a1347e4fd72221bcc75d6d72d6b29b9d4cb983eadc242da8d94e8c8f335fc613

Sharing

Copy URL Twitter E-mail

General

Target

a1347e4fd72221bcc75d6d72d6b29b9d4cb983eadc242da8d94e8c8f335fc613
Size

30KB
MD5

5dde94caf9497e407ae2d88e195c7c9d
SHA1

771f90b4a53cdb7c289cec671c1cc7a2755622d9
SHA256

a1347e4fd72221bcc75d6d72d6b29b9d4cb983eadc242da8d94e8c8f335fc613
SHA512

f14629d814bf4ac864d5dc5032d8539559724988ef86320aafe3a34e0bf1889d85f8a716c2e38f393f6997b205f711a96eacd4d34ec4403498b0582166cfdc74
SSDEEP

768:UZmpIW58/HYxZh8f59E47KZXFMPzTl3AKX2Alzr/:cmuYgBKZXs3Ao2Alzr/

Score

N/A

Malware Config

Signatures

Files

a1347e4fd72221bcc75d6d72d6b29b9d4cb983eadc242da8d94e8c8f335fc613
.dll windows x86

20751a14b027bef989102a287dd70828

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord6663
ord4278
ord2818
ord860
ord941
ord1979
ord2393
ord6657
ord5442
ord5683
ord537
ord389
ord354
ord5186
ord3318
ord665
ord690
ord535
ord3229
ord5204
ord1074
ord6881
ord540
ord4277
ord858
ord800
ord6877
ord3507

msvcrt

strncpy
strtol
atoi
_stricmp
_itoa
free
malloc
strstr
wcslen
??3@YAXPAX@Z
??1type_info@@UAE@XZ
__dllonexit
_onexit
__CxxFrameHandler

kernel32

FreeLibrary
GetModuleHandleA
GetModuleFileNameA
ExitProcess
GetProcAddress
MapViewOfFile
CreateFileMappingA
CreateThread
WritePrivateProfileStringA
GetCurrentProcessId
LoadLibraryA
OpenFileMappingA
CloseHandle
Sleep
GetPrivateProfileStringA
GetSystemInfo
VirtualQuery
WideCharToMultiByte
GlobalAlloc
GlobalLock
GlobalFree
GlobalUnlock
Process32Next
TerminateProcess
OpenProcess
Process32First
CreateToolhelp32Snapshot
FindFirstFileA
WriteFile
CreateFileA

user32

GetSystemMetrics
DispatchMessageA
TranslateMessage
GetMessageA
UnhookWindowsHookEx
UnregisterClassA
GetClientRect
GetDC
ReleaseDC
FindWindowA
MessageBoxA
LoadCursorA
RegisterClassExA
ClientToScreen
PostMessageA
SendMessageCallbackA
SendMessageA
GetWindowTextA
GetClassNameA
GetWindowThreadProcessId
LoadKeyboardLayoutA
SystemParametersInfoA
ActivateKeyboardLayout
GetKeyboardLayout
GetKeyboardLayoutNameA
IsWindow
CallNextHookEx
GetKeyState
OpenClipboard
GetClipboardData
CloseClipboard
IsRectEmpty

gdi32

GetDIBits
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
CreateDCA
TextOutA
RealizePalette
SelectPalette
GetStockObject
GetObjectA
GetPixel

msvcp60

??1Init@ios_base@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1_Winit@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

wininet

InternetOpenUrlA
InternetReadFile
InternetCloseHandle
InternetOpenA

imm32

ImmInstallIMEA

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

20751a14b027bef989102a287dd70828

Headers

File Characteristics

Imports

mfc42

msvcrt

kernel32

user32

gdi32

msvcp60

wininet

imm32

Exports

Exports

Sections

.text Size: 19KB - Virtual size: 18KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 8B

.rsrc Size: 1024B - Virtual size: 992B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 8B

.rsrc
Size: 1024B - Virtual size: 992B

.reloc
Size: 2KB - Virtual size: 2KB