e1f8509641ac62b038c60bf4e81d3eed25d2d2ec7c1441947caa1a4bc3bdd91f

Sharing

Copy URL Twitter E-mail

General

Target

e1f8509641ac62b038c60bf4e81d3eed25d2d2ec7c1441947caa1a4bc3bdd91f
Size

16KB
MD5

930cc6600ff5af78fb173399e8a3c01d
SHA1

42c0483abc8e983590d5c42dfc520012bec2b2eb
SHA256

e1f8509641ac62b038c60bf4e81d3eed25d2d2ec7c1441947caa1a4bc3bdd91f
SHA512

f1ed187261fa0d0b9d6033f0785fc2478722e7dee0e7c597190d1e5fc551d3e1228af2e9186ae4370adc10cf9377113f585a482182c2b416df20311712e57dbc
SSDEEP

384:UOuYhCot5/hB1Q1ZTNKJ0pfXPBde1oPxlwgvCN:t/CuJ1Q1ZTNKEXJE2Jlf6N

Score

N/A

Malware Config

Signatures

Files

e1f8509641ac62b038c60bf4e81d3eed25d2d2ec7c1441947caa1a4bc3bdd91f
.dll windows x86

63b952fc967e2975f5bb12a11ffd49c1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
lstrcatA
LocalFree
GetLastError
lstrcpyA
GetModuleHandleA
Process32Next
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
FreeLibrary
CreateRemoteThread
DuplicateHandle
GetCurrentProcess
lstrlenW
ReadProcessMemory
VirtualProtectEx
OpenProcess
GetCurrentProcessId
CreateMutexA
CreateThread
ReleaseMutex
lstrlenA
GetTempPathA
CreateFileA
WriteFile
ReadFile
WideCharToMultiByte
Process32First
Sleep
CloseHandle
GetModuleFileNameA
lstrcmpiA
LoadLibraryA
GetSystemDirectoryA
GetProcAddress

user32

GetForegroundWindow
wsprintfA
GetWindowTextA

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDCA

advapi32

LookupPrivilegeValueA
SetSecurityInfo
SetEntriesInAclA
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges

msvcrt

memcpy
memset
memcmp
strcat
strstr
??2@YAPAXI@Z
strlen
mbstowcs
wcscmp
_strnicmp
_strlwr
strcpy

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z

wininet

InternetWriteFile
HttpSendRequestExA
HttpAddRequestHeadersA
HttpEndRequestA
InternetConnectA
InternetOpenA
HttpSendRequestA
InternetReadFile
InternetCloseHandle
HttpOpenRequestA

Exports

Exports

Install

Sections

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63b952fc967e2975f5bb12a11ffd49c1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

msvcp60

wininet

Exports

Exports

Sections

.bss Size: - Virtual size: 4KB

.data Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 4KB

.data
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 1KB