aff65755b8980a3e7408eebf4f85c3ddd05a2637a5391d206ec595d9ec990d3d

Sharing

Copy URL Twitter E-mail

General

Target

aff65755b8980a3e7408eebf4f85c3ddd05a2637a5391d206ec595d9ec990d3d
Size

938KB
MD5

867a9d7beecc31fd1d94fcbdd5e0554a
SHA1

870719391bcdd6ae0278a3ee1e6512aad8519edc
SHA256

aff65755b8980a3e7408eebf4f85c3ddd05a2637a5391d206ec595d9ec990d3d
SHA512

061040c0ebf70e9562809da562172330f9b9af5b32f863704b2ee43e2bdcc4913b90d59fbf7f005748254e82f0232e355b9f98cfd710c10d5a1bd9ee78e89158
SSDEEP

12288:NV2Jx5u+31Vu9PnFtwuBpopLK3fhnIa70qh8FloXjpyMnGRcxkRt7M6N:NVsTVqh8KyrlnXN

Score

N/A

Malware Config

Signatures

Files

aff65755b8980a3e7408eebf4f85c3ddd05a2637a5391d206ec595d9ec990d3d
.dll windows x86

e37ab456baa689fd8955a006a729136b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetSystemTimeAsFileTime
GetModuleHandleA
GetTimeZoneInformation
QueueUserWorkItem
CreateEventA
WaitForSingleObjectEx
CloseHandle
ResetEvent
SetEvent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentThreadId
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
GetLastError
LocalFree
FormatMessageW
InterlockedDecrement
InterlockedIncrement
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryW
OutputDebugStringW
EncodePointer
DecodePointer
HeapFree
HeapAlloc
RaiseException
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineA
RtlUnwind
ExitProcess
GetModuleHandleExW
GetProcAddress
HeapSize
Sleep
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
SetLastError
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
GetFileType
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStringTypeW
LoadLibraryExW
HeapReAlloc
SetEnvironmentVariableA

advapi32

RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
RegCloseKey

winhttp

WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSetStatusCallback
WinHttpQueryHeaders
WinHttpSetOption
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpReadData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpGetProxyForUrl
WinHttpSetTimeouts

Exports

Exports

ETTracker_AbandonmentA
ETTracker_AbandonmentExA
ETTracker_AbandonmentExW
ETTracker_AbandonmentW
ETTracker_ActivationAbandonmentA
ETTracker_ActivationAbandonmentExA
ETTracker_ActivationAbandonmentExW
ETTracker_ActivationAbandonmentW
ETTracker_ActivationErrorA
ETTracker_ActivationErrorExA
ETTracker_ActivationErrorExW
ETTracker_ActivationErrorW
ETTracker_ActivationFinish
ETTracker_ActivationFinishExA
ETTracker_ActivationFinishExW
ETTracker_ActivationStart
ETTracker_ActivationStartExA
ETTracker_ActivationStartExW
ETTracker_ErrorA
ETTracker_ErrorExA
ETTracker_ErrorExW
ETTracker_ErrorW
ETTracker_FinishA
ETTracker_FinishExA
ETTracker_FinishExW
ETTracker_FinishW
ETTracker_InitA
ETTracker_InitByLicenseIDA
ETTracker_InitByLicenseIDW
ETTracker_InitExA
ETTracker_InitExW
ETTracker_InitW
ETTracker_InstallAbandonmentA
ETTracker_InstallAbandonmentExA
ETTracker_InstallAbandonmentExW
ETTracker_InstallAbandonmentW
ETTracker_InstallErrorA
ETTracker_InstallErrorExA
ETTracker_InstallErrorExW
ETTracker_InstallErrorW
ETTracker_InstallFinish
ETTracker_InstallFinishExA
ETTracker_InstallFinishExW
ETTracker_InstallStart
ETTracker_InstallStartExA
ETTracker_InstallStartExW
ETTracker_RegistrationAbandonmentA
ETTracker_RegistrationAbandonmentExA
ETTracker_RegistrationAbandonmentExW
ETTracker_RegistrationAbandonmentW
ETTracker_RegistrationErrorA
ETTracker_RegistrationErrorExA
ETTracker_RegistrationErrorExW
ETTracker_RegistrationErrorW
ETTracker_RegistrationFinish
ETTracker_RegistrationFinishExA
ETTracker_RegistrationFinishExW
ETTracker_RegistrationStart
ETTracker_RegistrationStartExA
ETTracker_RegistrationStartExW
ETTracker_StartA
ETTracker_StartExA
ETTracker_StartExW
ETTracker_StartW

Sections

.text
Size: 570KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e37ab456baa689fd8955a006a729136b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

winhttp

Exports

Exports

Sections

.text Size: 570KB - Virtual size: 569KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 58KB - Virtual size: 68KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 179KB - Virtual size: 178KB

.text
Size: 570KB - Virtual size: 569KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 58KB - Virtual size: 68KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 179KB - Virtual size: 178KB