cbf6f15f45eb19812aaff0c154f6774c6054b001e70c127f330ea26b08b6b8a5

Sharing

Copy URL Twitter E-mail

General

Target

cbf6f15f45eb19812aaff0c154f6774c6054b001e70c127f330ea26b08b6b8a5
Size

36KB
MD5

9f067b11433dfe2b72a187d5eff547fa
SHA1

45d632e8dbf8ef5cf88bd4088a0e3e8be375afe2
SHA256

cbf6f15f45eb19812aaff0c154f6774c6054b001e70c127f330ea26b08b6b8a5
SHA512

e7f61eb7e31804d590433a0490be160a1c13641aa3bc3cebbdbaf0d57b917db9daa7e0286f4c819021c20107bfc4773743a14ede4d16e7f3c8cd328c9cae28d5
SSDEEP

768:pBV/RuBrSstxmlwd7bu7NxCpO4YWgltG:pBVXsul27bu7NxylV

Score

N/A

Malware Config

Signatures

Files

cbf6f15f45eb19812aaff0c154f6774c6054b001e70c127f330ea26b08b6b8a5
.dll windows x86

e024b2b17bcbc6156fb436d62c47fabe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
ReadFile
GetFileSize
GetLastError
CreateEventA
GetModuleFileNameA
GetTempPathA
GetWindowsDirectoryA
CreateThread
OutputDebugStringA
SetFileAttributesA
VirtualProtect
CreateMutexA
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
MultiByteToWideChar
GlobalAlloc
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
CloseHandle
GetModuleHandleA
Sleep
ExitProcess
DeleteFileA
GetCurrentDirectoryA
GetPrivateProfileStringA

user32

GetClassNameA
SetWindowLongA
RegisterShellHookWindow
RegisterWindowMessageA
CallWindowProcA
wvsprintfA
GetDesktopWindow
GetDC
GetWindowRect
ReleaseDC
EnumWindows
wsprintfA
GetWindowTextA
GetWindowThreadProcessId
GetParent
GetClientRect

gdi32

DeleteObject
BitBlt
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetDIBits
RealizePalette
SelectPalette
GetStockObject
GetObjectA
DeleteDC
GetDeviceCaps
CreateDCA

gdiplus

GdiplusShutdown
GdipDisposeImage
GdipSaveImageToFile
GdipLoadImageFromFile
GdipGetImageEncodersSize
GdipFree
GdipAlloc
GdipCloneImage
GdipGetImageEncoders
GdiplusStartup

ws2_32

htonl
inet_addr
connect
htons
bind
WSAStartup
WSACleanup
socket
send
recv
inet_ntoa
gethostbyname
closesocket

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

msvcrt

rand
strrchr
time
_strrev
srand
strcat
strchr
strncpy
strstr
abs
malloc
wcscmp
__CxxFrameHandler
??2@YAPAXI@Z
memcpy
memset
strlen
atoi
strcmp
strcpy
sprintf
free
__dllonexit
_onexit
_initterm
_adjust_fdiv
_getpid
_stricmp
_strlwr

netapi32

Netbios

Exports

Exports

DriverProc
KsCreateAllocator
KsCreatePin
KsCreateTopologyNode
modMessage
modmCallback

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 542KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e024b2b17bcbc6156fb436d62c47fabe

Headers

File Characteristics

Imports

kernel32

user32

gdi32

gdiplus

ws2_32

msvcp60

wininet

msvcrt

netapi32

Exports

Exports

Sections

.text Size: 23KB - Virtual size: 23KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 2KB - Virtual size: 542KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 23KB - Virtual size: 23KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 2KB - Virtual size: 542KB

.reloc
Size: 3KB - Virtual size: 3KB