ffef6c25bd0509841819698cd1ccecd6e929cef0ac11468cc6bd7406f3400835

Sharing

Copy URL

Twitter E-mail

General

Target

ffef6c25bd0509841819698cd1ccecd6e929cef0ac11468cc6bd7406f3400835
Size

132KB
MD5

a9e5d6c57c73816057e86bdc48f48947
SHA1

2225fcb23dadecd26df29ee7e0d23fe7f7d573f4
SHA256

ffef6c25bd0509841819698cd1ccecd6e929cef0ac11468cc6bd7406f3400835
SHA512

745896103ff17bf64f2734fefadd00fc6d454a893b78f1aba33fb1e654ca219accda6bbc473fa5ac0112b2e074f89a8603571968db0f9ba671cd87fff82e137c
SSDEEP

3072:yYH6RMZk+uFjwLjfzqyfY6eb3PZur/2Q3:yYoMwFjwfRfnm/Zur/2Q3

Score

N/A

Malware Config

Signatures

Files

ffef6c25bd0509841819698cd1ccecd6e929cef0ac11468cc6bd7406f3400835
.dll windows x86

223657568e70fa71ce3d710e1c12ff9a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalAlloc
GetLocalTime
SetFilePointer
LocalAlloc
UnmapViewOfFile
GetProcAddress
CreatePipe
MoveFileA
RemoveDirectoryA
FindNextFileA
GetDriveTypeA
CreateDirectoryA
GetVersionExA
lstrcmpA
FreeLibrary
GetPrivateProfileSectionNamesA
PeekNamedPipe
GetSystemInfo
GetLastError
RaiseException
InterlockedExchange
lstrcpyA
LoadLibraryA

user32

mouse_event
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetSystemMetrics
SetCursorPos
DestroyCursor
CloseWindow
CreateWindowExA
TranslateMessage
CharNextA
wsprintfA
ExitWindowsEx
WindowFromPoint
SetCapture
MapVirtualKeyA
keybd_event
MessageBoxA
SystemParametersInfoA
SendMessageA
LoadCursorA
GetWindowTextA
SetWindowsHookExA
UnhookWindowsHookEx
SetRect
GetDC
ReleaseDC
OpenWindowStationA
IsWindowVisible
EnumWindows
SetThreadDesktop
GetUserObjectInformationA
GetThreadDesktop
PostMessageA
IsWindow
BlockInput
GetKeyNameTextA
GetActiveWindow

gdi32

CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
GetDIBits
BitBlt
DeleteDC
SelectObject

advapi32

RegEnumKeyExA
RegQueryValueA
RegCloseKey
RegOpenKeyA
CloseEventLog
ClearEventLogA
OpenEventLogA
RegCreateKeyExA
AdjustTokenPrivileges
SetSecurityDescriptorDacl
AddAccessAllowedAce
InitializeAcl
GetLengthSid
AllocateAndInitializeSid
InitializeSecurityDescriptor
RegEnumValueA
RegDeleteKeyA
RegDeleteValueA
CreateProcessAsUserA
SetTokenInformation
DuplicateTokenEx
LookupAccountSidA
GetTokenInformation

msvcrt

_strrev
_adjust_fdiv
_strnset
_strnicmp
malloc
_initterm
_onexit
__dllonexit
??1type_info@@UAE@XZ
calloc
_beginthreadex
wcstombs
realloc
strncat
_errno
strrchr
_except_handler3
free
strcmp
memset
??2@YAPAXI@Z
??3@YAXPAX@Z
memcpy
__CxxFrameHandler
_ftol
strlen
memmove
_CxxThrowException
memcmp
strcat
strcpy

winmm

waveInReset
waveInUnprepareHeader
waveInStop
waveOutWrite
waveOutUnprepareHeader
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveOutReset
waveInClose
waveOutClose
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInOpen

msvcp60

??0Init@ios_base@std@@QAE@XZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

imm32

ImmReleaseContext
ImmGetContext
ImmGetCompositionStringA

wininet

InternetCloseHandle
InternetOpenUrlA

avicap32

capGetDriverDescriptionA
capCreateCaptureWindowA

msvfw32

ICClose
ICSeqCompressFrameEnd
ICSendMessage

wtsapi32

WTSFreeMemory
WTSQueryUserToken
WTSQuerySessionInformationA

userenv

CreateEnvironmentBlock

psapi

GetModuleFileNameExA
EnumProcessModules

Exports

Exports

ClassInfo
ClassName
DCODELL
DMissll
MynNEG
SchoolInfo
main

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

223657568e70fa71ce3d710e1c12ff9a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

winmm

msvcp60

imm32

wininet

avicap32

msvfw32

wtsapi32

userenv

psapi

Exports

Exports

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 14KB

.rsrc Size: 4KB - Virtual size: 16B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 14KB

.rsrc
Size: 4KB - Virtual size: 16B

.reloc
Size: 8KB - Virtual size: 6KB