c7963ba04ca02d590b1e547deebb3f6ed0e9e93e32368544121f11160b401f13

General

Target

c7963ba04ca02d590b1e547deebb3f6ed0e9e93e32368544121f11160b401f13
Size

33KB
MD5

3948101626fa22255ab1873a42ea639d
SHA1

e61bb8753035a4c545e273fe6b89a9ee8711df23
SHA256

c7963ba04ca02d590b1e547deebb3f6ed0e9e93e32368544121f11160b401f13
SHA512

a462207cc17a602431103e8b84ca98321d1ef2569dec922d4f30863900e8693cafda8e9136a5cbbfc0d45c0a013a001e8485e6fcc341f0c52fb86b165d6d018d
SSDEEP

384:+d58pHfU0yyIjH+8YLnf2z1022mvznEuzEJ1rXkpzvlz/vjaA:ikHM0vz2BzznEuEJ1rXktvl7jJ

Score

N/A

Malware Config

Signatures

Files

c7963ba04ca02d590b1e547deebb3f6ed0e9e93e32368544121f11160b401f13
.dll windows x86

823a389b348dc7b5dd9cff3ce3267805

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventA
GetModuleFileNameA
GetSystemDirectoryA
GetTempPathA
HeapAlloc
GetProcessHeap
DeleteFileA
WriteFile
CreateFileA
ReadFile
DisconnectNamedPipe
CreateNamedPipeA
GetCurrentProcess
GetStartupInfoA
WinExec
OpenProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
Sleep
CreateThread
WaitForSingleObject
TerminateThread
CloseHandle
HeapFree
ConnectNamedPipe
SetEvent
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetStringTypeW
GetStringTypeA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
GetCPInfo
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
VirtualFree
VirtualAlloc
HeapReAlloc
RtlUnwind
TerminateProcess
GetStdHandle

user32

wsprintfA

advapi32

OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
CreateProcessAsUserA

urlmon

URLDownloadToFileA

wininet

InternetConnectA
HttpQueryInfoA
InternetReadFile
InternetOpenA
HttpSendRequestA
HttpOpenRequestA

Exports

Exports

DllCanUnloadNowW
DllRegisterServerW
DllShowWinDlg
DllUnregisterServerW
SmartStart

Sections

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

823a389b348dc7b5dd9cff3ce3267805

Headers

File Characteristics

Imports

kernel32

user32

advapi32

urlmon

wininet

Exports

Exports

Sections

.text Size: 14KB - Virtual size: 13KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 11KB - Virtual size: 12KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 14KB - Virtual size: 13KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 11KB - Virtual size: 12KB

.reloc
Size: 3KB - Virtual size: 3KB