b7c600ec37bd7557f3b06f7e229cc40e760ae4d8d7dc4271b8a6b1851a3c40cd

Sharing

Copy URL Twitter E-mail

General

Target

b7c600ec37bd7557f3b06f7e229cc40e760ae4d8d7dc4271b8a6b1851a3c40cd
Size

176KB
MD5

ea2c0d377d330e8b48b1a29fad932041
SHA1

3bdd92670c16b375e97baf0cf79b019323c6b331
SHA256

b7c600ec37bd7557f3b06f7e229cc40e760ae4d8d7dc4271b8a6b1851a3c40cd
SHA512

81efe59191e99ed24b34127bfef7a51c4e9f6a58b9bc5b04145f5a0248a62aad2104a6e67c3b9f87603d5bbcdcfca07d3279274ac87356dc11a2295c66c2bbac
SSDEEP

3072:7jT7KQMUL8LrfRxR9c9shUyKJb1UW3HE/02DhR:aQMtLL19vnKJby2Edh

Score

N/A

Malware Config

Signatures

Files

b7c600ec37bd7557f3b06f7e229cc40e760ae4d8d7dc4271b8a6b1851a3c40cd
.dll windows x86

861acf42be3ed0b1655d5ef80c07b2f2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
CreateProcessA
CopyFileA
GetModuleFileNameA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileSectionNamesA
SetFileAttributesA
GetTempPathA
CreateDirectoryA
GetVersionExA
GetExitCodeProcess
OpenProcess
WideCharToMultiByte
GetSystemDirectoryA
GetWindowsDirectoryA
GetSystemInfo
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetLastError
FreeLibrary
SetComputerNameA
GetComputerNameA
GetLocalTime
CreateFileA
SetFilePointer
CloseHandle
InterlockedExchange
RaiseException
LocalFree
Sleep
LocalAlloc
WriteFile

user32

PeekMessageA
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
GetDlgItem
FindWindowA
SendMessageA
wvsprintfA
wsprintfA
PostMessageA
ShowWindow
SetForegroundWindow
SetCursorPos
MoveWindow
GetWindowRect
GetDesktopWindow
SystemParametersInfoA
DispatchMessageA
EnumWindows
keybd_event
SetFocus
GetWindowTextA
MessageBoxA
CallNextHookEx
SetWindowLongA
GetWindowLongA
SetWindowPos

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegCreateKeyA

shell32

SHAppBarMessage
ShellExecuteA

ole32

OleRun
CoCreateInstance
CoInitialize
CoUninitialize

oleaut32

VariantClear
GetErrorInfo

tapi32

lineGetTranslateCaps
lineGetCountry

mdmvers

MdmVers_SetLocalizationFileName
MdmVers_GetLocalizationFileName
MdmVers_GetCountryName

mdmsetup

MDMSetup_MakeEnumeratorList
MDMSetup_DeleteEnumeratorList

mdminfo

SuperDiagMdm_ProgramNameToRun

msvcrt

_itoa
_stricmp
_CxxThrowException
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
_strnicmp
realloc
strstr
atoi
fopen
fgets
fprintf
fclose
_access
free
strrchr
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
strncpy
strchr
memmove
malloc

Exports

Exports

AutoSetComputerAndWorkgroupName
AutoSetWorkgroupName
BrowserProgramName
CloseBrowser
DeleteNicHelperKey
DisplayHtmlPage
EndIEProgressBar
ExtractInputVariable
GetComputerDefault
GetWorkgroupDefault
IE4OrBetter
InitializeBrowser
InputResultFromInternetExplorer
LastResultFromInternetExplorer
MaximizeBrowser
MinimizeBrowser
PositionIEProgressBar
ReadInputResultFromInternetExplorer
RefreshHtmlPage
ResultFromInternetExplorer
SetComputerAndWorkgroupName
SetComputerDefault
SetIEProgressBar
SetInputVariable
SetWorkgroupDefault
ShowWithTaskBar
ShowWithoutTaskBar
StartIEProgressBar
StopIEProgressBar

Sections

.text
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Sdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

861acf42be3ed0b1655d5ef80c07b2f2

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

tapi32

mdmvers

mdmsetup

mdminfo

msvcrt

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 22KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 4KB - Virtual size: 9KB

.Sdata Size: 32KB - Virtual size: 28KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 22KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 4KB - Virtual size: 9KB

.Sdata
Size: 32KB - Virtual size: 28KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 4KB - Virtual size: 3KB