e4ef8ed09a555c3724a496f2c6b2d6e82bd0fe2a67d981fa81c7e92bf6bef58d

Sharing

Copy URL Twitter E-mail

General

Target

e4ef8ed09a555c3724a496f2c6b2d6e82bd0fe2a67d981fa81c7e92bf6bef58d
Size

65KB
MD5

0f8739f82bb6396126e7efad7d68a1ce
SHA1

fd685887f7e8b9acc11fcd1d1b5ea18aae51c2c4
SHA256

e4ef8ed09a555c3724a496f2c6b2d6e82bd0fe2a67d981fa81c7e92bf6bef58d
SHA512

887fb09e90fadcfbfc1d15483afc75b07b7419467f5c28ae683f4f89e01dcd892131ed60fe6a81e1891a021fc0ffc6bab6547053fa31df3a1cf2e68477901d00
SSDEEP

1536:lSzQkDnQc+ZXzyAJISPle/G+X7IG4ZAP2:wkCQcUXzyOISde/hX7IG4+

Score

N/A

Malware Config

Signatures

Files

e4ef8ed09a555c3724a496f2c6b2d6e82bd0fe2a67d981fa81c7e92bf6bef58d
.dll windows x86

484f0ac3ac0a0e88edf241475f9d59d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

?terminate@@YAXXZ
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
_onexit
__dllonexit
??1type_info@@UAE@XZ
strcpy
atoi
wcstombs
towlower
tolower
rand
srand
_itow
mbstowcs
strtok
memset
free
malloc
_itoa
strlen
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
??_U@YAPAXI@Z
memmove
memcpy
??_V@YAXPAX@Z
_except_handler3

kernel32

FlushFileBuffers
CreateRemoteThread
VirtualFreeEx
LocalFree
CreateToolhelp32Snapshot
Process32FirstW
lstrcmpiW
Process32NextW
CreateFileW
GetCurrentProcess
GetFileSize
VirtualAlloc
ReadFile
VirtualFree
GetModuleFileNameW
CreateThread
lstrcpyW
CreateMutexW
GetLastError
WaitForSingleObject
WaitForMultipleObjects
GetExitCodeThread
lstrlenW
OpenMutexW
GetProcAddress
Sleep
lstrcatW
SetFilePointer
WriteProcessMemory
ReleaseMutex
GetModuleFileNameA
DisableThreadLibraryCalls
ExitProcess
LoadLibraryW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetSystemTimeAsFileTime
FreeLibrary
LoadLibraryA
GetDriveTypeW
DeleteFileW
GetTickCount
CreateDirectoryW
GetSystemTime
SystemTimeToFileTime
SetFileTime
GetLogicalDriveStringsW
RaiseException
GetVolumeInformationA
GetCurrentThread
CreateProcessW
OpenMutexA
OpenEventA
Process32First
GetCurrentProcessId
Process32Next
CreateEventW
TerminateThread
TerminateProcess
HeapAlloc
GetProcessHeap
HeapFree
SetFileAttributesW
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
GetVersion
InterlockedExchange
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
VirtualAllocEx
OpenProcess
GetModuleHandleA
GetVersionExA
CloseHandle
lstrcatA
lstrcpyA
lstrlenA
LocalAlloc
SetEndOfFile
GetWindowsDirectoryA

user32

GetSystemMetrics
UnhookWindowsHookEx
PostMessageA
SetWindowsHookExA
CallNextHookEx

advapi32

RegCreateKeyExW
LookupPrivilegeValueA
CloseServiceHandle
StartServiceA
QueryServiceStatusEx
QueryServiceConfigA
ControlService
OpenServiceA
OpenSCManagerA
ConvertSidToStringSidW
IsValidSid
SetThreadToken
GetLengthSid
SetTokenInformation
DuplicateTokenEx
GetTokenInformation
SetEntriesInAclA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
ChangeServiceConfigA
OpenProcessToken
RegDeleteValueW
RegFlushKey
RegCloseKey
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
SetSecurityInfo
AdjustTokenPrivileges

Exports

Exports

DllCanUnloadNow
DllGetClassObject
s

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

484f0ac3ac0a0e88edf241475f9d59d9

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 45KB - Virtual size: 45KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 6KB - Virtual size: 45KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 45KB - Virtual size: 45KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 6KB - Virtual size: 45KB

.reloc
Size: 4KB - Virtual size: 3KB