fa2c75b51a5dcc0e2e752a50402c94e8f7b793faa357723c47bc86fe1b25272d

Sharing

Copy URL Twitter E-mail

General

Target

fa2c75b51a5dcc0e2e752a50402c94e8f7b793faa357723c47bc86fe1b25272d
Size

360KB
MD5

d9d0c7ffbc82ebb1f59e9a1058f60ebb
SHA1

d202502100a0517a06efb759d149a06828aa3a08
SHA256

fa2c75b51a5dcc0e2e752a50402c94e8f7b793faa357723c47bc86fe1b25272d
SHA512

607e7bc761ad65685e1fecd7f6496ea0cfc34e8791d8b11e6d12fc6eb4ea622f9e9ad0013d2207b664a9a7bac952cf68863edbe7b4ffaf98b61bebbff8d47d2b
SSDEEP

6144:byNznDQ87kvCOghwTjp8Kz5l+GyRvwbi1QPFbH05Lyy3ZoibyNCQGFjWG9qUePJR:byNbDQ87kvCJhwTjp8Kz5l+GyRvwbi1P

Score

N/A

Malware Config

Signatures

Files

fa2c75b51a5dcc0e2e752a50402c94e8f7b793faa357723c47bc86fe1b25272d
.dll windows x86

69e0414a34949e42dbc0247c24becf1b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

pncrt

_adjust_fdiv
_initterm
_onexit
__dllonexit
printf
_mbctype
strncpy
fopen
fseek
ftell
fread
fclose
rename
_chmod
isspace
isalpha
_ismbcspace
_vsnprintf
_stricmp
??2@YAPAXI@Z
_lseeki64
_telli64
_errno
_chsize
_fstat
malloc
getenv
free
realloc
localtime
time
_strdup
_strnicmp
_putenv
_creat
_close
fflush
fwrite
memset
strcmp
strcat
memcpy
strlen
strcpy
_open
_sopen
_lseek
_tell
_read
_write
_unlink
_mkdir
_rmdir
_getcwd
_chdir
??3@YAXPAX@Z
strrchr
atoi
atol
ceil
_ftol
sprintf
strchr
_purecall
isalnum
memmove
strstr
memchr
__CxxFrameHandler
strftime
_stat
rand

ole32

CoUninitialize
CoCreateInstance
CoInitialize

kernel32

GetFileSize
FindFirstFileA
GetDriveTypeA
GetModuleFileNameA
GetFileAttributesA
SetEvent
GetWindowsDirectoryA
FindClose
FindNextFileA
GetVersion
GetVersionExA
GetSystemDirectoryA
GetTempFileNameA
CreateFileMappingA
MapViewOfFile
GetLastError
UnmapViewOfFile
GetSystemInfo
LoadLibraryA
GetCurrentProcess
GetProcAddress
FreeLibrary
CreateFileA
DeleteFileA
OpenFile
_lread
_llseek
_lclose
WideCharToMultiByte
lstrcpynA
MoveFileExA
GetPrivateProfileSectionA
WritePrivateProfileSectionA
lstrlenA
GetShortPathNameA
GetProfileStringA
GetPrivateProfileStringA
lstrcpyA
WritePrivateProfileStringA
MultiByteToWideChar
CreateProcessA
SetErrorMode
CreateDirectoryA
InterlockedDecrement
InterlockedIncrement
LocalFree
LocalUnlock
LocalLock
LocalAlloc
CloseHandle
WaitForSingleObject
GetTickCount
GetTempPathA
OpenEventA
GetDiskFreeSpaceA
GetSystemTime
CreateThread
TerminateProcess
OpenProcess
Sleep
WinExec
GetExitCodeProcess

user32

CharUpperA
ExitWindowsEx
DdeCreateDataHandle
MessageBoxA
CharLowerA
DdeClientTransaction
DdeGetData
CreateWindowExA
DdeFreeDataHandle
DdeDisconnect
DdeUninitialize
DdeInitializeA
DdeCreateStringHandleA
DdeConnect
DdeFreeStringHandle
IsWindowVisible
wsprintfA
SendMessageTimeoutA
GetWindowThreadProcessId
EnumWindows
FindWindowA
GetWindow
GetWindowTextA
GetClassNameA
IsWindow
GetParent
GetPropA
GetWindowLongA
SetPropA
PostMessageA
SetTimer
GetMessageA
TranslateMessage
DispatchMessageA
PostQuitMessage
KillTimer
PeekMessageA
DestroyWindow
GetClassInfoA
RegisterClassA
GetSystemMetrics
CharPrevA
CharNextA
DefWindowProcA

advapi32

RegCreateKeyA
RegSetValueA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

wininet

InternetCloseHandle
InternetReadFile
InternetConnectA
InternetOpenA
HttpOpenRequestA
HttpSendRequestA

Exports

Exports

?DdeCallback@@YGPAUHDDEDATA__@@IIPAUHCONV__@@PAUHSZ__@@1PAU1@KK@Z
NR_RegAddKey
NR_RegAddKeyRaw
NR_RegClose
NR_RegDeleteEntry
NR_RegDeleteKey
NR_RegDeleteKeyRaw
NR_RegEnumEntries
NR_RegEnumSubkeys
NR_RegGetEntry
NR_RegGetEntryInfo
NR_RegGetEntryString
NR_RegGetKey
NR_RegGetKeyRaw
NR_RegGetUsername
NR_RegIsWritable
NR_RegOpen
NR_RegSetEntry
NR_RegSetEntryString
NR_RegSetUsername
NR_ShutdownRegistry
NR_StartupRegistry
RMACreateInstance
RMAShutdown
RNCreateInstance
RPCreateClass
SetDLLAccessPath
VR_Close
VR_CreateRegistry
VR_Enum
VR_EnumUninstall
VR_GetDefaultDirectory
VR_GetPath
VR_GetRefCount
VR_GetUninstallUserName
VR_GetVersion
VR_InRegistry
VR_Install
VR_Remove
VR_SetDefaultDirectory
VR_SetRefCount
VR_SetRegDirectory
VR_UninstallAddFileToList
VR_UninstallCreateNode
VR_UninstallDeleteFileFromList
VR_UninstallDeleteSharedFilesKey
VR_UninstallDestroy
VR_UninstallEnumSharedFiles
VR_UninstallFileExistsInList
VR_ValidateComponent

Sections

.text
Size: 240KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

69e0414a34949e42dbc0247c24becf1b

Headers

File Characteristics

Imports

pncrt

ole32

kernel32

user32

advapi32

version

wininet

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 238KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 1024B

.reloc Size: 16KB - Virtual size: 12KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 240KB - Virtual size: 238KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 1024B

.reloc
Size: 16KB - Virtual size: 12KB

.rmnet
Size: 60KB - Virtual size: 60KB