caa50218cd4c7c9f39c59ceae92f83d00640509d10ebb03003ea5055f6db3dfc

Sharing

Copy URL

Twitter E-mail

General

Target

caa50218cd4c7c9f39c59ceae92f83d00640509d10ebb03003ea5055f6db3dfc
Size

811KB
MD5

d9ed92f363077989906211c2eb4ef112
SHA1

7c5f281bbf5e5166fafce315960de493d98dfbd4
SHA256

caa50218cd4c7c9f39c59ceae92f83d00640509d10ebb03003ea5055f6db3dfc
SHA512

6ac5fee616561c4a76036c4d5f74f33d3af2df7fb809f079839efa1dcbcb0e5332b73eba5af37f4c130dec2cbf5c3aadfdc280513424da28f960aa0266e7f72e
SSDEEP

12288:91dbzZUej1BstFntEy7bF3s0Hcub5Y03zHnN598vtvVFGdWhpSpI0pWiJ6S55SW:9raoBsFeClsqrDHNjGGobolWa6Sti

Score

N/A

Malware Config

Signatures

Files

caa50218cd4c7c9f39c59ceae92f83d00640509d10ebb03003ea5055f6db3dfc
.exe windows x86

c901bfcccf870d1e87391ac95ef1c57f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetTitleBarInfo
LoadCursorFromFileW
GetScrollInfo
GetRawInputDeviceList
PackDDElParam
ScrollWindowEx
GetShellWindow
CallWindowProcA
GetMenuBarInfo
ResolveDesktopForWOW
DefWindowProcA
OpenIcon
ShowScrollBar
ScreenToClient
GetWindowRgnBox
GetKeyboardLayoutNameW
TrackPopupMenuEx
LoadKeyboardLayoutEx
UpdatePerUserSystemParameters
UnloadKeyboardLayout
CheckMenuItem
GetNextDlgGroupItem
UpdateLayeredWindow
UpdateWindow
TabbedTextOutA
WinHelpA
CharLowerW
GetScrollBarInfo

kernel32

FreeUserPhysicalPages
PurgeComm
SetFileApisToOEM
GetQueuedCompletionStatus
LocalSize
GetModuleHandleW
GlobalGetAtomNameA
SetHandleCount
LoadLibraryA
QueueUserWorkItem
HeapLock
GetSystemTimeAdjustment
DosPathToSessionPathW
GetConsoleAliasExesW
TermsrvAppInstallMode
GetProcAddress
RtlCaptureStackBackTrace
GetStartupInfoA
Toolhelp32ReadProcessMemory
SetNamedPipeHandleState
GetShortPathNameW
BaseDumpAppcompatCache
RegisterWaitForSingleObjectEx
SetThreadPriority
WaitForDebugEvent
SetVolumeLabelW
GetConsoleCommandHistoryLengthA
EnumCalendarInfoW
GetExpandedNameA
lstrcpy
OpenSemaphoreW
SetConsoleOutputCP
FindFirstVolumeMountPointA
EnumSystemCodePagesW
SetProcessAffinityMask
LocalFileTimeToFileTime
ReplaceFile
CreateJobSet
HeapQueryInformation
GetLastError
UnlockFile
SetConsoleMode
FindNextChangeNotification
SetCommState
Process32FirstW
lstrcpyW
GetNamedPipeHandleStateW
GetModuleFileNameA
IsValidLocale
VirtualAlloc
GetDiskFreeSpaceA
GetVolumePathNameA
GetComputerNameA
GetConsoleAliasExesA
LZOpenFileA
LZOpenFileW
SetFileAttributesA
_lread
SetThreadPriorityBoost
GlobalMemoryStatus
GlobalAlloc
DefineDosDeviceA
GetBinaryType
UTUnRegister
ReleaseSemaphore
SetHandleContext
SetSystemTime
GlobalHandle
InitializeCriticalSectionAndSpinCount
GetCPInfo
WaitForSingleObject

dnsapi

DnsUpdate
DnsFlushResolverCacheEntry_UTF8
DnsWriteQuestionToBuffer_UTF8
DnsWriteReverseNameStringForIpAddress
DnsQuery_UTF8
DnsAcquireContextHandle_W
DnsValidateUtf8Byte
Dns_OpenTcpConnectionAndSend
DnsNotifyResolverClusterIp
DnsWriteQuestionToBuffer_W
DnsUpdateTest_A
DnsAsyncRegisterHostAddrs
NetInfo_Clean
DnsUpdateTest_W
DnsNotifyResolverEx
BreakRecordsIntoBlob
DnsNotifyResolver
DnsReplaceRecordSetA
Dns_InitializeMsgRemoteSockaddr
DnsGetBufferLengthForStringCopy
DnsDowncaseDnsNameLabel
DnsCreateStandardDnsNameCopy
DnsUtf8ToUnicode
DnsGetCacheDataTable
DnsRecordCompare
Dns_CreateSocketEx
DnsQueryConfig
NetInfo_Copy
Dns_FindAuthoritativeZoneLib
DnsRecordBuild_UTF8
Dns_InitializeWinsock
Dns_CreateMulticastSocket
DnsUnicodeToUtf8
NetInfo_ResetServerPriorities

Sections

.text
Size: 378KB - Virtual size: 378KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 177KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c901bfcccf870d1e87391ac95ef1c57f

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

dnsapi

Sections

.text Size: 378KB - Virtual size: 378KB

.rdata Size: 89KB - Virtual size: 88KB

.data Size: 177KB - Virtual size: 1.6MB

.rsrc Size: 164KB - Virtual size: 164KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 378KB - Virtual size: 378KB

.rdata
Size: 89KB - Virtual size: 88KB

.data
Size: 177KB - Virtual size: 1.6MB

.rsrc
Size: 164KB - Virtual size: 164KB

.reloc
Size: 1KB - Virtual size: 1KB