d56506c28258f3df76837bfc519f762b4ac5b3d0592ccb1a167fefa91ff3f93a

Sharing

Copy URL Twitter E-mail

General

Target

d56506c28258f3df76837bfc519f762b4ac5b3d0592ccb1a167fefa91ff3f93a
Size

52KB
MD5

01bd42cd94944977881022baece8f4c2
SHA1

4e9cb388e32e960bbe1086b2254ff68cede5e3ce
SHA256

d56506c28258f3df76837bfc519f762b4ac5b3d0592ccb1a167fefa91ff3f93a
SHA512

2d07363172b1088679c156e20eea032e271ec85c3c6733463f5999a87057f8b6eb32f111d314713e749db6cd507f808a6bb04df041a1e0fc635b4c6188cdcfe0
SSDEEP

768:aK8MREn/TzmiljKICwVOdNmKTFJGFFZsyxhB02CzYaAjlrr3Q:1XR+djpCwcTn6ZsIQAjNr3Q

Score

N/A

Malware Config

Signatures

Files

d56506c28258f3df76837bfc519f762b4ac5b3d0592ccb1a167fefa91ff3f93a
.exe windows x86

6ea76acb13df16d425cb087464dfcf06

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LZSeek
lstrcatA
FatalAppExitW
LoadLibraryA
LockFileEx
GetModuleHandleW
SetCommState
GetTickCount
lstrcmpiW
SetConsoleInputExeNameA
GetModuleFileNameA
GetVDMCurrentDirectories
WriteFile
CreateToolhelp32Snapshot
PrivCopyFileExW
EnumResourceTypesW
WritePrivateProfileStructA
SetFileAttributesW
FreeResource
VirtualAlloc
GetModuleHandleA
GetConsoleMode
CreateMailslotA
SetConsoleHardwareState
SetDefaultCommConfigA
SetComputerNameW
SetThreadLocale
GetConsoleAliasesA
TlsAlloc
ExpungeConsoleCommandHistoryA
SetProcessAffinityMask
LZRead
GetModuleHandleExW

ieakeng

MoveUpFavorite
ErrorMessageBox
ModifyRatings
ShowADMWindow
MoveDownFavorite
DestroyADMWindow
DisplayADMItem
MoveADMWindow
ProcessFavSelChange
GetFavoritesMaxNumber
BToolbar_Edit
GetFavoritesNumber
GetAdmWindowHandle
CheckForDupKeys
CanDeleteADM
NewFolder
ShowInetcpl
ModifyZones
CheckField
IsFavoriteItem
ModifyAuthCode
SaveADMItem
BuildPalette
BToolbar_Remove
SelectADMItem
CreateADMWindow
DoReboot

winipsec

AddMMAuthMethods
SetMMAuthMethods
DeleteMMPolicy
EnumMMPolicies
MatchMMFilter
SetQMPolicy
DeleteTransportFilter
AddMMPolicy
CloseMMFilterHandle
CloseTransportFilterHandle
SetTransportFilter
EnumMMFilters
DeleteMMAuthMethods
EnumTransportFilters
GetMMPolicy
AddMMFilter
GetQMPolicyByID
GetQMPolicy
QueryIPSecStatistics
SetMMPolicy
EnumQMPolicies
GetMMAuthMethods
MatchTransportFilter
GetMMPolicyByID
DeleteQMPolicy
AddQMPolicy

sqlunirl

_DefMDIChildProc_@16
_DlgDirSelectEx_@16
_lstrcmp_@8
_MoveFileEx_@12
_GetPrivateProfileStruct_@20
_CreateEvent_@16
_TextOut@20
_NDdeShareEnum_@24
_IsCharAlpha_@4
_GetNamedPipeHandleState_@28
_GetWindowTextLength@4
_CharToOemBuff_@12
_NDdeShareDel_@12
AllocConvertMultiSZNameToAEx
_GetUserName@8
_AccessCheckAndAuditAlarm_@44
_SHBrowseForFolder_@4
_NDdeShareGetInfo_@28
_ShellExecute_@24
_SHFileOperation_@4
newWideCharFromMultiByte
_OemToCharBuff_@12
_NDdeIsValidAppTopicList_@4
_SendNotifyMessage_@16
_CallNamedPipe_@28
_lstrcpy_@8

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ea76acb13df16d425cb087464dfcf06

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ieakeng

winipsec

sqlunirl

Sections

.text Size: 41KB - Virtual size: 40KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 376B

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 41KB - Virtual size: 40KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 376B

.rsrc
Size: 4KB - Virtual size: 3KB