f34b744ac2d160077bd918b1c80dfc044b0a230bbad92de05ac1ae92b2497d1a

Sharing

Copy URL Twitter E-mail

General

Target

f34b744ac2d160077bd918b1c80dfc044b0a230bbad92de05ac1ae92b2497d1a
Size

414KB
MD5

f2324afdd615fce9c2479b5bf3aa89d2
SHA1

cd9d444d160ebc4b83af80d7199f100570b4fb9a
SHA256

f34b744ac2d160077bd918b1c80dfc044b0a230bbad92de05ac1ae92b2497d1a
SHA512

907a9d6d0ad6ff79e0f2dfb5447991257384a7f9877bab9e05784f14a0aba2fed19ec0030ed3a85373f8dd9885ee27477e40695d3ddf2e9358ec89178782f443
SSDEEP

12288:ZIDJLgKp9YYFFSOf0ISEkHck2L0WoFjhPYw2rGFP:ZIDJ0o9YoPNy8k2L3QhYr4

Score

N/A

Malware Config

Signatures

Files

f34b744ac2d160077bd918b1c80dfc044b0a230bbad92de05ac1ae92b2497d1a
.dll windows x86

21d666335b4d9abeb34a6c151e84449f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

CMP_Report_LogOn
SetupDiOpenDeviceInterfaceRegKey
SetupDiGetDeviceInterfaceAlias
CM_Test_Range_Available
CM_Query_Remove_SubTree
CM_Get_Sibling_Ex
CM_Free_Log_Conf_Ex

oleaut32

VarBstrFromDisp
SafeArrayPutElement
SafeArrayRedim
SysAllocStringLen
SysFreeString
SysReAllocStringLen
VARIANT_UserMarshal
VarUI4FromR4
SafeArrayCreate
SafeArrayGetElement
SafeArrayGetRecordInfo
SafeArrayGetUBound
VariantInit
VariantCopyInd
VariantCopy
VariantClear
VariantChangeType
SafeArrayPtrOfIndex

user32

CharNextA
DdeAccessData
EnumThreadWindows
LoadStringA
MessageBoxA
wsprintfA

wsock32

htons
ntohl
ntohs
WEP

kernel32

lstrlenA
lstrcpynA
WriteFile
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SystemTimeToFileTime
SetThreadLocale
SetLastError
SetHandleCount
SetFileTime
SetFilePointer
SetEvent
SetEnvironmentVariableA
SetEndOfFile
RtlUnwind
ResetEvent
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadLibraryExA
LoadLibraryA
LeaveCriticalSection
CloseHandle
CompareStringA
CreateEventA
CreateFileA
DeleteCriticalSection
EnterCriticalSection
EnumCalendarInfoA
ExitProcess
FindClose
FindFirstFileA
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCurrentDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetDiskFreeSpaceA
GetEnvironmentStringsA
GetFileAttributesA
GetFileAttributesW
GetFileSize
GetFileType
GetFullPathNameA
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExA
GetStringTypeW
GetSystemDefaultLangID
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsValidLocale
LCMapStringA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Exports

Exports

Encoder
ParseFileFlags
_flags
write_info

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 242KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21d666335b4d9abeb34a6c151e84449f

Headers

File Characteristics

Imports

setupapi

oleaut32

user32

wsock32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 242KB - Virtual size: 242KB

.data Size: 67KB - Virtual size: 67KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 242KB - Virtual size: 242KB

.data
Size: 67KB - Virtual size: 67KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB