685fdefb763aecb962c7ceb6bb15b3339715f601ba2c2234089a5dc7c91d1e9d

Sharing

Copy URL

Twitter E-mail

General

Target

685fdefb763aecb962c7ceb6bb15b3339715f601ba2c2234089a5dc7c91d1e9d
Size

40KB
MD5

7c4017049a364a9740085d88503703b0
SHA1

7995765991a7602a4a202a4e828bfcf46d41e8ab
SHA256

685fdefb763aecb962c7ceb6bb15b3339715f601ba2c2234089a5dc7c91d1e9d
SHA512

924d24a014eb4684117f974d3e857cf34dc995ec3d6357e7bb8fc22e2d4b0d9fee580f23654c17722b36b1d88b9b889baadc1a04f2b4f84634775046e46b1feb
SSDEEP

768:8hMl2iz3EdxQGFSxGk4wqTD7qJn7pqseFwEgkNaPs0at0sWIP2AD1:8hMkiz3EdxVFwGFwqT3qJn1FeFw/kNa4

Score

N/A

Malware Config

Signatures

Files

685fdefb763aecb962c7ceb6bb15b3339715f601ba2c2234089a5dc7c91d1e9d
.dll windows x86

35852a6d5f19e74a8ceeecc688a1fb44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetLastError
GetVersionExA
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc
GetProcessHeap
SearchPathA
GetTempPathA
GetTickCount
lstrcatA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
CreateRemoteThread
DuplicateHandle
GetCurrentProcess
VirtualProtectEx
lstrlenA
GetSystemDirectoryA
DeleteFileA
FindFirstFileA
CreateFileA
GlobalFree
WriteFile
ReadFile
GetModuleHandleA
Sleep
FreeLibrary
OpenProcess
GetCurrentProcessId
CreateMutexA
CreateThread
ReleaseMutex
GetModuleFileNameA
lstrcmpiA
CloseHandle
GlobalAlloc
GlobalReAlloc

user32

wsprintfA
GetForegroundWindow
GetWindowTextA
GetDC
ReleaseDC

gdi32

BitBlt
GetStockObject
GetObjectA
SelectPalette
RealizePalette
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
CreateDCA
DeleteDC
GetDIBits

advapi32

OpenProcessToken
GetTokenInformation
SetEntriesInAclA
SetSecurityInfo
LookupPrivilegeValueA
AdjustTokenPrivileges

msvcrt

??2@YAPAXI@Z
??3@YAXPAX@Z
fclose
fwrite
fopen
free
memset
memcpy
_stricmp
strcpy
strcat
strncpy
strlen
strstr
strrchr
fread
rewind
ftell
fseek
sprintf
__CxxFrameHandler
_strlwr
malloc
printf

ws2_32

htons
socket
WSACleanup
WSAStartup
recv
send
gethostbyname
connect
closesocket

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

wininet

InternetReadFile
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle

Exports

Exports

Install

Sections

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35852a6d5f19e74a8ceeecc688a1fb44

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

ws2_32

msvcp60

wininet

Exports

Exports

Sections

.bss Size: - Virtual size: 4KB

.data Size: 36KB - Virtual size: 36KB

.reloc Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 4KB

.data
Size: 36KB - Virtual size: 36KB

.reloc
Size: 2KB - Virtual size: 2KB