6ebe31b26cd5308c7ca1dd92af10d0593ab2cc71cdf1b052861cc911ecc62294

Sharing

Copy URL Twitter E-mail

General

Target

6ebe31b26cd5308c7ca1dd92af10d0593ab2cc71cdf1b052861cc911ecc62294
Size

203KB
MD5

410dd404a83333145591c13dc4086180
SHA1

1e49b3517cb11dc6edc0f7fed6486fb8137280a0
SHA256

6ebe31b26cd5308c7ca1dd92af10d0593ab2cc71cdf1b052861cc911ecc62294
SHA512

2a9b71e070a84ebfe428d72537e7714f00a81d20d749e25037d382063fb21cd8d185e50036ae29e1d44298792164376e756d5997f11eee09b80d0f0ccbc70542
SSDEEP

3072:qgOsxvfG5r/Ep2rk5AlP+jrgZNiPgR+WFrd1aVs3l/Anj+:qgOufOr/Ks+jrgZNsI+WFrd1MsN

Score

N/A

Malware Config

Signatures

Files

6ebe31b26cd5308c7ca1dd92af10d0593ab2cc71cdf1b052861cc911ecc62294
.dll windows x86

0a862d16dc00eaa7b79749affe3c8466

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
CloseHandle
CreateFileA
GetTempPathA
Sleep
WriteFile
ReadFile
GetFileSize
Thread32Next
TerminateThread
GetThreadPriority
Thread32First
CreateToolhelp32Snapshot
GetCurrentProcessId
SetThreadPriority
TerminateProcess
CreateEventA
OpenEventA
GetTickCount
OutputDebugStringA
GetCommandLineA
GetWindowsDirectoryA
Process32Next
Process32First
GetVolumeInformationA
GetComputerNameA
GetVersionExA
GetLocalTime
CreateProcessA
OpenProcess
GetSystemDirectoryA
GetCurrentThreadId
DeviceIoControl
ExitProcess
DisableThreadLibraryCalls
VirtualAlloc
VirtualFree
MultiByteToWideChar
WriteProcessMemory
VirtualProtectEx
ReadProcessMemory
VirtualFreeEx
CreateThread
CreateRemoteThread
VirtualAllocEx
GetLastError
SetErrorMode
SetEnvironmentVariableA
CompareStringW
CompareStringA
LCMapStringW
LCMapStringA
SetEndOfFile
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
SetUnhandledExceptionFilter
InterlockedIncrement
InterlockedDecrement
SetFilePointer
IsBadWritePtr
HeapReAlloc
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
DeleteCriticalSection
GetStartupInfoA
GetModuleHandleA
GlobalAlloc
GlobalLock
LoadLibraryA
GetProcAddress
GlobalUnlock
GlobalFree
GetModuleFileNameA
GetCurrentProcess
IsBadReadPtr
WaitForSingleObject
WideCharToMultiByte
GetFileType
SetHandleCount
GetStdHandle
InitializeCriticalSection
LeaveCriticalSection
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetVersion
HeapFree
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
HeapAlloc
EnterCriticalSection

user32

wsprintfA
UnhookWindowsHookEx
GetWindowThreadProcessId
PostMessageA
GetWindowTextA
EnumWindows
GetMessageA
PostThreadMessageA
GetInputState
ClipCursor
GetSystemMetrics

wininet

InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetOpenA
InternetOpenUrlW
InternetOpenW
InternetCloseHandle

ws2_32

shutdown
closesocket
gethostbyname
connect
inet_addr
select
htons
ioctlsocket
socket
send
recv
__WSAFDIsSet
WSACleanup
WSAStartup
getpeername
inet_ntoa

advapi32

LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegFlushKey
RegCloseKey
OpenProcessToken

netapi32

Netbios

iphlpapi

GetAdaptersInfo

Exports

Exports

WSHAddressToString
WSHEnumProtocols
WSHGetBroadcastSockaddr
WSHGetProviderGuid
WSHGetSockaddrType
WSHGetSocketInformation
WSHGetWSAProtocolInfo
WSHGetWildcardSockaddr
WSHGetWinsockMapping
WSHIoctl
WSHJoinLeaf
WSHNotify
WSHOpenSocket
WSHOpenSocket2
WSHSetSocketInformation
WSHStringToAddress

Sections

.text
Size: 182KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

zdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vdata
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a862d16dc00eaa7b79749affe3c8466

Headers

File Characteristics

Imports

kernel32

user32

wininet

ws2_32

advapi32

netapi32

iphlpapi

Exports

Exports

Sections

.text Size: 182KB - Virtual size: 182KB

zdata Size: 9KB - Virtual size: 9KB

vdata Size: 1024B - Virtual size: 1024B

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 182KB - Virtual size: 182KB

zdata
Size: 9KB - Virtual size: 9KB

vdata
Size: 1024B - Virtual size: 1024B

.reloc
Size: 9KB - Virtual size: 9KB