42fe71eca16fbecbb32249ae37750d17a220e6784c889060f9c37326b9a39a14

Sharing

Copy URL Twitter E-mail

General

Target

42fe71eca16fbecbb32249ae37750d17a220e6784c889060f9c37326b9a39a14
Size

26KB
MD5

8d8e93f0b506f3459176d88570e49a30
SHA1

a1310e32e6cdb05b563740bd334c66c6d21fb34f
SHA256

42fe71eca16fbecbb32249ae37750d17a220e6784c889060f9c37326b9a39a14
SHA512

46c2106c848df2e357f96b978374d2a03a1735bc9d49ace1189bf4786e0f8ab511be24b3b6ab3b7594d633210084e7b7bfdfc084cfad93bb8bc1ecae464e3837
SSDEEP

384:3u0FEGTzI9b93rHuZoHTF7herK9ds77nOog4ER98zAfnWiSOLJ+ORc9PAfU:3ulSz2uETdhWGs7SofER98HiSOL1RXfU

Score

N/A

Malware Config

Signatures

Files

42fe71eca16fbecbb32249ae37750d17a220e6784c889060f9c37326b9a39a14
.dll windows x86

af2c3cd43dddf7547de5bb16e4e64210

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WaitForSingleObject
ReadFile
SetFilePointer
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
Sleep
SetFileAttributesA
GetCommandLineA
GetSystemDirectoryA
DeleteFileA
CreateFileA
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
CreateMutexA
GetLastError
ExitProcess
IsBadReadPtr

user32

wsprintfA

msvcp60

??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

ws2_32

WSAStartup
send
recv
socket
inet_addr
htons
connect
gethostbyname
inet_ntoa
closesocket
WSACleanup

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

msvcrt

strrchr
_access
strcat
memset
strchr
strncpy
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
malloc
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcmp
strlen
strncmp
strstr
atoi
sprintf
strcpy

netapi32

Netbios

Exports

Exports

COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af2c3cd43dddf7547de5bb16e4e64210

Headers

File Characteristics

Imports

kernel32

user32

msvcp60

ws2_32

wininet

msvcrt

netapi32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 542KB

Shared Size: 512B - Virtual size: 4B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 542KB

Shared
Size: 512B - Virtual size: 4B

.reloc
Size: 3KB - Virtual size: 3KB