b036e37cc82127638f71bb8afaac8c99127fcb9d6f51aabb9fe1f2947c7a7673

Sharing

Copy URL Twitter E-mail

General

Target

b036e37cc82127638f71bb8afaac8c99127fcb9d6f51aabb9fe1f2947c7a7673
Size

189KB
MD5

995a7f10ae1f512ac538ce4806a569bd
SHA1

8c7912478f3b6e9b9d62ebcae0153bbdc1947e2c
SHA256

b036e37cc82127638f71bb8afaac8c99127fcb9d6f51aabb9fe1f2947c7a7673
SHA512

1e25576207304621ae9da01cff8daf8ebb78a9667c6ad4f8a085e90fbdd8be93fc3f4f80e10bf85ba127fa429657e5dd93d78c140eede1ba61d71b01e3b18598
SSDEEP

3072:AQ/zxLsMrLs90CblFcTelFT3v/PyzhywyhHOxlZzuMoSaEejHJvqS99mVNi4evcS:AIsusSCblFcTelhnFwy5ULyPSPUwSbXf

Score

N/A

Malware Config

Signatures

Files

b036e37cc82127638f71bb8afaac8c99127fcb9d6f51aabb9fe1f2947c7a7673
.dll windows x86

9b6b152bacae7c45ca2365d0ccad1a15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnprintf
strrchr
_snprintf
sprintf
malloc
wcstol
??3@YAXPAX@Z
??2@YAPAXI@Z
wcscpy
wcsncpy
wcslen
free
realloc
swscanf
_wcsicmp

kernel32

GetLocalTime
DisableThreadLibraryCalls
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
FormatMessageA
DebugBreak
lstrcpyA
lstrcatA
GetModuleFileNameA
lstrcpynA
OutputDebugStringA
WaitForSingleObject
ExpandEnvironmentStringsA
HeapFree
CreateMutexA
HeapAlloc
GetProcessHeap
ReleaseMutex
FlushFileBuffers
WriteFile
SetFilePointerEx
CreateFileA

advapi32

RegCreateKeyExA
RegSetValueExA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

btbip

BTBIP_AllocateResponse
BTBIP_GetImageProperties
BTBIP_FreeResponse
BTBIP_GetMonitoringImage
BTBIP_GetLinkedThumbnail
BTBIP_DeleteImage
BTBIP_SetOnDisconnectedCallback
BTBIP_Disconnect
BTBIP_GetImageFirst
BTBIP_GetImagesList
BTBIP_GetImageNext
BTBIP_ResponseCodeToShortText
BTBIP_GetSupported
BTBIP_Connect

Exports

Exports

DllCanUnloadNow
WiaMCamClose
WiaMCamDeleteItem
WiaMCamFreeItemInfo
WiaMCamFreeThumbnail
WiaMCamGetDeviceInfo
WiaMCamGetItemData
WiaMCamGetItemInfo
WiaMCamGetMonitoringImage
WiaMCamGetThumbnail
WiaMCamInit
WiaMCamOpen
WiaMCamReadEvent
WiaMCamReset
WiaMCamSetItemProt
WiaMCamStatus
WiaMCamStopEvents
WiaMCamTakePicture
WiaMCamUnInit
_DllEntryPoint@12

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b6b152bacae7c45ca2365d0ccad1a15

Headers

File Characteristics

Imports

msvcrt

kernel32

advapi32

btbip

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 168KB - Virtual size: 169KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 168KB - Virtual size: 169KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB