027859b23515773ee30812f8a9ae3467b8a0d0d0a75daa4d2db650605ae2d0dc

Sharing

Copy URL Twitter E-mail

General

Target

027859b23515773ee30812f8a9ae3467b8a0d0d0a75daa4d2db650605ae2d0dc
Size

39KB
MD5

d6c23bade8b5eaf4796d8244d02b38c0
SHA1

d427630b31fd84b81dd975da4ca641e04a59ecaf
SHA256

027859b23515773ee30812f8a9ae3467b8a0d0d0a75daa4d2db650605ae2d0dc
SHA512

4a51603ad999002df4dab6d0aa64124e6fb326bc951dfce6594b81a6f8090528d8464a120a464bf7aaab7b37a258db8391994bc4056d9afdd6a4203529946a47
SSDEEP

768:sKOv2ZICGqRzjN05BIklNh9Tq0f/7S3E+Git/hLB+Os+XrW:sKOvVCxljWTIkzz20X7S3E+GSI+XrW

Score

N/A

Malware Config

Signatures

Files

027859b23515773ee30812f8a9ae3467b8a0d0d0a75daa4d2db650605ae2d0dc
.dll windows x86

b30def84b6b57d7a5ffbaa596389582e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
ReadFile
GetFileSize
OutputDebugStringA
GetLastError
CreateEventA
GetModuleFileNameA
GetWindowsDirectoryA
SetFileAttributesA
VirtualProtect
CreateMutexA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
WritePrivateProfileStringA
MultiByteToWideChar
DeleteFileA
GlobalAlloc
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
GetModuleHandleA
ExitProcess
IsBadReadPtr
CreateThread
CloseHandle
Sleep
WideCharToMultiByte
GetCurrentDirectoryA
GetPrivateProfileStringA
GetTempPathA

user32

MoveWindow
BeginPaint
EndPaint
SendMessageA
wsprintfA
wvsprintfA
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassExA
RegisterWindowMessageA
RegisterShellHookWindow
SetWindowLongA
GetClassNameA
CallWindowProcA
GetClientRect
GetDesktopWindow
GetDC
ReleaseDC
GetParent
GetWindowTextA
GetWindowThreadProcessId
GetWindowRect
EnumWindows
DefWindowProcA

gdi32

CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
CreateCompatibleBitmap
CreateDCA
CreateSolidBrush
TextOutA
SetBkMode
SetTextColor
CreateFontIndirectA
SelectObject
BitBlt
GetDeviceCaps
DeleteObject

gdiplus

GdipCloneImage
GdipAlloc
GdipFree
GdipGetImageEncodersSize
GdipGetImageEncoders
GdiplusStartup
GdipLoadImageFromFile
GdipSaveImageToFile
GdipDisposeImage
GdiplusShutdown

ws2_32

send
connect
recv
socket
htonl
closesocket
inet_ntoa
gethostbyname
WSACleanup
WSAStartup
bind
htons
inet_addr

msvcp60

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

wininet

InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile

msvcrt

rand
strrchr
time
srand
strchr
strstr
abs
wcscmp
__CxxFrameHandler
??2@YAPAXI@Z
memset
memcpy
strcmp
strtok
atoi
strncpy
sprintf
wcsstr
strlen
strcpy
strcat
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_strrev
_stricmp
_strlwr
malloc

netapi32

Netbios

Exports

Exports

DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
modMessage
modmCallback

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b30def84b6b57d7a5ffbaa596389582e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

gdiplus

ws2_32

msvcp60

wininet

msvcrt

netapi32

Exports

Exports

Sections

.text Size: 26KB - Virtual size: 25KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 542KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 26KB - Virtual size: 25KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 542KB

.reloc
Size: 4KB - Virtual size: 3KB