a13a8053bf028721f4d21a747dde938a79028a230cbcdddaf08184433d3fb59c

Sharing

Copy URL Twitter E-mail

General

Target

a13a8053bf028721f4d21a747dde938a79028a230cbcdddaf08184433d3fb59c
Size

89KB
MD5

f731ed896a06f2c811e9fb387dcc3289
SHA1

051bbab822cb93767a3472d70ab6844d0e1f3a86
SHA256

a13a8053bf028721f4d21a747dde938a79028a230cbcdddaf08184433d3fb59c
SHA512

b750724dd1007d6dabdfe96c3a2b6a9e6dca3cbe2771ef10b8f03e74b7a3ddb8e76b79ecf7b3ab6e170e19fc49e478b0245d365a1d820e3372a385743659e37a
SSDEEP

1536:edC43h5GygwZMvezhF/cjaFalADa1SDFR4SkMd5RgGKRCmWLyIYRd25mN:edjDGygw18DADa1SDFR4SkMHRkRCmYuJ

Score

N/A

Malware Config

Signatures

Files

a13a8053bf028721f4d21a747dde938a79028a230cbcdddaf08184433d3fb59c
.dll windows x86

315c19d030b19439dffd3a8c6d16208a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

realloc
_snprintf
_initterm
time
strlen
srand
rand
malloc
strrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
wcsstr
_strlwr
sscanf
memset
strcat
strstr
memcpy
wcsncpy
wcslen
strcpy
__CxxFrameHandler
strchr
strncpy
atoi
free
_except_handler3
_adjust_fdiv
_strcmpi
_stricmp

kernel32

WideCharToMultiByte
DisableThreadLibraryCalls
ExitProcess
CreateMutexA
GetLastError
WinExec
CloseHandle
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
LoadLibraryA
OpenEventA
ReadFile
OutputDebugStringW
WritePrivateProfileStringA
VirtualProtect
GetCommandLineA
GetPrivateProfileStringA
IsBadReadPtr
lstrlenW
VirtualProtectEx

user32

wsprintfA
wvsprintfA

wininet

InternetReadFile

urlmon

URLDownloadToCacheFileA

Exports

Exports

WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.text
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DDK0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DDK1
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Tox
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

315c19d030b19439dffd3a8c6d16208a

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

wininet

urlmon

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 20KB - Virtual size: 25KB

DDK0 Size: 4KB - Virtual size: 3KB

DDK1 Size: 16KB - Virtual size: 14KB

.reloc Size: 4KB - Virtual size: 3KB

Tox Size: 512B - Virtual size: 512B

.text
Size: 32KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 20KB - Virtual size: 25KB

DDK0
Size: 4KB - Virtual size: 3KB

DDK1
Size: 16KB - Virtual size: 14KB

.reloc
Size: 4KB - Virtual size: 3KB

Tox
Size: 512B - Virtual size: 512B