e20cf62cb9ed5887fc8ffee04afe9dc9c5a782cc9f920e2f2136b72cc2c5a479

Sharing

Copy URL Twitter E-mail

General

Target

e20cf62cb9ed5887fc8ffee04afe9dc9c5a782cc9f920e2f2136b72cc2c5a479
Size

217KB
MD5

3fcb41032c73ce06839ce154ca5dc7d0
SHA1

0a8076aec6ab9580014dd0d343044617465b65d5
SHA256

e20cf62cb9ed5887fc8ffee04afe9dc9c5a782cc9f920e2f2136b72cc2c5a479
SHA512

8f672ec40a3df2a824aca0a8f2dc50a33e516c9173f3176cf25d4013883893273705db602e9de4a720eaa13ef2f23358fd2c9f5cf7560c52b942ffde38e0e10b
SSDEEP

3072:hRccpvUG4OmCnxYWI5SEsjCkoxNSzQF9e0KafwE/VuCebozdPOANqMSdz9Ay:kYU7cJcZZNIoIafwC2GdmSSdzuy

Score

N/A

Malware Config

Signatures

Files

e20cf62cb9ed5887fc8ffee04afe9dc9c5a782cc9f920e2f2136b72cc2c5a479
.dll windows x86

4a8471176721c0667754c7ab16216f74

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_adjust_fdiv
_initterm
memmove
memcmp
strcmp
free
malloc
strlen
_strnicmp
rename
_mbsrchr
sprintf
strncpy
_except_handler3
_vsnprintf
time
srand
rand
memchr
memset
memcpy
strrchr
strcpy
strcat
__CxxFrameHandler

rpcrt4

RpcStringFreeA
UuidCreate
UuidToStringA

kernel32

CreateFileMappingA
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
OpenMutexA
GlobalMemoryStatus
QueryPerformanceFrequency
QueryPerformanceCounter
lstrlenA
CreateMutexA
ReleaseMutex
VirtualAlloc
CreateProcessA
CreateDirectoryA
ExitProcess
lstrcmpiA
IsBadStringPtrA
GetFileAttributesA
GetModuleFileNameA
IsBadReadPtr
GetProcAddress
WriteProcessMemory
GetCurrentProcess
VirtualProtect
VirtualQuery
GetSystemInfo
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetModuleHandleA
GetVersion
GetCommandLineA
VirtualFree
CloseHandle
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadCodePtr
WaitForSingleObject
CreateThread
DuplicateHandle
GetCurrentThreadId
SetErrorMode
LoadLibraryA
FreeLibrary
TlsAlloc
ReadFile
SetFilePointer
CreateFileA
TlsSetValue
TlsGetValue
Sleep
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
IsBadWritePtr
DeleteFileA
SetEndOfFile
GetFileSize
GetTempFileNameA
GetVersionExA
GetThreadContext
GetLastError
TlsFree
GetTickCount
MoveFileA
GetLongPathNameA
OpenProcess
WideCharToMultiByte
InterlockedExchange
TerminateThread
ReleaseSemaphore
TerminateProcess
CreateSemaphoreA
WriteFile
FindClose
FindFirstFileA
FindNextFileA
CopyFileA
ExpandEnvironmentStringsA

user32

LoadStringA
EnumWindows
GetWindowLongA
GetWindowThreadProcessId
CallWindowProcW
GetForegroundWindow
IsWindowUnicode
SetWindowLongW
IsWindow
SetWindowLongA
GetSystemMenu
AppendMenuA
wsprintfA
CallWindowProcA
KillTimer
SetTimer
UnhookWindowsHookEx
GetMenuItemInfoA
GetClassNameA
CallNextHookEx
SetWindowsHookExA
GetWindowTextA
wvsprintfA
EnumChildWindows
IsWindowVisible

advapi32

AdjustTokenPrivileges
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
LookupPrivilegeValueA
OpenThreadToken
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyA
RegOpenKeyA
GetUserNameA

Exports

Exports

FCAddDataToKey
FCAddDateToKey
FCAddIntToKey
FCAddStringToKey
FCAssert
FCAssertInternal1
FCAssertParam
FCAssertParamInternal1
FCCleanup
FCClearCounters
FCClearKey
FCClearKeys
FCCreateCounter
FCCreateKey
FCCreatePersistentCounter
FCCreatePersistentKey
FCCreateSupportIncidentInternal
FCDecrementCounter
FCDeleteDataFromKey
FCDeleteDateFromKey
FCDeleteIntFromKey
FCDeleteKey
FCDeleteStringFromKey
FCEndTimer
FCExceptionHandler
FCFlushNonSharedPersistentKeys
FCGetCounter
FCGetSessionUniqueID
FCHeartbeatTimer
FCIncrementCounter
FCInitialize
FCInitializeInternal
FCInitializeWithManifestInternal
FCInitializeWithManifestInternalEx
FCLibraryVersion
FCRegisterMemory
FCRunMemTest
FCSetCounter
FCSetKeyOptions
FCSetLocale
FCSetMiniDump
FCSetUIState
FCStartTimer
FCTrace
FCTraceInternal
FCTraceParam
FCTraceParamInternal
FCTrigger
FCTriggerInternal
FCTriggerInternal1
FCUnregisterMemory

Sections

.text
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 115KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a8471176721c0667754c7ab16216f74

Headers

File Characteristics

Imports

msvcrt

rpcrt4

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 71KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text Size: 115KB - Virtual size: 116KB

.text
Size: 72KB - Virtual size: 71KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB

.text
Size: 115KB - Virtual size: 116KB