b8cf527ec182b0dab0f421f44bfe314a3db6fc9e3fa1cf7ca1a23e5ccb69b57f

Sharing

Copy URL

Twitter E-mail

General

Target

b8cf527ec182b0dab0f421f44bfe314a3db6fc9e3fa1cf7ca1a23e5ccb69b57f
Size

104KB
MD5

209409202d02e0d5f684400d511ac231
SHA1

b5d19a21c1445163521ed02e23a46135138935f8
SHA256

b8cf527ec182b0dab0f421f44bfe314a3db6fc9e3fa1cf7ca1a23e5ccb69b57f
SHA512

66c1f63968ab9f2f6316529b1e721ce66a7778857496bf6973efb41fbeea05de8fc2d1d07b8a5d2f35a82c8f0f643ec1f6988f754503d668504655b424c9e1b5
SSDEEP

1536:Y9Vp3nzYB8UQP/vxPhrPzD5in9hr8TB7JXw+k6dYT+mp:ebYKtRprPzDAn9hsB7JXwp6dmp

Score

N/A

Malware Config

Signatures

Files

b8cf527ec182b0dab0f421f44bfe314a3db6fc9e3fa1cf7ca1a23e5ccb69b57f
.dll windows x86

95880b196125a97e81996a89bdd21f0b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileExA
CreateThread
AllocConsole
TerminateThread
WaitForSingleObject
WideCharToMultiByte
GetEnvironmentVariableW
HeapFree
HeapAlloc
GetProcessHeap
ReadProcessMemory
VirtualQueryEx
GetSystemInfo
OpenProcess
FileTimeToSystemTime
Thread32Next
Thread32First
CreateToolhelp32Snapshot
Process32Next
Process32First
CreateDirectoryA
TerminateProcess
GlobalFree
GlobalAlloc
GetStartupInfoW
GetStartupInfoA
CreatePipe
GetCurrentProcess
PeekNamedPipe
GetVolumeInformationA
GetDiskFreeSpaceExA
SearchPathA
ExpandEnvironmentStringsA
GetTempPathA
DuplicateHandle
FindFirstFileA
FindClose
FindNextFileA
GetLogicalDriveStringsA
GetDriveTypeA
CreateEventA
GetCurrentThreadId
GetTickCount
GetSystemTime
lstrcmpA
GetLocaleInfoA
lstrcpyA
lstrcatA
Sleep
ReadFile
GetLastError
WriteFile
SetEndOfFile
GetVersionExA
GetSystemDirectoryA
MultiByteToWideChar
DeviceIoControl
QueryDosDeviceA
GetFileSize
SetFilePointer
CreateProcessA
GetEnvironmentVariableA
MoveFileA
GetModuleHandleA
GetFileAttributesA
CopyFileA
DeleteFileA
GetModuleFileNameA
GetTempFileNameA
FreeLibrary
LoadLibraryA
GetProcAddress
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
CreateFileA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetWindowsDirectoryA

user32

GetWindowTextLengthA
GetWindowTextA
ExitWindowsEx
GetProcessWindowStation
GetThreadDesktop
GetForegroundWindow
SetProcessWindowStation
OpenDesktopA
SetThreadDesktop
CloseDesktop
CloseWindowStation
GetKeyState
GetAsyncKeyState
GetSystemMetrics
wsprintfA
EnumWindows
GetWindowThreadProcessId
GetWindowLongA
OpenWindowStationA

gdi32

CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
GetObjectA
GetDIBits
CreateDCA

advapi32

RegQueryInfoKeyA
RegEnumValueA
RegEnumKeyA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
GetTokenInformation
LookupAccountSidA
ControlService
StartServiceA
OpenServiceA
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
CryptReleaseContext
CryptDestroyHash
CryptDestroyKey
CryptDecrypt
CryptEncrypt
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextA
QueryServiceConfigA
EnumServicesStatusA
ChangeServiceConfigA
QueryServiceStatus
CreateProcessWithLogonW
LogonUserA
RegEnumKeyExA
RegDeleteKeyA

shell32

SHFileOperationA

msvcrt

_lseek
_close
_adjust_fdiv
_initterm
_onexit
remove
__dllonexit
??1type_info@@UAE@XZ
printf
sprintf
_strupr
wcslen
_tempnam
?terminate@@YAXXZ
strncpy
strchr
rename
atoi
_local_unwind2
_write
_read
_open
??3@YAXPAX@Z
malloc
strncat
time
srand
rand
_except_handler3
_CxxThrowException
??2@YAPAXI@Z
strstr
__CxxFrameHandler
strrchr
free
wcscmp

netapi32

NetUserEnum
NetShareEnum
NetApiBufferFree

ws2_32

WSCEnumProtocols
WSAStartup
WSACleanup
gethostbyname
inet_ntoa
inet_addr
htons

iphlpapi

GetNetworkParams
GetAdaptersInfo

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

psapi

EnumProcessModules
GetModuleFileNameExA

ntdll

_itoa

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpEndRequestA
HttpSendRequestA
InternetQueryDataAvailable
InternetReadFile
InternetCloseHandle
HttpSendRequestExA
InternetWriteFile
HttpAddRequestHeadersA

userenv

CreateEnvironmentBlock
GetUserProfileDirectoryA
DestroyEnvironmentBlock

Exports

Exports

ServiceMain

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95880b196125a97e81996a89bdd21f0b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

netapi32

ws2_32

iphlpapi

version

psapi

ntdll

wininet

userenv

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 70KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 41KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 72KB - Virtual size: 70KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 41KB

.reloc
Size: 8KB - Virtual size: 7KB