abec4ad9c3e744061646df6f9ff39a6d68f64ff7e20eba8a7719f2c24d86eb7c

Sharing

Copy URL Twitter E-mail

General

Target

abec4ad9c3e744061646df6f9ff39a6d68f64ff7e20eba8a7719f2c24d86eb7c
Size

160KB
MD5

1907194ecf050a01a7f0be561af5eb80
SHA1

095f048cae5fe32b512904fcad110829b15eddbf
SHA256

abec4ad9c3e744061646df6f9ff39a6d68f64ff7e20eba8a7719f2c24d86eb7c
SHA512

967376069c56c439d39771cb4676908f06ca74d1f5774f2eb99894d9618a7d5532afa135528d3084484f51f8606b70351cc850085a7726287bb10385c92949d8
SSDEEP

3072:ONjMM+fUck04mNSK/JpHLR5ypamfG8Tvzytsis7KeXZXEd:ON4M+fUQHmDHei7KcM

Score

N/A

Malware Config

Signatures

Files

abec4ad9c3e744061646df6f9ff39a6d68f64ff7e20eba8a7719f2c24d86eb7c
.dll windows x86

b27b29a8178fc4b4f8683da95133d3bf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_putenv
_initterm
_adjust_fdiv
_onexit
strchr
__dllonexit
_purecall
_strcmpi
??2@YAPAXI@Z
_stricmp
??3@YAXPAX@Z
free
malloc
strrchr
strstr
strncpy
sprintf
_ftol
rand
realloc

ole32

CoTaskMemAlloc
CoTaskMemFree
RevokeDragDrop
OleInitialize
CoCreateInstance
CoFreeUnusedLibraries

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

InterlockedIncrement
IsBadReadPtr
WaitForSingleObject
GetEnvironmentVariableA
GetModuleFileNameA
MulDiv
MultiByteToWideChar
GetProcAddress
WideCharToMultiByte
InterlockedDecrement
lstrlenW
FreeLibrary
LoadLibraryA

user32

LoadStringA
MessageBoxA
GetSystemMetrics
CharNextA
PostMessageA
SetRect
GetDC
ReleaseDC
CharPrevA
SetWindowLongA
SetWindowPos
CallWindowProcA
DefWindowProcA
GetClientRect
CopyRect
IsWindow
GetWindow
CharLowerA
PostThreadMessageA
ShowWindow
GetClassNameA
EnumChildWindows

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueA

gdi32

GetDeviceCaps
DPtoLP
SetMapMode
GetMapMode
LPtoDP

oleaut32

SysAllocString
VariantInit
SafeArrayCreateVector
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringLen
SafeArrayUnaccessData
SysFreeString
SafeArrayAccessData
VariantClear

Exports

Exports

CreateBrowserInstance
GetIEVersion
RMACreateInstance
RMAShutdown
SetDLLAccessPath

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b27b29a8178fc4b4f8683da95133d3bf

Headers

File Characteristics

Imports

pncrt

ole32

version

kernel32

user32

advapi32

gdi32

oleaut32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 48KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 4KB - Virtual size: 1KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 80KB - Virtual size: 80KB

.text
Size: 52KB - Virtual size: 48KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 4KB - Virtual size: 1KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 80KB - Virtual size: 80KB