFrameHandler
_adjust_fdiv
wcscpy
_strnicmp

ws2_32

gethostname
__WSAFDIsSet
recvfrom
sendto
bind
getsockname
ntohs
inet_addr
inet_ntoa
send
closesocket
recv
select
socket
htons
connect
setsockopt
WSACleanup
WSAStartup
gethostbyname

msvcp60

?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Xran@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

gdi32

BitBlt

msvcirt

??1ofstream@@UAE@XZ
??0fstream@@QAE@XZ
?open@fstream@@QAEXPBDHH@Z
?read@istream@@QAEAAV1@PADH@Z
?close@fstream@@QAEXXZ
??1fstream@@UAE@XZ
??_Dfstream@@QAEXXZ
??0ofstream@@QAE@XZ
?openprot@filebuf@@2HB
?open@ofstream@@QAEXPBDHH@Z
??_Dofstream@@QAEXXZ
??1ios@@UAE@XZ
?close@ofstream@@QAEXXZ
?write@ostream@@QAEAAV1@PBDH@Z

Exports

Exports

BeginUpdate2
ConnectionAccept
ConnectionClose
ConnectionInitAsync
ConnectionListen
ConnectionObjectSize
ConnectionPeek
ConnectionRead
ConnectionReadAsync
ConnectionVer
ConnectionWrite
ConnectionWriteAsync
ConnectionWriteStatus
CreateMxPsObj
CreateMxPwObj
CreateMxSkObj
DeleteMxPsObj
DeleteMxPwObj
DeleteMxSkObj
Detoured
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
EnterThisPlease
FreeUnzipBuf
GetDllVersionA
GetGameZipPtr
GetModuleVersion
GetProductVersion
InstallCrashReport
Main
PrepareUnzipFile
QGMessageBox
QGMessageBoxA
QGMessageBoxB
QGMessageBoxC
QGMessageBoxD
QGMessageBoxE
QGMessageBoxEx
QGMessageBoxURLWithClick
QGShowGIF
QQExceptionFilter
RD_XXXX
SetHTTPControl
SetProperty
SetZipLevel
SoDAShareCommitFile
SoDAShareEditID3
SoDAShareFinish
SoDAShareGetIPCPort
SoDAShareSetID3
SoDAShareSetID3Path
SoDAShareSetRegPath
SoDAShareSetUserID
SoDAShareStart
StartRouter
UnZip
UnZipEx
UnZipFile
VisCurTime_
VisDraw_
VisFileName_
VisFree_
VisGetProperty_
VisInit_
VisSetFormat_
VisSetProperty_
VisTotalTime_
ZipFolder
ZipFolderEx
_main@4
comdl2
comdl3
hime
mp_dc
mp_gt
mp_gv
mp_ms
mp_pf
mp_pl
mp_ps
mp_rd
run

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ec3bd6137cca2eb1024acf4ad6287cd1

Headers

File Characteristics

Imports

user32

kernel32

msvcrt

ws2_32

msvcp60

gdi32

msvcirt

Exports

Exports

Sections

.text Size: 118KB - Virtual size: 118KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 18KB - Virtual size: 21KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 118KB - Virtual size: 118KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 18KB - Virtual size: 21KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 9KB - Virtual size: 8KB