c58491e16796c7fe9ab95743a94f26136a3896a332baea930d6295427a23fb15

Sharing

Copy URL

Twitter E-mail

General

Target

c58491e16796c7fe9ab95743a94f26136a3896a332baea930d6295427a23fb15
Size

132KB
MD5

4471aac0a5091d3ee0bbaaac3af645fd
SHA1

be183578e50f3f57b2b3a40d4bb8e28e4b26e9c1
SHA256

c58491e16796c7fe9ab95743a94f26136a3896a332baea930d6295427a23fb15
SHA512

3e1c526495aa70f459d7751b4b1a41fca96ac2e395d7b02ce2d220502dd5af5d47af37c2b3296f6fc0ad25988d276dddd7531ee055590a64e52bdf3aa9b231a9
SSDEEP

1536:WbECerjy78xhf7/KOnUak/hgYpdrI5TJuFlcgDXkKyfiWEDER7SuidfkeB19dj:+kysNyUdkEPu3HVEiWEuuuidffB

Score

N/A

Malware Config

Signatures

Files

c58491e16796c7fe9ab95743a94f26136a3896a332baea930d6295427a23fb15
.dll windows x86

ca2b5caf68921b054a5bfb4748d64c3d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

UnmapViewOfFile
PeekNamedPipe
FindNextFileA
LocalAlloc
lstrcpyA
GetVersionExA
GetProcAddress
lstrcmpA
FreeLibrary
GetPrivateProfileSectionNamesA
LoadLibraryA
GetLocalTime
GetDriveTypeA
GlobalUnlock
GetSystemInfo
InterlockedExchange
RaiseException
GetLastError

gdi32

DeleteDC
GetDIBits
CreateDIBSection
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt

advapi32

SetTokenInformation
GetTokenInformation
LookupAccountSidA
DuplicateTokenEx
CreateProcessAsUserA
RegDeleteValueA
RegDeleteKeyA
RegEnumValueA
RegEnumKeyExA
InitializeSecurityDescriptor
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
AdjustTokenPrivileges
RegCreateKeyExA
OpenEventLogA
ClearEventLogA
CloseEventLog
RegOpenKeyA
RegCloseKey
RegQueryValueA

msvcrt

_beginthreadex
calloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
malloc
_adjust_fdiv
wcstombs
memmove
strlen
_ftol
__CxxFrameHandler
memcpy
??3@YAXPAX@Z
??2@YAPAXI@Z
memset
_strrev
_strnset
realloc
strncat
strrchr
_except_handler3
free
strcmp
strcpy
strcat
_CxxThrowException
memcmp
_strnicmp

winmm

waveOutOpen
waveInUnprepareHeader
waveInGetNumDevs
waveInReset
waveOutReset
waveOutUnprepareHeader
waveOutGetNumDevs
waveInStart
waveInAddBuffer
waveInClose
waveOutClose
waveInStop
waveOutWrite
waveOutPrepareHeader
waveInOpen
waveInPrepareHeader

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0Init@ios_base@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

imm32

ImmGetCompositionStringA
ImmReleaseContext
ImmGetContext

wininet

InternetOpenUrlA
InternetCloseHandle

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

msvfw32

ICClose
ICSeqCompressFrameEnd
ICSendMessage

wtsapi32

WTSFreeMemory
WTSQueryUserToken
WTSQuerySessionInformationA

userenv

CreateEnvironmentBlock

psapi

GetModuleFileNameExA
EnumProcessModules

Exports

Exports

ClassInfo
ClassName
DCODELL
DMissll
MynNEG
SchoolInfo
main

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ca2b5caf68921b054a5bfb4748d64c3d

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

msvcrt

winmm

msvcp60

imm32

wininet

avicap32

msvfw32

wtsapi32

userenv

psapi

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 14KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 14KB

.reloc
Size: 8KB - Virtual size: 6KB