e57b85c62bb7f68e1812df1ff6e3c915549de42a82e59836909a8da0be79a224

Sharing

Copy URL Twitter E-mail

General

Target

e57b85c62bb7f68e1812df1ff6e3c915549de42a82e59836909a8da0be79a224
Size

1.2MB
MD5

08a44d63cdd07cd1b10924702aaa90a8
SHA1

f4922f770595e7107300ac99f156232daaa96d7d
SHA256

e57b85c62bb7f68e1812df1ff6e3c915549de42a82e59836909a8da0be79a224
SHA512

2ad78131c0b0488684cd28a2b5bd11c84ebbb1adcd05d6e968d21157196089fe67a3ee0611158888bff53892aafa1c47636ad97ed31eb0fac6de6487c6e15d4b
SSDEEP

3072:/+2iFKmLsd0nPz/RuP9a/loVmpmBlS42/N5KBoLLCz82DGu:QK/ePzZuPOl1pASlN5fC

Score

N/A

Malware Config

Signatures

Files

e57b85c62bb7f68e1812df1ff6e3c915549de42a82e59836909a8da0be79a224
.dll windows x86

dd297c1a2ba4877b1dc660666c7de8d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GlobalFlags
lstrcmpA
LoadLibraryA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetProcAddress
GetLastError
GetVersion
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
Beep
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentThreadId
SetLastError
FreeLibrary
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
VirtualQueryEx
VirtualProtectEx
WriteProcessMemory
GetCurrentProcess
GetTickCount
CreateThread
ExitThread
GetWindowsDirectoryA
SetFileAttributesA
CloseHandle
GetModuleHandleA
GetModuleFileNameA
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetFileAttributesA
GetLocalTime
lstrlenA
GetFileType

user32

SetWindowTextA
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
ClientToScreen
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
PostQuitMessage
DestroyMenu
MapWindowPoints
GetSysColor
GetFocus
SetFocus
AdjustWindowRectEx
GetTopWindow
GetCapture
LoadIconA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
PeekMessageA
DispatchMessageA
PostMessageA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
CopyRect
GetClientRect
GetDC
EnableWindow
MessageBoxA
GetWindowThreadProcessId
KillTimer
SetTimer
GetKeyState
WinHelpA
GetWindowDC
ReleaseDC
SendMessageA

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
DeleteObject
TextOutA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comctl32

ord17

wsock32

gethostbyname
gethostname
ntohs
inet_addr
getpeername
WSASetLastError
accept
ioctlsocket
WSACleanup
htons
htonl
closesocket
recv
send
WSAAsyncSelect
inet_ntoa
socket
recvfrom
sendto
connect
WSAStartup
WSAGetLastError
listen
shutdown
bind

wininet

InternetCloseHandle
InternetOpenUrlA
InternetCanonicalizeUrlA
InternetGetConnectedState
InternetOpenA
InternetReadFile

Exports

Exports

LOAD

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd297c1a2ba4877b1dc660666c7de8d0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comctl32

wsock32

wininet

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 8KB - Virtual size: 63KB

Shared Size: 1.1MB - Virtual size: 1.1MB

.reloc Size: 24KB - Virtual size: 21KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 8KB - Virtual size: 63KB

Shared
Size: 1.1MB - Virtual size: 1.1MB

.reloc
Size: 24KB - Virtual size: 21KB