6caf2a9b8fe3e2338766151f9ab9ce755c75529f19859b7a0baf9b2759fd2bd7

Sharing

Copy URL

Twitter E-mail

General

Target

6caf2a9b8fe3e2338766151f9ab9ce755c75529f19859b7a0baf9b2759fd2bd7
Size

534KB
MD5

6722e22aebf7eb243724ef905f354b14
SHA1

ade3f54b5e6de5e4f5b3dd7d29e7c6e0d61b409a
SHA256

6caf2a9b8fe3e2338766151f9ab9ce755c75529f19859b7a0baf9b2759fd2bd7
SHA512

c1cbdecd4d23ac600099720a4f38a3c8dfaca1589fbed947e864542ce5cc9da0be6b29d6a850ef68a2f5f29cd10507797173cd66e960caacf2cb68482dc2d9e7
SSDEEP

6144:Q7nxN/+06lJQDVHHDlJQAYX938JiWdXm:+xN/EXwVHHZJcN2y

Score

N/A

Malware Config

Signatures

Files

6caf2a9b8fe3e2338766151f9ab9ce755c75529f19859b7a0baf9b2759fd2bd7
.dll windows x86

4a45d7fca79fa83b548133aec2ebd97d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mixerClose
mixerGetControlDetailsA
mixerGetLineControlsA
mixerGetLineInfoA
mixerOpen
mixerSetControlDetails

wsock32

socket
htons
connect
recv
closesocket
send
gethostbyname

setupapi

SetupDiGetDeviceInstanceIdA
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupDiEnumDeviceInfo

kernel32

SetEnvironmentVariableA
GetStringTypeW
GetStringTypeA
GetFullPathNameA
CompareStringW
CompareStringA
InitializeCriticalSectionAndSpinCount
GetLogicalDrives
FindFirstFileA
GetEnvironmentVariableA
SetCurrentDirectoryA
LoadLibraryA
GetModuleFileNameA
GetSystemTimeAsFileTime
CloseHandle
CreateFileA
GetLocaleInfoA
DeleteFileA
GetCurrentProcessId
FindClose
lstrcpyA
GetVolumeInformationA
FindNextFileA
SetHandleInformation
WaitForSingleObject
SetEvent
WriteFile
TerminateThread
Sleep
CreateEventA
ReadFile
GetStdHandle
CreatePipe
CreateMutexA
ReleaseMutex
CreateThread
GetTickCount
GetLastError
MoveFileA
GetExitCodeThread
SuspendThread
ResumeThread
FreeLibrary
GetProcAddress
GetFileAttributesA
CreateDirectoryA
GetFileSize
GetVersionExA
SetPriorityClass
Thread32First
GetExitCodeProcess
CreateProcessA
TerminateProcess
Thread32Next
GetCurrentDirectoryA
CreateToolhelp32Snapshot
GetDiskFreeSpaceExA
WideCharToMultiByte
MultiByteToWideChar
DeviceIoControl
ResetEvent
GetVersion
GetDriveTypeA
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetProcessHeap
SetEndOfFile
SetStdHandle
GetStartupInfoA
SetHandleCount
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
ExitProcess
GetModuleHandleW
HeapDestroy
HeapCreate
VirtualAlloc
VirtualFree
LCMapStringW
LCMapStringA
GetCPInfo
GetTimeZoneInformation
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenA
lstrlenW
GetDiskFreeSpaceA
GlobalMemoryStatus
GetLocalTime
GetModuleHandleA
VirtualQuery
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetCommandLineA
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
HeapReAlloc
GetFileType
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind

user32

EnumWindows
SetWindowsHookExA
LoadIconA
RegisterWindowMessageA
CallWindowProcA
GetWindowTextA
UnhookWindowsHookEx
CallNextHookEx
UnregisterClassA
RegisterClassA
CreateWindowExA
LoadCursorA
MessageBoxA
GetWindowRect
DefWindowProcA
GetWindowLongA
SetTimer
GetParent
SetWindowLongA
KillTimer
DestroyWindow
InvalidateRect
ShowWindow
SetWindowPos
GetClientRect
MoveWindow
SendMessageA
PostMessageA
UnregisterDeviceNotification
RegisterDeviceNotificationA
wsprintfA
SetCursor
SetFocus

gdi32

SelectObject
Rectangle
DeleteObject
CreateSolidBrush
CreatePen

comdlg32

GetOpenFileNameA

shell32

SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
ShellExecuteA
Shell_NotifyIconA

advapi32

RegSetValueExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA

Exports

Exports

NP_GetEntryPoints
NP_Initialize
NP_PreInit
NP_Shutdown

Sections

.text
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SharedD
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a45d7fca79fa83b548133aec2ebd97d

Headers

File Characteristics

Imports

winmm

wsock32

setupapi

kernel32

user32

gdi32

comdlg32

shell32

advapi32

Exports

Exports

Sections

.text Size: 353KB - Virtual size: 353KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 11KB - Virtual size: 29KB

.SharedD Size: 512B - Virtual size: 4B

.rsrc Size: 79KB - Virtual size: 79KB

.reloc Size: 24KB - Virtual size: 24KB

.text
Size: 353KB - Virtual size: 353KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 11KB - Virtual size: 29KB

.SharedD
Size: 512B - Virtual size: 4B

.rsrc
Size: 79KB - Virtual size: 79KB

.reloc
Size: 24KB - Virtual size: 24KB