ba3fb91ec1ad668ec85eca1cd2f6ce619caae8c634df1992e8770d2890a3f7fa

Sharing

Copy URL Twitter E-mail

General

Target

ba3fb91ec1ad668ec85eca1cd2f6ce619caae8c634df1992e8770d2890a3f7fa
Size

236KB
MD5

551ecaccf483a3b91d6651e57af86aa0
SHA1

8bc25f545275f41d9ec69269ee9c90ce0f51b8f1
SHA256

ba3fb91ec1ad668ec85eca1cd2f6ce619caae8c634df1992e8770d2890a3f7fa
SHA512

2ca06fac99bc3bb18dd3acacdfb6dac3254f1d018a6d8432a8a87c529c09abaab3ccac3d15f8fdbbc7bce6434efaed6fa4b340239b822e72ccb7e60f22122b8a
SSDEEP

3072:NmG/Bd4T6cXESIAUXScFbZ7a0C4atbIY52rYu0AHcGOFM/BfLjvIh+QGdP:IG/bITXE5Phxa0N00YcHRO+/FjvnQYP

Score

N/A

Malware Config

Signatures

Files

ba3fb91ec1ad668ec85eca1cd2f6ce619caae8c634df1992e8770d2890a3f7fa
.dll windows x86

080ee3ad077090d87f71434705bbe36a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
lstrlenA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
SizeofResource
LockResource
LoadResource
FindResourceA
FindResourceExA
WideCharToMultiByte
WriteFile
CreateFileA
ReadFile
GetFileSize
lstrcpynA
MulDiv
lstrcmpiA
lstrcpyA
GetLastError
SetFilePointer
MultiByteToWideChar
lstrlenW
HeapFree
GetProcessHeap
InterlockedIncrement
InterlockedDecrement
GetComputerNameA
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
LoadLibraryA
GetProcAddress
LocalFree
OpenProcess
GetCurrentProcessId
GetDiskFreeSpaceExA
CreateEventA
MapViewOfFileEx
CreateFileMappingA
UnmapViewOfFile
lstrcmpA
SetEndOfFile
CreateProcessA
lstrcatA
GetShortPathNameA
FlushFileBuffers
SetStdHandle
IsBadCodePtr
GetTickCount
QueryPerformanceCounter
UnhandledExceptionFilter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
TerminateProcess
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
IsBadWritePtr
VirtualFree
HeapCreate
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
CreateThread
DeleteCriticalSection
Sleep
DeleteFileA
CloseHandle
SetEvent
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
FreeLibrary
IsBadReadPtr
SetUnhandledExceptionFilter
GetModuleHandleA
ExitProcess
GetCommandLineA
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
RtlUnwind
HeapSize
HeapReAlloc
HeapDestroy
LocalAlloc

user32

IsWindow
UnregisterClassA
UpdateWindow
ShowWindow
SendMessageA
GetDC
ReleaseDC
InvalidateRect
GetClientRect
GetWindow
GetWindowRect
UnhookWindowsHookEx
RegisterClassExA
TrackMouseEvent
GetSysColor
EnumChildWindows
SetWindowTextA
DestroyWindow
GetWindowTextA
GetParent
CreateWindowExA
SetWindowsHookExA
IsChild
GetKeyState
SetFocus
CallNextHookEx
FindWindowA
LoadCursorA
wsprintfA
GetClassInfoExA
IsWindowVisible
CallWindowProcA
GetWindowLongA
DefWindowProcA
SetWindowLongA
GetDlgItem

gdi32

SetTextColor
SetBkColor
GetStockObject
CreateSolidBrush
SelectObject
GetCurrentObject
GetObjectA
GetDeviceCaps
CreateFontIndirectA
DeleteObject

ole32

CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
SysAllocString
VariantClear

wininet

InternetReadFile
DeleteUrlCacheEntry
InternetSetOptionA
InternetCrackUrlA
InternetGetLastResponseInfoA
InternetCloseHandle
InternetOpenA
HttpQueryInfoA
InternetOpenUrlA

urlmon

ObtainUserAgentString

Exports

Exports

AddFFBookmark
Add_Control
Add_Hover
Add_Hover_Window
Add_Html
Add_HtmlTS
Add_RichEdit
CtlColorSubClass
Decode
DotNetVersion
Download
DownloadStatus
DownloadVersion
Encode
FreeSpace
GetMS
GetUser
Init
LaunchExe
RegReadMultiLineValue
RegWriteMultiLineValue
Reset
SetUserAgent
Set_Static_Color
Set_Static_ColorT
Set_Static_Font
Set_Status_Control
StopDownload
ffSet
ffSetStr
ffTest

Sections

.text
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

080ee3ad077090d87f71434705bbe36a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

oleaut32

wininet

urlmon

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 80KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 8KB - Virtual size: 65KB

.rsrc Size: 4KB - Virtual size: 808B

.reloc Size: 8KB - Virtual size: 7KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 84KB - Virtual size: 80KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 8KB - Virtual size: 65KB

.rsrc
Size: 4KB - Virtual size: 808B

.reloc
Size: 8KB - Virtual size: 7KB

.text
Size: 112KB - Virtual size: 112KB