983997416f7f2d226c404011d4f57caa7e78e85f3c5bd081f900059058984491

Sharing

Copy URL Twitter E-mail

General

Target

983997416f7f2d226c404011d4f57caa7e78e85f3c5bd081f900059058984491
Size

21KB
MD5

393b2aa5c067a5e842fa5861b50d4590
SHA1

2c8d48602e10a22895c4c6f286c24db30cdb75fd
SHA256

983997416f7f2d226c404011d4f57caa7e78e85f3c5bd081f900059058984491
SHA512

b490a421c7901961de65d3db8661bf40b1d7c891476e20acb66d1b2a885fabb70151c0b5f21accc9f0a7f25ab21e12d612cbadf935ff20479662cb86d2b7a2db
SSDEEP

384:asKu+YhlNJ+dI0xPtO3Zp8GbWGPyeIv2UPyDLvTR8p:Fl3+S0mZpTRrQ2UP+L18

Score

N/A

Malware Config

Signatures

Files

983997416f7f2d226c404011d4f57caa7e78e85f3c5bd081f900059058984491
.dll windows x86

e5279a07ca91db06455485728c1407a4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
LocalFree
GetLastError
GetVersionExA
GlobalFree
GlobalAlloc
HeapFree
HeapAlloc
GetProcessHeap
SearchPathA
GetTempPathA
GetTickCount
FreeLibrary
lstrlenA
lstrcpyA
Process32Next
Process32First
CreateToolhelp32Snapshot
VirtualFreeEx
WaitForSingleObject
WriteProcessMemory
VirtualAllocEx
CreateRemoteThread
DuplicateHandle
GetCurrentProcess
VirtualProtectEx
OpenProcess
GetCurrentProcessId
CreateMutexA
CreateThread
ReleaseMutex
GetSystemDirectoryA
DeleteFileA
FindFirstFileA
CreateFileA
WriteFile
ReadFile
GetModuleHandleA
Sleep
CloseHandle
GetModuleFileNameA
lstrcmpiA
LoadLibraryA
GetProcAddress

user32

GetForegroundWindow
wsprintfA
GetWindowTextA

gdi32

GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateDCA

advapi32

LookupPrivilegeValueA
SetSecurityInfo
SetEntriesInAclA
GetTokenInformation
OpenProcessToken
AdjustTokenPrivileges

msvcrt

mbstowcs
strlen
memcpy
memset
strcpy
strcat
strncpy
strstr
strrchr
wcscmp
malloc
fclose
fread
??2@YAPAXI@Z
rewind
ftell
fseek
fopen
??3@YAXPAX@Z
sprintf
printf
_stricmp
free
_strlwr

ws2_32

socket
WSAStartup
WSACleanup
recv
send
closesocket
htons
gethostbyname
connect

msvcp60

?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

wininet

InternetReadFile
InternetCrackUrlA
InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle

Exports

Exports

Install

Sections

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e5279a07ca91db06455485728c1407a4

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

msvcrt

ws2_32

msvcp60

wininet

Exports

Exports

Sections

.bss Size: - Virtual size: 4KB

.data Size: 18KB - Virtual size: 18KB

.reloc Size: 2KB - Virtual size: 1KB

.bss
Size: - Virtual size: 4KB

.data
Size: 18KB - Virtual size: 18KB

.reloc
Size: 2KB - Virtual size: 1KB