b1545a5c7339dd32ad1b013d67a0b0f44c99f0059b782d538b5bc78ea4f8ed2f

Sharing

Copy URL

Twitter E-mail

General

Target

b1545a5c7339dd32ad1b013d67a0b0f44c99f0059b782d538b5bc78ea4f8ed2f
Size

144KB
MD5

d8c83053343620c59d7e0bb4ec784b7c
SHA1

5cd48bf210e49094eb37d425ad403ba6f2763640
SHA256

b1545a5c7339dd32ad1b013d67a0b0f44c99f0059b782d538b5bc78ea4f8ed2f
SHA512

d9039458ead8f910b7ef7b7bbc7aac31c1bda4c76da32b9d4b3ec6529b35c7313437e0fb6e2b4c0179a5f9d79685453386bb58d112526e69db7f124e33e61c0b
SSDEEP

3072:8OFQcucLkXTJ5ndvdiXsX9Ak/0JqSECVnserw33eVIWcF4QR3sdN1ryCmc9j9rm6:8OFQcucLkXTJ5ndvdiXsX9Ak/0JqSECT

Score

N/A

Malware Config

Signatures

Files

b1545a5c7339dd32ad1b013d67a0b0f44c99f0059b782d538b5bc78ea4f8ed2f
.dll windows x86

1204a98006a81c856f8192b11a70a16b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

htonl
WSACleanup
inet_ntoa
sendto
WSAStartup
setsockopt
send
closesocket
select
connect
gethostbyname
htons
inet_addr
socket

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetReadFile

kernel32

GetStringTypeW
LoadLibraryA
SetStdHandle
GetStringTypeA
GetCurrentProcessId
SetEndOfFile
GetSystemInfo
QueryPerformanceCounter
OutputDebugStringW
CloseHandle
Sleep
CreateThread
lstrcatW
lstrlenW
lstrlenA
lstrcpyW
GetTempPathW
GetPrivateProfileStringW
CreateFileW
DeleteFileW
SetEvent
WaitForSingleObject
CreateEventW
WideCharToMultiByte
GetTickCount
GetVersionExW
InterlockedExchange
GetACP
GetLocaleInfoA
InitializeCriticalSection
DeleteCriticalSection
HeapAlloc
VirtualProtect
HeapFree
GetProcAddress
GlobalFree
GlobalAlloc
GetCurrentProcess
TerminateProcess
GetLastError
SetFilePointer
ReadFile
CreateProcessW
GetCurrentThreadId
LoadLibraryW
MultiByteToWideChar
ExitProcess
RtlUnwind
GetCommandLineA
GetVersionExA
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetModuleHandleA
GetSystemTimeAsFileTime
GetModuleFileNameA
VirtualQuery
HeapDestroy
HeapCreate
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
HeapSize
WriteFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
GetOEMCP
GetCPInfo
LCMapStringA
LCMapStringW
FlushFileBuffers

user32

RegisterClassExW
ShowWindow
UpdateWindow
GetMessageW
DispatchMessageW
wsprintfW
TranslateMessage
GetWindowLongW
GetClientRect
SetWindowLongW
PostQuitMessage
DefWindowProcW
CreateWindowExW

ole32

CoInitialize
CoCreateInstance
OleInitialize
CoGetClassObject
OleSetContainedObject
CoUninitialize

oleaut32

VariantClear
SysAllocString
VariantInit

Exports

Exports

GetDllModuleControlInit
StartShell

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1204a98006a81c856f8192b11a70a16b

Headers

File Characteristics

Imports

ws2_32

wininet

kernel32

user32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 45KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 45KB

.reloc
Size: 12KB - Virtual size: 12KB