fd37f18ccc247ce5f615510de8fc0fcb7660cd026d656cd202118388c94efca6

Sharing

Copy URL

Twitter E-mail

General

Target

fd37f18ccc247ce5f615510de8fc0fcb7660cd026d656cd202118388c94efca6
Size

256KB
MD5

201c5e22c739390f82421e1f6c6294d0
SHA1

9c54b487c362aa0fcefdd17e86d5be8402061536
SHA256

fd37f18ccc247ce5f615510de8fc0fcb7660cd026d656cd202118388c94efca6
SHA512

2838c9dbdd8ffee8fcce5812ac4bfbff98035cd88efd4a1fa68fe81334e94b03c295b5e4037622d7754578560ec53fced774442e382d84b812ef68418424a22a
SSDEEP

6144:d4wpBSAZ+FDlVkrTDFKXgWtUrkzZaFcJqdMNxvTKGnMQc:e+Z+xlmNKvUriO8xTpMZ

Score

N/A

Malware Config

Signatures

Files

fd37f18ccc247ce5f615510de8fc0fcb7660cd026d656cd202118388c94efca6
.dll windows x86

dcc244ee4415f5bf5434302ead598f9f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSizeEx
LoadLibraryA
VirtualProtect

user32

SetProcessWindowStation

gdi32

CreateDCA

advapi32

ChangeServiceConfigA

shell32

SHFileOperationA

ole32

CoCreateInstance

msvcrt

_adjust_fdiv

msvcp60

??1_Winit@std@@QAE@XZ

psapi

GetModuleFileNameExA

ws2_32

shutdown

netapi32

NetUserDel

dnsapi

DnsQuery_A

shlwapi

PathStripPathA

wtsapi32

WTSQuerySessionInformationA

rasapi32

RasEnumEntriesA

userenv

CreateEnvironmentBlock

wininet

InternetOpenUrlA

avicap32

capGetDriverDescriptionA

iphlpapi

GetAdaptersInfo

Exports

Exports

DllMain
Install
ServiceMain
ShellMain
ShellMainThread
UnInstall
zxFunction001
zxFunction002

Sections

.text
Size: - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pps0
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pps1
Size: - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pps2
Size: 248KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcc244ee4415f5bf5434302ead598f9f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

msvcrt

msvcp60

psapi

ws2_32

netapi32

dnsapi

shlwapi

wtsapi32

rasapi32

userenv

wininet

avicap32

iphlpapi

Exports

Exports

Sections

.text Size: - Virtual size: 125KB

.rdata Size: - Virtual size: 17KB

.data Size: - Virtual size: 64KB

.pps0 Size: - Virtual size: 10KB

.pps1 Size: - Virtual size: 104KB

.pps2 Size: 248KB - Virtual size: 244KB

.reloc Size: 4KB - Virtual size: 172B

.text
Size: - Virtual size: 125KB

.rdata
Size: - Virtual size: 17KB

.data
Size: - Virtual size: 64KB

.pps0
Size: - Virtual size: 10KB

.pps1
Size: - Virtual size: 104KB

.pps2
Size: 248KB - Virtual size: 244KB

.reloc
Size: 4KB - Virtual size: 172B