e1f45f8e2f24fac6041b09063413978701f0793fbd94aa930d0b7e090c3223f9

General

Target

e1f45f8e2f24fac6041b09063413978701f0793fbd94aa930d0b7e090c3223f9
Size

33KB
MD5

57e06938359ed8a3349891de84e993c3
SHA1

3e9d8e988d28481e7663b57a1b589b5c62515329
SHA256

e1f45f8e2f24fac6041b09063413978701f0793fbd94aa930d0b7e090c3223f9
SHA512

13f4224d44150e6e079d98a1a63388f5291672bb70bb98273084f341035d1a80e6b65b2bf0ac90b1c18fbb552f6da4dae9a43cd0f80038c8e01ffcf7e907a4e5
SSDEEP

384:Xoh1pgZFayCCny0w/DfeGSMO3M3qtcEu/b3gXkpzvl40I/8suUB:XocFafDe+SM3qiEC3gXktvl4Isuo

Score

N/A

Malware Config

Signatures

Files

e1f45f8e2f24fac6041b09063413978701f0793fbd94aa930d0b7e090c3223f9
.dll windows x86

7d0c500ce3c0c1090099f01e3f1cc2cc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
SetEvent
DeleteFileA
WriteFile
CreateFileA
CreateNamedPipeA
DisconnectNamedPipe
ConnectNamedPipe
GetCurrentProcess
GetStartupInfoA
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
CreateThread
WaitForSingleObject
TerminateThread
CloseHandle
Sleep
ReadFile
HeapFree
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetStdHandle

user32

wsprintfA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CreateProcessAsUserA

urlmon

URLDownloadToFileA

wininet

InternetConnectA
HttpQueryInfoA
InternetReadFile
InternetOpenA
HttpSendRequestA
HttpOpenRequestA

Exports

Exports

DllCanUnloadNowW
DllRegisterServerW
DllUnregisterServerW
SmartStart

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d0c500ce3c0c1090099f01e3f1cc2cc

Headers

File Characteristics

Imports

kernel32

user32

advapi32

urlmon

wininet

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 12KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 12KB

.reloc
Size: 3KB - Virtual size: 3KB