ee3ffaafc120bc631ddd3349cd979fb33cbd07ef0c67aad3d2cca3bb2f8b5b35

Sharing

Copy URL

Twitter E-mail

General

Target

ee3ffaafc120bc631ddd3349cd979fb33cbd07ef0c67aad3d2cca3bb2f8b5b35
Size

108KB
MD5

1e78664d9f124e30052f3b9bdb79c91e
SHA1

782e531bf33936ea3e23a9f502036079ead4a501
SHA256

ee3ffaafc120bc631ddd3349cd979fb33cbd07ef0c67aad3d2cca3bb2f8b5b35
SHA512

db53f2ca75828455ee9712f76b7baf1b7b14c7a7f50c0eab0ece29bf37d80552f04651c5b51c7fbd169bfda15f6dd513aa3f4a6f8b407bc2a55570d0540e5183
SSDEEP

1536:NznNQfOTQ9fU44Z7G8r5fJWwxrjXmCmIjczF+e44U5kV7wEml:Zp88KUI44U5CwE

Score

N/A

Malware Config

Signatures

Files

ee3ffaafc120bc631ddd3349cd979fb33cbd07ef0c67aad3d2cca3bb2f8b5b35
.dll windows x86

64a67cc77ae1f1680fb3bfdd353c3339

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA
ReleaseMutex
lstrcmpA
WaitForSingleObject
lstrcpyA
SetSystemTime
FileTimeToSystemTime
GetSystemTime
CreateThread
CreateMutexA
Process32Next
Process32First
CreateToolhelp32Snapshot
SetErrorMode
GetTickCount
ExitThread
VirtualProtectEx
CreateFileA
HeapSize
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapReAlloc
VirtualAlloc
HeapAlloc
GetConsoleMode
GetConsoleCP
WriteFile
SetFilePointer
GetLocaleInfoA
WriteProcessMemory
GetCurrentProcess
GetLastError
CloseHandle
FlushFileBuffers
Sleep
EnterCriticalSection
LeaveCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleHandleA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapFree
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
LCMapStringA

user32

UnhookWindowsHookEx
EnableWindow
GetDlgItem
SetDlgItemTextA
SendMessageA
GetWindowTextA
SetWindowTextA
GetDlgItemInt
GetForegroundWindow
GetClassNameA
GetWindowThreadProcessId
SetWindowsHookExA
SetForegroundWindow
GetKeyState
CallNextHookEx
DialogBoxParamA
ShowWindow
MessageBoxA
CreateDialogParamA
MapVirtualKeyW
GetMessageExtraInfo
SendInput
IsDlgButtonChecked
GetDlgItemTextA
SendDlgItemMessageA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges

comctl32

ord17

ws2_32

ntohl
closesocket
recv
connect
htons
socket
WSACleanup
WSAStartup

Exports

Exports

CheckInternetTime
EncrytData
EncrytData_2
EncrytMessage
GetGameText
GetLoginText
GetMirText
INitStringData
InitBL
InitMirProcess
InstallHook
ReadMirProcess
UninstallHook
WriteMirProcess
WriteMirProcess_2
_CheckInternetTime@4
_EncrytData@12
_EncrytData_2@12
_EncrytMessage@12
_GetGameText@12
_GetLoginText@12
_GetMirText@12
_HelloWord@0
_INitStringData@12
_InitBL@4
_InitMirProcess@16
_InstallHook@0
_ReadMirProcess@12
_UninstallHook@0
_WriteMirProcess@12
_WriteMirProcess_2@12

Sections

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

she
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

64a67cc77ae1f1680fb3bfdd353c3339

Headers

File Characteristics

Imports

kernel32

user32

advapi32

comctl32

ws2_32

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 76KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 5KB - Virtual size: 147KB

she Size: 512B - Virtual size: 4B

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 76KB - Virtual size: 76KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 5KB - Virtual size: 147KB

she
Size: 512B - Virtual size: 4B

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 7KB