cad42fbb2d802e6de2507cf5015383a2bfbc2c7e310208aa152fe501e27a582f

Sharing

Copy URL Twitter E-mail

General

Target

cad42fbb2d802e6de2507cf5015383a2bfbc2c7e310208aa152fe501e27a582f
Size

132KB
MD5

cbf64ec7487709f48956490b4eb36552
SHA1

7113b347b475b1fc912afaec6512fef51a2ea488
SHA256

cad42fbb2d802e6de2507cf5015383a2bfbc2c7e310208aa152fe501e27a582f
SHA512

24281980a0505c6f6a951110b4154615ebda8c53d6db7d4e9e75a1fb55d0f3c4d722ad081ad3a2d98322130679ca112bdd36caae97d5bddb6bf04ce3880303bc
SSDEEP

3072:cKbO9HZ3K7A7JOY6Y1uOvWTBfu6DEQK5aid:cKbKtK7ANOY6vOvWTB26DSAi

Score

N/A

Malware Config

Signatures

Files

cad42fbb2d802e6de2507cf5015383a2bfbc2c7e310208aa152fe501e27a582f
.dll windows x86

78cc9c94c83c9cb74e9f191fc44ecd14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

CommandLineToArgvW
ord680
ShellExecuteExA

urlmon

URLDownloadToCacheFileA

ws2_32

socket
WSAStartup
connect
getsockname
inet_addr
htons
closesocket

kernel32

SetEndOfFile
HeapSize
GetFileAttributesA
FreeLibrary
GetProcAddress
LoadLibraryA
LocalAlloc
CreateMutexA
LocalFree
GetCommandLineW
CreateFileA
GetFileSize
lstrlenA
MapViewOfFile
UnmapViewOfFile
GetCurrentProcess
WaitForSingleObject
GetTickCount
WriteFile
OpenProcess
WideCharToMultiByte
GetVolumeInformationA
Sleep
GetProcessHeap
TerminateProcess
ReadFile
GetSystemDirectoryA
CreateDirectoryA
GetLastError
CopyFileA
DisableThreadLibraryCalls
GetTempFileNameA
CreateFileMappingA
GlobalMemoryStatusEx
GetSystemInfo
GetModuleFileNameA
ReleaseMutex
GetDiskFreeSpaceExA
GetVersionExA
CloseHandle
GetTempPathA
OpenFileMappingA
DeleteFileA
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
SetEnvironmentVariableA
CompareStringA
CompareStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateProcessA
LCMapStringA
InitializeCriticalSectionAndSpinCount
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
HeapReAlloc
GetCurrentThreadId
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
FlushFileBuffers
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetTimeZoneInformation
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
ExitProcess
RaiseException
MultiByteToWideChar
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetStdHandle

user32

DispatchMessageA
TranslateMessage
PeekMessageA
wsprintfA

advapi32

SetSecurityDescriptorDacl
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
ConvertStringSecurityDescriptorToSecurityDescriptorW
InitializeSecurityDescriptor

ole32

StringFromGUID2
CoCreateGuid

Exports

Exports

DllGetClassObject

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

78cc9c94c83c9cb74e9f191fc44ecd14

Headers

DLL Characteristics

File Characteristics

Imports

shell32

urlmon

ws2_32

kernel32

user32

advapi32

ole32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 31KB - Virtual size: 31KB

.data Size: 4KB - Virtual size: 11KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 31KB - Virtual size: 31KB

.data
Size: 4KB - Virtual size: 11KB

.reloc
Size: 7KB - Virtual size: 6KB