536e3560d5c68e3a94dbb74dc38ec116629b6da24136f938c7eb094bad6dfa54

Sharing

Copy URL Twitter E-mail

General

Target

536e3560d5c68e3a94dbb74dc38ec116629b6da24136f938c7eb094bad6dfa54
Size

38KB
MD5

55bdd234b150b9629a96eb8585b006da
SHA1

b7775c08665abe878dc4f04eaf473995945bff17
SHA256

536e3560d5c68e3a94dbb74dc38ec116629b6da24136f938c7eb094bad6dfa54
SHA512

25b3200384b0b40cc18b5831cdf3eb8cd55c0f9765292d678925c2bb3044cf790d25bd9bfdd10ac3e73a5e8895a127564478669a2890887092a1376d078fe985
SSDEEP

768:ZaAoWnFB+e9gd7IfBxHm6Cstyy8JdmxwtmELhAvwPV9qk8Pq3dNgs:T9XC1IZxIs4y8JdmitVFPV9/8Pq3dms

Score

N/A

Malware Config

Signatures

Files

536e3560d5c68e3a94dbb74dc38ec116629b6da24136f938c7eb094bad6dfa54
.dll windows x86

49174119cb589909ba2abe508d0112a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetLastError
GetDiskFreeSpaceW
GetDiskFreeSpaceExW
GetDriveTypeW
SetErrorMode
FindNextFileW
CreateProcessW
VirtualAlloc
CreateProcessA
lstrcatA
GetComputerNameW
GetProcAddress
LoadLibraryA
WaitForMultipleObjects
GetStartupInfoA
CreatePipe
DeleteCriticalSection
HeapFree
HeapAlloc
GetProcessHeap

user32

wsprintfW

msvcrt

sprintf
__CxxFrameHandler
strncpy
_except_handler3
wcscat
wcslen
wcscpy
fclose
fwrite
_wfopen
fread
rewind
ftell
fseek
wcscmp
memcpy
strstr
strcmp
memmove
strncmp
_CxxThrowException
atol
fopen
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
??2@YAPAXI@Z
??3@YAXPAX@Z
strcat
strlen
malloc
memset
strcpy
free
_strlwr
_itoa

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??9std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ID@Z

wininet

InternetOpenA
HttpSendRequestA
InternetSetCookieA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetWriteFile
HttpSendRequestExA
HttpQueryInfoA
InternetReadFile
InternetAttemptConnect
HttpEndRequestA

Sections

.text
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49174119cb589909ba2abe508d0112a4

Headers

File Characteristics

Imports

kernel32

user32

msvcrt

msvcp60

wininet

Sections

.text Size: 22KB - Virtual size: 21KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 7KB - Virtual size: 11KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 22KB - Virtual size: 21KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 7KB - Virtual size: 11KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB