78c5189f4010a7c155d216764493a653b4441f0eedf4587bb5db711031e5e549

Sharing

Copy URL Twitter E-mail

General

Target

78c5189f4010a7c155d216764493a653b4441f0eedf4587bb5db711031e5e549
Size

130KB
MD5

ca3ef1502c0cda36e31fe67a0e9b9e60
SHA1

6a24e4d48f546804091b1ab253a6a3fe5e2bc340
SHA256

78c5189f4010a7c155d216764493a653b4441f0eedf4587bb5db711031e5e549
SHA512

11541d3d833cbaf1742a77b5ee3702b021b8797171df9081637b684e8e05c9e90913788536b90353e9dafe7243d8b3e1a51d02a2118030404a731c4bf872f383
SSDEEP

1536:SIse2+Tq87hROu1/qk/sqYT5bsTkF42CNmdv/fBlUd2fa:q8731N68Nglx

Score

N/A

Malware Config

Signatures

Files

78c5189f4010a7c155d216764493a653b4441f0eedf4587bb5db711031e5e549
.dll windows x86

e6f87d15bb6b4c3ce32a2a07c8721d3f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
RaiseException
HeapReAlloc
GetCommandLineA
HeapSize
GetACP
TerminateProcess
SetUnhandledExceptionFilter
IsBadWritePtr
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
GetOEMCP
GetCPInfo
GetProcessVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalFlags
lstrcmpA
lstrcmpiA
GetVersion
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
GetCurrentThreadId
WideCharToMultiByte
InterlockedIncrement
lstrcpynA
GetModuleHandleA
SetLastError
FreeLibrary
VirtualFree
HeapFree
IsBadReadPtr
HeapAlloc
InterlockedDecrement
lstrlenA
MultiByteToWideChar
LocalAlloc
LocalFree
ExitProcess
LoadLibraryA
GetModuleFileNameA
CloseHandle
Sleep
GetProcAddress
GetLastError
GlobalAlloc
GlobalFree
GlobalLock
VirtualAlloc
GlobalUnlock

user32

GetSysColorBrush
PostQuitMessage
DestroyMenu
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
LoadCursorA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMenuItemCount
GetSubMenu
GetMenuState
GetMenuItemID
LoadStringA
GetLastActivePopup
SetFocus
EnableWindow
IsWindowEnabled
SetWindowPos
SetWindowLongA
MessageBoxA
wsprintfA
ClientToScreen
GetDC
ReleaseDC
GetDlgItem
LoadIconA
PostMessageA
GetFocus
GetParent
TabbedTextOutA
DrawTextA
GrayStringA
GetWindowTextA
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetKeyState
SendMessageA
DispatchMessageA
SetWindowTextA
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowLongA
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx

gdi32

GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
DeleteObject
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
GetObjectA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comctl32

ord17

oleaut32

VariantClear

Exports

Exports

BOX_DeleteDownload
BOX_FreeBuffer
BOX_FreeHandle
BOX_FreeString
BOX_GetDefaultProfile
BOX_GetDownloadInfo
BOX_GetDownloadUploadSpeed
BOX_GetFinishedBitField
BOX_GetMemoryUsage
BOX_GetStatusDescription
BOX_GetTorrentInfo
BOX_Initialize
BOX_IsJobActive
BOX_PackMemoryPool
BOX_ParseTorrentFile
BOX_SetDefaultProfile
BOX_SetJobProfile
BOX_StartDownload
BOX_StartDownloadByHandle
BOX_StartDownloadByTorrent
BOX_StopDownload
BOX_Uninitialize
DllGetClassObject
_BOX_GapDump@4
_BOX_GetGapList@12
_BOX_GetPeerCount@16
_BOX_GetPeerInfo@16
_BOX_SetHttpNumPerTask@8

Sections

.text
Size: 60KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e6f87d15bb6b4c3ce32a2a07c8721d3f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comctl32

oleaut32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 58KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 24KB - Virtual size: 37KB

.rsrc Size: 4KB - Virtual size: 128B

.reloc Size: 24KB - Virtual size: 21KB

.text
Size: 60KB - Virtual size: 58KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 24KB - Virtual size: 37KB

.rsrc
Size: 4KB - Virtual size: 128B

.reloc
Size: 24KB - Virtual size: 21KB