b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6

Sharing

Copy URL Twitter E-mail

General

Target

b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6
Size

75KB
MD5

949a552c128ca891ef292cda1e06f508
SHA1

f2221282981b179a284e2586f2d5a4926427258e
SHA256

b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6
SHA512

4fd3e75d099f3786b464ba98575acae336319d1d67d6ccbfc64bb25826b90b17f4db628aeec245500fff35d4bd3215f428aff7b1f16a0af70ba55a5117eb3a48
SSDEEP

1536:HvVV2xwGh0ia542fJ6ZkcLBaJo/Fg6DIOlIOjKnToIf740OKWl:mxLhSK2fJ0aJo/K6lvSTBf73OKWl

Score

N/A

Malware Config

Signatures

Files

b8c1fdf95ca69d28553f7169795d41d7c9c86d1045758a3c3b8544265b73b7c6
.dll windows x86

a377666c22ad3c4ff5ef9d00c34bf528

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeGetTime

wsock32

getpeername
ioctlsocket
select
send
closesocket
socket
recv
getsockname
setsockopt
connect
WSAStartup
htons

kernel32

GetLastError
SetLastError
GetModuleFileNameA
GetComputerNameA
GlobalMemoryStatus
GetSystemInfo
GetCurrentThreadId
GetVersionExA
CloseHandle
QueryPerformanceCounter
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CreateProcessA
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
InterlockedCompareExchange
InterlockedExchange
Sleep
FreeConsole

user32

SetProcessWindowStation
OpenDesktopA
GetThreadDesktop
GetProcessWindowStation
CloseDesktop
OpenWindowStationA
SwitchDesktop
SetThreadDesktop
GetSystemMetrics
FindWindowA
GetDC

gdi32

BitBlt
GetDIBits
CreateDCA
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC

advapi32

GetUserNameA
ChangeServiceConfigA
RegCloseKey
OpenSCManagerA
SetServiceStatus
RegCreateKeyA
CreateServiceA
RegQueryValueExA
RegisterServiceCtrlHandlerA
DeleteService
CloseServiceHandle
OpenServiceA
RegOpenKeyExA
RegSetValueExA

msvcr90

_stricmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_CxxThrowException
strncat
strchr
strncpy
rand
srand
wcstombs
_time64
sprintf
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABV01@@Z
??_U@YAPAXI@Z
_invalid_parameter_noinfo
fopen
??_V@YAXPAX@Z
fwrite
fclose
free
malloc
perror
printf
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
__CxxFrameHandler3
memset
memcpy

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

Exports

Exports

InstallService
RundllInstallA
RundllUninstallA
ServiceMain
UninstallService

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a377666c22ad3c4ff5ef9d00c34bf528

Headers

DLL Characteristics

File Characteristics

Imports

winmm

wsock32

kernel32

user32

gdi32

advapi32

msvcr90

msvcp90

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 688B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 688B

.reloc
Size: 5KB - Virtual size: 5KB