b4c506531337224e549916a0593b1f9145b03a5fdf62d743397f0381c7ea7f45

General

Target

b4c506531337224e549916a0593b1f9145b03a5fdf62d743397f0381c7ea7f45
Size

201KB
MD5

f2c7a1aab5e17ec81bee96ab6d8bda0d
SHA1

299e9a9e654cf61a3d1f60ede9dc46fa5c608934
SHA256

b4c506531337224e549916a0593b1f9145b03a5fdf62d743397f0381c7ea7f45
SHA512

d4f4fbb630a34ff44d719d6a2515db4219eab8bd5cc42242949f1f5445eae64d015cb87a59f76a18c55ccd25bc1417eed131270b92309010d1416dbf5a5480f0
SSDEEP

6144:tYrB9F+wRgf6KYPRCNU4ZlXsgDEPTm7RUp:uXF+wufSPRC24ldECF8

Score

N/A

Malware Config

Signatures

Files

b4c506531337224e549916a0593b1f9145b03a5fdf62d743397f0381c7ea7f45
.dll windows x86

ae95a5e43b22070897b2805d502db622

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
WaitForSingleObject
ExitProcess
lstrcpyA
GetTickCount
LoadLibraryA
GetProcAddress
WinExec

advapi32

RegCreateKeyExA

msvcrt

time
??3@YAXPAX@Z
memmove
ceil
_ftol
strstr
??2@YAPAXI@Z
__CxxFrameHandler
_CxxThrowException
free
malloc
_except_handler3
strncpy
strrchr
atoi
strncat
strftime
localtime
_strnicmp
_beginthreadex
calloc
??1type_info@@UAE@XZ
__dllonexit
_onexit
_initterm
_adjust_fdiv

ws2_32

gethostname
inet_ntoa
getsockname
send
recv
WSAStartup
WSACleanup
select

Exports

Exports

BT_AddLogFile
BT_AppLogEntry
BT_CallCppFilter
BT_ClearLog
BT_CloseLogFile
BT_GetLogEchoMode
BT_GetLogFileName
BT_InstallSehFilter
BT_OpenLogFile
BT_SetActivityType
BT_SetAppName
BT_SetFlags
BT_SetLogFlags
BT_SetLogSizeInBytes
BT_SetLogSizeInEntries
BT_SetSupportServer
CreatePotPlayerExW
DestroyPotPlayer
PreprocessCmdLineExW
RunPotPlayer
SetPotPlayRegKeyW
UninitPotPlayer
Update

Sections

.text
Size: 192KB - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ae95a5e43b22070897b2805d502db622

Headers

File Characteristics

Imports

kernel32

advapi32

msvcrt

ws2_32

Exports

Exports

Sections

.text Size: 192KB - Virtual size: 191KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 192KB - Virtual size: 191KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 7KB - Virtual size: 7KB