dccd85769b1319d247593150f2645704ceaa79de5d87f03e40e7a1a29baa4bb9

Sharing

Copy URL Twitter E-mail

General

Target

dccd85769b1319d247593150f2645704ceaa79de5d87f03e40e7a1a29baa4bb9
Size

154KB
MD5

9031886dc503095efb2dd34a799fddd9
SHA1

98ec7b911338a25e2f8cb32a9d2cc544622a77ef
SHA256

dccd85769b1319d247593150f2645704ceaa79de5d87f03e40e7a1a29baa4bb9
SHA512

d10d2b2ef897a3235c034feca2220c56584360417fdc056c7bd203a1ea7cd01f83106777f4601933cf0a18015386d707fc54c0f6419342d95d1744bdc90f4572
SSDEEP

3072:vr4yWlOVxjEYvxeJE+CHfcUXcg8EIHeE3oG2yVahwziTi1Rc+VzJlb0Lq/:T4yWlOVxEfuvf798EIHeEtVa4iToRciR

Score

N/A

Malware Config

Signatures

Files

dccd85769b1319d247593150f2645704ceaa79de5d87f03e40e7a1a29baa4bb9
.dll windows x86

66924d040a5f97a2f1529dea84648d7d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
VirtualFree
VirtualAlloc
LocalFree
LocalAlloc
GetTickCount
QueryPerformanceCounter
GetVersion
GetCurrentThreadId
WideCharToMultiByte
GetThreadLocale
GetStartupInfoA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCommandLineA
FreeLibrary
ExitProcess
ExitThread
CreateThread
WriteFile
UnhandledExceptionFilter
SetFilePointer
SetEndOfFile
RtlUnwind
ReadFile
RaiseException
GetStdHandle
GetFileSize
GetFileType
CreateFileA
CloseHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
LocalFree
LocalAlloc
lstrcmpi
lstrcat
WriteFile
WaitForSingleObject
VirtualAlloc
TerminateProcess
Sleep
SetThreadPriority
SetPriorityClass
SetFilePointer
SetEvent
ResumeThread
ReadFile
OpenProcess
MoveFileA
LoadLibraryA
LeaveCriticalSection
InitializeCriticalSection
GlobalUnlock
GlobalMemoryStatus
GlobalHandle
GlobalLock
GlobalFree
GlobalAlloc
GetWindowsDirectoryA
GetVersionExA
GetTickCount
GetThreadPriority
GetTempPathA
GetSystemInfo
GetSystemDirectoryA
GetProcAddress
GetPriorityClass
GetModuleHandleA
GetModuleFileNameA
GetLogicalDriveStringsA
GetLocalTime
GetLastError
GetFileSize
GetExitCodeThread
GetDriveTypeA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcess
GetComputerNameA
FreeLibrary
FindNextFileA
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
EnterCriticalSection
DeviceIoControl
DeleteFileA
DeleteCriticalSection
CreateProcessA
CreatePipe
CreateFileA
CreateEventA
CreateDirectoryA
CopyFileA
CloseHandle
Sleep
VirtualProtect
VirtualProtect
ExitProcess

user32

GetKeyboardType
MessageBoxA
CharNextA
CreateWindowExA
mouse_event
keybd_event
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
ShowWindow
SetWindowsHookExA
SetWindowLongA
SetThreadDesktop
SetCursorPos
SendMessageA
ReleaseDC
RegisterClassA
PostMessageA
PeekMessageA
OpenInputDesktop
OpenDesktopA
OemToCharA
MsgWaitForMultipleObjects
MessageBoxA
IsWindowVisible
IsWindow
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowLongA
GetUserObjectInformationA
GetTopWindow
GetThreadDesktop
GetSystemMetrics
GetParent
GetWindow
GetMessageA
GetForegroundWindow
GetDesktopWindow
GetDC
GetCursorPos
GetClassNameA
GetClassInfoA
ExitWindowsEx
DispatchMessageA
DestroyWindow
DefWindowProcA
CloseDesktop
CallNextHookEx

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegFlushKey
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
GetUserNameA
AdjustTokenPrivileges
StartServiceA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenServiceA
OpenSCManagerA
EnumServicesStatusA
DeleteService
CreateServiceA
ControlService
CloseServiceHandle

oleaut32

SysFreeString
SysReAllocStringLen
SysAllocStringLen

gdi32

SetDIBColorTable
SelectPalette
SelectObject
RealizePalette
PatBlt
GetSystemPaletteEntries
GetStockObject
GetPaletteEntries
GetObjectA
GetDeviceCaps
GetDIBits
GetDIBColorTable
GdiFlush
DeleteObject
DeleteDC
CreatePalette
CreateICA
CreateHalftonePalette
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
BitBlt

wsock32

WSACleanup
WSAStartup
WSAGetLastError
gethostbyname
socket
shutdown
setsockopt
send
recv
ioctlsocket
inet_ntoa
inet_addr
htons
getsockname
connect
closesocket

ws2_32

inet_addr

winmm

waveInUnprepareHeader
waveInStart
waveInReset
waveInPrepareHeader
waveInOpen
waveInClose
waveInAddBuffer

msacm32

acmStreamUnprepareHeader
acmStreamPrepareHeader
acmStreamConvert
acmStreamReset
acmStreamSize
acmStreamClose
acmStreamOpen

shell32

ShellExecuteA
SHFileOperation

wininet

InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle

urlmon

URLDownloadToFileA

avicap32

capGetDriverDescriptionA
capCreateCaptureWindowA

imm32

ImmReleaseContext
ImmGetCompositionStringA
ImmGetContext

Exports

Exports

MainService
MainWork
ServiceMain

Sections

CODE
Size: - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: - Virtual size: 116B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

866
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mackt
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sytem
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sytem
Size: - Virtual size: 1000B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Katja
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jg0
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jg1
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66924d040a5f97a2f1529dea84648d7d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

oleaut32

gdi32

wsock32

ws2_32

winmm

msacm32

shell32

wininet

urlmon

avicap32

imm32

Exports

Exports

Sections

CODE Size: - Virtual size: 118KB

DATA Size: - Virtual size: 7KB

BSS Size: - Virtual size: 2KB

.idata Size: - Virtual size: 6KB

.edata Size: - Virtual size: 116B

.reloc Size: - Virtual size: 6KB

.rsrc Size: 2KB - Virtual size: 3KB

866 Size: - Virtual size: 8KB

.reloc Size: - Virtual size: 512B

.mackt Size: - Virtual size: 8KB

sytem Size: - Virtual size: 1000B

sytem Size: - Virtual size: 1000B

.Katja Size: - Virtual size: 4KB

.jg0 Size: - Virtual size: 22KB

.jg1 Size: 149KB - Virtual size: 148KB

.reloc Size: 512B - Virtual size: 60B

CODE
Size: - Virtual size: 118KB

DATA
Size: - Virtual size: 7KB

BSS
Size: - Virtual size: 2KB

.idata
Size: - Virtual size: 6KB

.edata
Size: - Virtual size: 116B

.reloc
Size: - Virtual size: 6KB

.rsrc
Size: 2KB - Virtual size: 3KB

866
Size: - Virtual size: 8KB

.reloc
Size: - Virtual size: 512B

.mackt
Size: - Virtual size: 8KB

sytem
Size: - Virtual size: 1000B

sytem
Size: - Virtual size: 1000B

.Katja
Size: - Virtual size: 4KB

.jg0
Size: - Virtual size: 22KB

.jg1
Size: 149KB - Virtual size: 148KB

.reloc
Size: 512B - Virtual size: 60B