bfb136b8e6b88416e867ef9460290f4dd2bcf153ea4879896265e54570d49701

Sharing

Copy URL Twitter E-mail

General

Target

bfb136b8e6b88416e867ef9460290f4dd2bcf153ea4879896265e54570d49701
Size

67KB
MD5

0154a0b81319ef6b01c805fb5ffbeef0
SHA1

a3f955bba7a03ebad79e1ce06c3771ce90053288
SHA256

bfb136b8e6b88416e867ef9460290f4dd2bcf153ea4879896265e54570d49701
SHA512

098ec902876537951a5b8f4ca8a3bccabdd0f6a91588bd3d2a806158db580824552af17ec3829e876feae3e1b35f8840af5473b828655ed2d4df00b672d8f42b
SSDEEP

1536:AAebqpwvAeeAkBoKBbmBUypiWe6JcKNni3hDKrZgfH9GBQg:AAejvBeOAqBUyLe66hWrKf9Pg

Score

N/A

Malware Config

Signatures

Files

bfb136b8e6b88416e867ef9460290f4dd2bcf153ea4879896265e54570d49701
.dll windows x86

376bf35dcc36225d01c4d28550c11765

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
ClearCommError
ReadFile
SetCommTimeouts
ReleaseMutex
WaitForSingleObject
GetLastError
GetOverlappedResult
WriteFile
GetSystemDirectoryA
GetVersionExA
HeapFree
lstrcatA
HeapAlloc
GetProcessHeap
OpenFile
MoveFileA
DeleteFileA
CopyFileA
LeaveCriticalSection
GetLocalTime
lstrcmpA
FreeLibrary
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
lstrcpyA
SetCurrentDirectoryA
ExpandEnvironmentStringsA
InterlockedDecrement
LocalFree
FormatMessageW
InitializeCriticalSection
OutputDebugStringA
InterlockedCompareExchange
InterlockedExchange
GetModuleHandleW
Sleep
GetVersionExW
CompareStringW
CreateFileA
GetProcAddress
GetFileSize
EnterCriticalSection
VirtualProtect

user32

wsprintfA
CharNextA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumValueA

msvcrt

calloc
isxdigit
atol
_ltoa
strcspn
_stricmp
strncpy
free
_strcmpi
sprintf
atoi
_itoa
_strnicmp
memmove
_amsg_exit
_initterm
_XcptFilter
_callnewh
_onexit
_errno
memset
_CxxThrowException
__dllonexit
_adjust_fdiv
malloc
strncat
_except_handler3
time
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z

msvcp60

?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

376bf35dcc36225d01c4d28550c11765

Headers

File Characteristics

Imports

kernel32

user32

advapi32

msvcrt

msvcp60

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 35KB - Virtual size: 68KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 35KB - Virtual size: 68KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 1KB