8d219a033b799a5298e57bf6b0be56e353b43724827eb09e40e2b80da36b9117

Sharing

Copy URL Twitter E-mail

General

Target

8d219a033b799a5298e57bf6b0be56e353b43724827eb09e40e2b80da36b9117
Size

436KB
MD5

c5c133bb73cd68c5ffb7e2c3bdf56fa0
SHA1

2e5328be14c370e93842ff75dd448ff0dc9fc805
SHA256

8d219a033b799a5298e57bf6b0be56e353b43724827eb09e40e2b80da36b9117
SHA512

24bda1e10f63e19c81b0ea4756f8aeda27163005470de2fa26de7bad48f7a6e96c1cb18d46892f3ca99c289db48f5224d82da9e100f053c80d6e92ab663e4016
SSDEEP

12288:ImZjU5FeitSoUozVSrMEH9qUdzgssoJ3gr7zJ:f+Uj1gm42gqQvzJ

Score

N/A

Malware Config

Signatures

Files

8d219a033b799a5298e57bf6b0be56e353b43724827eb09e40e2b80da36b9117
.dll windows x86

21d666335b4d9abeb34a6c151e84449f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CMP_Report_LogOn
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceAlias
CM_Test_Range_Available
CM_Query_Remove_SubTree
CM_Get_Sibling_Ex
CM_Free_Log_Conf_Ex

oleaut32

VarBstrFromDisp
SafeArrayPutElement
SafeArrayRedim
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VARIANT_UserMarshal
VarUI4FromR4
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetRecordInfo
SafeArrayGetUBound
VariantInit
VariantCopyInd
VariantCopy
VariantClear
VariantChangeType
SafeArrayPtrOfIndex

user32

CharNextA
DdeAccessData
EnumThreadWindows
LoadStringA
MessageBoxA
wsprintfA

wsock32

htons
ntohl
ntohs
WEP

kernel32

lstrlenA
lstrcpynA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SystemTimeToFileTime
SetThreadLocale
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetEvent
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ResetEvent
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
CloseHandle
CompareStringA
CreateEventA
CreateFileA
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FindClose
FindFirstFileA
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStringsA
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeW
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsValidLocale
LCMapStringA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

Addr2Line
GetGlobals
GetIndices
MemberDescr_Type
Method_ClearFreeList
SelfIter
destroy_struct
start_read_image
vGetFileA

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21d666335b4d9abeb34a6c151e84449f

Headers

File Characteristics

Imports

setupapi

oleaut32

user32

wsock32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 85KB - Virtual size: 85KB

.rdata Size: 250KB - Virtual size: 249KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 27KB - Virtual size: 27KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 85KB - Virtual size: 85KB

.rdata
Size: 250KB - Virtual size: 249KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 27KB - Virtual size: 27KB

.reloc
Size: 4KB - Virtual size: 4KB