c88721c8f1dc0d7e955134d6e1e184843568f6c32a5f037de1b6d695dc5e33b0

General

Target

c88721c8f1dc0d7e955134d6e1e184843568f6c32a5f037de1b6d695dc5e33b0
Size

40KB
MD5

77ce882678cc170a22e4577339075b64
SHA1

9376dbf2fd5420c42e146a8fc278f56360fbd56b
SHA256

c88721c8f1dc0d7e955134d6e1e184843568f6c32a5f037de1b6d695dc5e33b0
SHA512

9b4ecdc05d5caf7eae932d480e49606a84043abe94b23c83fa319824e6ba84a0a30b642610154298795c7e205adb5fc7f166283b012696fc056243e7f79bc7ef
SSDEEP

192:pszJbXcqCbnmvtgIkENgNho9AxcV9g+Gey48Xe2yOS6P4ciTzb:psVDcVbmvt16NDcVfhyZXe2tbiTv

Score

N/A

Malware Config

Signatures

Files

c88721c8f1dc0d7e955134d6e1e184843568f6c32a5f037de1b6d695dc5e33b0
.dll windows x86

224ce921e89acf427b8f92efc27a53d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

strncpy
ZwOpenProcess
_snwprintf
strchr
sscanf
_snprintf
_chkstk

shlwapi

StrStrIW
PathRemoveFileSpecA
StrStrIA

wininet

InternetSetOptionA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetOpenA
HttpSendRequestA
InternetQueryOptionA
InternetCloseHandle

kernel32

LoadLibraryW
FlushInstructionCache
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
CreateFileW
GetModuleFileNameW
CreateThread
GetCommandLineA
OpenEventA
TerminateProcess
QueueUserWorkItem
CreateEventA
GetLastError
GetPrivateProfileIntW
WritePrivateProfileStringW
GetProcAddress
LoadLibraryA
Sleep
CreateFileA
WritePrivateProfileSectionW
VirtualAlloc
ReadFile
VirtualFree
CloseHandle
GetFileSize

advapi32

CloseServiceHandle
StartServiceA
ControlService
QueryServiceStatusEx
OpenServiceA
OpenSCManagerA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 470B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

224ce921e89acf427b8f92efc27a53d6

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

shlwapi

wininet

kernel32

advapi32

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 17KB

.reloc Size: 512B - Virtual size: 470B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 17KB

.reloc
Size: 512B - Virtual size: 470B