8efe2351240bd68159a787bdac57b924110fa8e510c0b3e0cbec662cc1690bc4

Sharing

Copy URL Twitter E-mail

General

Target

8efe2351240bd68159a787bdac57b924110fa8e510c0b3e0cbec662cc1690bc4
Size

26KB
MD5

3a22079948740e5b4e83b11c037bd3fe
SHA1

8bc63a3f0b5fd267c37b41183bf5170038f0f47e
SHA256

8efe2351240bd68159a787bdac57b924110fa8e510c0b3e0cbec662cc1690bc4
SHA512

8a2bccfc2ec55b63bc82caaf3025cd631fbffa7a16470f80799917c27ca7fd689d12ca5e427d751b1d44946a6aa65e2749c6d0ccfaf2979fe4e3c7cc5b42b1f8
SSDEEP

384:3S0FEGTzI9b93rHuZoHTF7herK9ds77nOog4ER98zAfnWiSOLJ+ORc9PAfU:3SlSz2uETdhWGs7SofER98HiSOL1RXfU

Score

N/A

Malware Config

Signatures

Files

8efe2351240bd68159a787bdac57b924110fa8e510c0b3e0cbec662cc1690bc4
.dll windows x86

af2c3cd43dddf7547de5bb16e4e64210

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
WaitForSingleObject
ReadFile
SetFilePointer
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
Sleep
SetFileAttributesA
GetCommandLineA
GetSystemDirectoryA
DeleteFileA
CreateFileA
CloseHandle
LoadLibraryA
GetProcAddress
GlobalAlloc
VirtualProtect
CreateMutexA
GetLastError
ExitProcess
IsBadReadPtr

user32

wsprintfA

msvcp60

??0_Lockit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1_Lockit@std@@QAE@XZ

ws2_32

WSAStartup
send
recv
socket
inet_addr
htons
connect
gethostbyname
inet_ntoa
closesocket
WSACleanup

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

msvcrt

strrchr
_access
strcat
memset
strchr
strncpy
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr
_strrev
malloc
??2@YAPAXI@Z
memcpy
__CxxFrameHandler
strcmp
strlen
strncmp
strstr
atoi
sprintf
strcpy

netapi32

Netbios

Exports

Exports

COMResModuleInstance
DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
ServerMain
modMessage
modmCallback

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af2c3cd43dddf7547de5bb16e4e64210

Headers

File Characteristics

Imports

kernel32

user32

msvcp60

ws2_32

wininet

msvcrt

netapi32

Exports

Exports

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 2KB - Virtual size: 542KB

Shared Size: 512B - Virtual size: 4B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 2KB - Virtual size: 542KB

Shared
Size: 512B - Virtual size: 4B

.reloc
Size: 3KB - Virtual size: 3KB