18f8339878a4b6f696c9690be5bf83d02258126a51555823e9d20d011894b4ad

Sharing

Copy URL Twitter E-mail

General

Target

18f8339878a4b6f696c9690be5bf83d02258126a51555823e9d20d011894b4ad
Size

565KB
MD5

922255897693b914d51209f00dfc4770
SHA1

1c02d9fd6cc7f9f092d2fcb8f2f6fa962336a7ea
SHA256

18f8339878a4b6f696c9690be5bf83d02258126a51555823e9d20d011894b4ad
SHA512

b05d87e331a4242e4a5c07ad98c42460afef1851630450c6fac33f01cd11e22873b830c115149c1fa6de7d638f03806fec5c85252e2198c3b0eb2c826a3494c2
SSDEEP

12288:+muw0SkZAaAwvgUD9Xwmrf69HKtfW8HBUsc:FJkugD9XlDuHKtfW8HBUsc

Score

N/A

Malware Config

Signatures

Files

18f8339878a4b6f696c9690be5bf83d02258126a51555823e9d20d011894b4ad
.dll windows x86

c5066acc0bedadf94a1bebffe7efb3d5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFilePointer
HeapFree
HeapAlloc
GetProcessHeap
IsBadStringPtrW
GetSystemInfo
MoveFileExA
GetTempFileNameA
GetTempPathA
MoveFileExW
GetTempFileNameW
DeleteFileA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateThread
FindResourceExW
CreateFileA
Sleep
WritePrivateProfileSectionW
WaitForMultipleObjects
WaitForSingleObject
GetLocalTime
ExitProcess
WriteProfileStringW
CreateDirectoryW
RemoveDirectoryW
TerminateProcess
GetPrivateProfileSectionW
GetPrivateProfileIntW
GetWindowsDirectoryW
WritePrivateProfileStringW
GetPrivateProfileStringW
MoveFileW
InitializeCriticalSection
GetPrivateProfileStringA
GetModuleFileNameW
PostQueuedCompletionStatus
CreateIoCompletionPort
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
CopyFileW
GetProfileIntW
WriteProfileSectionW
OutputDebugStringA
ResumeThread
CreateProcessW
FreeLibrary
LoadLibraryA
WriteFile
LoadLibraryExA
QueryDosDeviceW
VirtualAlloc
VirtualFree
GetProcessId
TerminateThread
ReadFile
GetFileSize
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
GetFileAttributesW
SetFileTime
IsBadReadPtr
DeleteCriticalSection
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
SetFileAttributesW
VirtualQuery
DuplicateHandle
SetLastError
LoadLibraryW
GetCurrentProcess
GetCurrentProcessId
GetModuleHandleW
GetProcAddress
VirtualProtectEx
VirtualAllocEx
GetModuleHandleA
CreateRemoteThread
GlobalMemoryStatus
GetVersion
OpenProcess
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
ReadProcessMemory
WriteProcessMemory
GetCurrentThread
GetVersionExW
MultiByteToWideChar
WideCharToMultiByte
GetTempPathW
GetSystemDirectoryW
DeleteFileW
GetTickCount
GetLastError
OutputDebugStringW
CreateFileW
SuspendThread
GetThreadContext
SetThreadContext
FlushInstructionCache
InterlockedCompareExchange
CloseHandle
VirtualProtect
LoadLibraryExW
SetEndOfFile
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
DeviceIoControl
lstrcpynA
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
GetConsoleMode
GetConsoleCP
HeapCreate
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCommandLineA
GetCurrentThreadId
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
RtlUnwind
UnhandledExceptionFilter

user32

RegisterClassExW
GetSystemMetrics
IsWindow
UnhookWindowsHookEx
wsprintfW
LoadCursorW
GetMessageW
GetUserObjectInformationW
GetProcessWindowStation
GetDesktopWindow
MessageBoxW
TranslateMessage
DispatchMessageW
ShowWindow
CreateWindowExW
DefWindowProcW
LoadImageW
SetPropW

advapi32

StartServiceW
ReportEventW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
OpenSCManagerW
DeleteService
OpenServiceW
DeregisterEventSource
CreateServiceW
CloseServiceHandle
RegisterEventSourceW

ole32

CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoTaskMemFree

shell32

SHGetPathFromIDListW
Shell_NotifyIconW
SHGetSpecialFolderLocation

oleaut32

VariantClear

shlwapi

PathFileExistsW
StrStrIA
StrStrIW

wininet

DeleteUrlCacheEntryA
FindNextUrlCacheEntryA
FindFirstUrlCacheEntryA
InternetOpenW
InternetOpenUrlW
InternetReadFile
InternetCloseHandle
FindCloseUrlCache

psapi

EnumProcessModules
GetModuleBaseNameW
GetModuleFileNameExW

iphlpapi

GetAdaptersInfo

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueA

ws2_32

inet_addr
htons
accept
__WSAFDIsSet
socket
htonl
WSAJoinLeaf
WSASocketW
getsockname
bind
setsockopt
ioctlsocket
WSAIoctl
send
sendto
recv
recvfrom
gethostbyname
gethostname
closesocket
shutdown
WSAStartup
listen
connect

Exports

Exports

HOther
HThis
d001
d002
d003
d004
d005
d006
d007
d008
d009
d010
d011
d012
d013
d014
d015
d016
d017
d018
d019
d020
d021
d022
o002
o003
o004
o005
o006
o007
o008
o009
o010
o011
o012
o013
o014
o015
o016
o017
o018
o0O1
p001
p002
p003
p004
p005
p006
p007
p008
p009
p010
p011
p012
p013
s001

Sections

.text
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c5066acc0bedadf94a1bebffe7efb3d5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

wininet

psapi

iphlpapi

version

ws2_32

Exports

Exports

Sections

.text Size: 387KB - Virtual size: 386KB

.rdata Size: 83KB - Virtual size: 83KB

.data Size: 40KB - Virtual size: 54KB

.rsrc Size: 23KB - Virtual size: 23KB

.reloc Size: 30KB - Virtual size: 30KB

.text
Size: 387KB - Virtual size: 386KB

.rdata
Size: 83KB - Virtual size: 83KB

.data
Size: 40KB - Virtual size: 54KB

.rsrc
Size: 23KB - Virtual size: 23KB

.reloc
Size: 30KB - Virtual size: 30KB