6bc2ff4ed9e4cda607bb9a313f2399cb7c5f256b1ea0b9ff70f1c0ebf801e693

Sharing

Copy URL

Twitter E-mail

General

Target

6bc2ff4ed9e4cda607bb9a313f2399cb7c5f256b1ea0b9ff70f1c0ebf801e693
Size

92KB
MD5

ef28ecf1978fee0bf18527e259a1cf26
SHA1

206695d2ac8090ba1710177dec751ff6424828d1
SHA256

6bc2ff4ed9e4cda607bb9a313f2399cb7c5f256b1ea0b9ff70f1c0ebf801e693
SHA512

178873f48919d9bc9759e87973ca9625fc95095ebc49c406126ff145f43097dcf0bd79a9ebb4aaa2917ecb41d00de01cc54cec1ea828dcbf4dfb77a79910c414
SSDEEP

1536:k/GdvU0EqREtNxxR+3LBUzBjO4e3wrpkmVkQ0M3meY:k/+qlbxYbBctfxxVkQ0M3meY

Score

N/A

Malware Config

Signatures

Files

6bc2ff4ed9e4cda607bb9a313f2399cb7c5f256b1ea0b9ff70f1c0ebf801e693
.dll windows x86

02f21126cf51873c149b90d520806c32

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
MultiByteToWideChar
lstrlenW
lstrcpyW
VirtualFree
GetLastError
lstrcmpiA
GetFileSize
SetFilePointer
ReadFile
GetPrivateProfileStringA
lstrcpynA
lstrcmpA
GetCurrentProcessId
WriteFile
GetCurrentProcess
OpenProcess
CreateToolhelp32Snapshot
DeleteFileA
Process32Next
TerminateProcess
CreateProcessA
GetFileAttributesA
MoveFileExA
MoveFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetVersionExW
WaitForSingleObject
CompareStringW
CreateFileW
CloseHandle
GetModuleFileNameA
GetLocalTime
VirtualAlloc
lstrcatA
Sleep
WideCharToMultiByte
GetPrivateProfileIntA
GetCommandLineA
GetTickCount
SetErrorMode
lstrlenA
CreateFileA
Process32First
ExitProcess
FlushFileBuffers
GetStringTypeW
LCMapStringW
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
HeapSize
SetEnvironmentVariableA
HeapReAlloc
RtlUnwind
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
ExitThread
GetCurrentThreadId
CreateThread
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
InterlockedDecrement
GetProcAddress
RaiseException
GetStdHandle
GetModuleFileNameW
HeapCreate
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
GetTimeZoneInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetConsoleCP
GetConsoleMode

user32

CloseDesktop
CreateDesktopA
OpenDesktopA

advapi32

RegEnumKeyA
RegEnumValueA
RegQueryValueExA
RegDeleteValueA
RegCloseKey
RegSetValueExA
RegCreateKeyA
RegOpenKeyExA
RegOpenKeyA

ws2_32

closesocket
htons
socket
WSAStartup
send
connect
recv

wininet

InternetOpenA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle

shlwapi

StrStrIA
PathRemoveFileSpecA
SHDeleteKeyA

Exports

Exports

start

Sections

.text
Size: 63KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

02f21126cf51873c149b90d520806c32

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ws2_32

wininet

shlwapi

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 62KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 63KB - Virtual size: 62KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 7KB - Virtual size: 6KB