c3a43e3dc901c9bba0cee7ac3c638b4ade7de4fe9ce7510711e0389a3c144892

Sharing

Copy URL Twitter E-mail

General

Target

c3a43e3dc901c9bba0cee7ac3c638b4ade7de4fe9ce7510711e0389a3c144892
Size

148KB
MD5

ccd1e3b14237af391e172fdf085885f2
SHA1

fe099a1a98f2473c8a6b9c4b60753e1bba8a003d
SHA256

c3a43e3dc901c9bba0cee7ac3c638b4ade7de4fe9ce7510711e0389a3c144892
SHA512

2c8aca7ba51c4f26fd1582c7aece65c07d689e88bf293f1c5ba4a6137790c8dfce1cd607e7adfb90c2ea54e2ee0f0310e1ee1de868a56b76fbc1f4afac043cbf
SSDEEP

3072:rjbDo6G+efb5n9K8XgmDsYR2/ykUnjYHmJnOTZ9d5/QAow:rboBfz5YLmDsqnkZ9d5/QAd

Score

N/A

Malware Config

Signatures

Files

c3a43e3dc901c9bba0cee7ac3c638b4ade7de4fe9ce7510711e0389a3c144892
.dll windows x86

9ba4b63cb3826aeedb2ccf22f4bb9e16

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteFile
InterlockedCompareExchange
EnterCriticalSection
LocalFree
CloseHandle
OpenEventA
GetLastError
CreateFileA
ReadProcessMemory
SetLastError
GetProcessHeap
CreateDirectoryA
InterlockedIncrement
WaitForSingleObject
GlobalAlloc
GetTickCount
LeaveCriticalSection
CreateProcessA
TerminateProcess
ExitProcess
HeapFree
GetModuleHandleA
GetComputerNameA
OpenFileMappingA
GetModuleFileNameA
GetProcAddress
Sleep
LoadLibraryA
UnmapViewOfFile
WriteProcessMemory
GetVolumeInformationA
CreateEventA
GetCurrentProcess
CreateMutexW
GlobalFree
GetCommandLineA
CopyFileA
InterlockedDecrement
MapViewOfFile
HeapAlloc
CreateFileMappingA

ole32

OleCreate
CoCreateGuid
CoCreateInstance
CoUninitialize
OleSetContainedObject
CoSetProxyBlanket
CoTaskMemAlloc
CoInitialize

user32

RegisterWindowMessageA
GetSystemMetrics
GetMessageA
SendMessageA
DestroyWindow
ClientToScreen
TranslateMessage
CreateWindowExA
SetTimer
PostQuitMessage
PeekMessageA
DefWindowProcA
KillTimer
GetCursorPos
SetWindowLongA
GetWindowLongA
GetClassNameA
FindWindowA
GetWindow
GetWindowThreadProcessId
DispatchMessageA
ScreenToClient
SetWindowsHookExA
GetParent
UnhookWindowsHookEx

oleaut32

SysFreeString
SysStringLen
SysAllocString
SysAllocStringLen

shlwapi

StrStrIW
UrlUnescapeW

advapi32

GetUserNameA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
SetTokenInformation
RegCloseKey
RegDeleteValueA
RegQueryValueExA
OpenProcessToken
DuplicateTokenEx
RegDeleteKeyA

shell32

SHGetFolderPathA

Exports

Exports

Handlermapnet

Sections

.text
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vhlfbu
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9ba4b63cb3826aeedb2ccf22f4bb9e16

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

shell32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 112KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 4KB - Virtual size: 992B

vhlfbu Size: 4KB - Virtual size: 12B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 116KB - Virtual size: 112KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 4KB - Virtual size: 992B

vhlfbu
Size: 4KB - Virtual size: 12B

.reloc
Size: 8KB - Virtual size: 6KB