41d61ad0eee7039abbbdcaaeebb41afe28c2989cc1c1dd704c758a8f4991cb1c

Sharing

Copy URL

Twitter E-mail

General

Target

41d61ad0eee7039abbbdcaaeebb41afe28c2989cc1c1dd704c758a8f4991cb1c
Size

180KB
MD5

1e227951609e8e3947f5cbb5deb525aa
SHA1

8588244ae560d8954f10372e0069aa186cd19628
SHA256

41d61ad0eee7039abbbdcaaeebb41afe28c2989cc1c1dd704c758a8f4991cb1c
SHA512

2285e8dbe6a800ba1f26a1618588bbed1caf6986da150f73b21556dc416b8ae68a931c946b7809c350e6b15415496ff455673a1fbc5376a683d96d4ac841fd0f
SSDEEP

3072:4iKtV/UqhUh/+le4Q2rBdBMAiOiZ2tSgT:4fV/UqhU8lBBdBMdJT

Score

N/A

Malware Config

Signatures

Files

41d61ad0eee7039abbbdcaaeebb41afe28c2989cc1c1dd704c758a8f4991cb1c
.dll windows x86

67c59fa2a7e88bc8852ca0d05a68e413

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
LoadLibraryW
GetProcAddress
LoadLibraryA
GetModuleFileNameA
GetModuleHandleA
ExitProcess
SystemTimeToFileTime
GetPrivateProfileIntA
CreateProcessA
GetPrivateProfileStringA
GetLocalTime
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
GetLastError
MultiByteToWideChar
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
WideCharToMultiByte
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetTimeZoneInformation
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
LCMapStringA
LCMapStringW
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
HeapSize
CloseHandle
WriteConsoleA
CreateFileA

user32

wsprintfW
MessageBoxA
MessageBoxW
wsprintfA

Exports

Exports

ECCGenerateKeys
GenUniqueLicenseHash
WLActCheck
WLActDaysToActivate
WLActExpirationDate
WLActGetInfo
WLActInstall
WLActUninstall
WLBufferCrypt
WLBufferDecrypt
WLGenLicenseDynSmartKey
WLGenLicenseDynSmartKeyW
WLGenLicenseFileKey
WLGenLicenseFileKeyEx
WLGenLicenseFileKeyExW
WLGenLicenseFileKeyW
WLGenLicenseRegistryKey
WLGenLicenseRegistryKeyEx
WLGenLicenseRegistryKeyExW
WLGenLicenseRegistryKeyW
WLGenLicenseSmartKey
WLGenLicenseSmartKeyW
WLGenLicenseTextKey
WLGenLicenseTextKeyEx
WLGenLicenseTextKeyExW
WLGenLicenseTextKeyW
WLGenPassword
WLGenTrialExtensionFileKey
WLGenTrialExtensionRegistryKey
WLGetCurrentCountry
WLGetVersion
WLHardwareCheckID
WLHardwareGetFormattedID
WLHardwareGetID
WLHardwareRuntimeCheckU3
WLLoadEncryptedLibrary
WLLoadWinlicenseDll
WLPasswordCheck
WLProtectCheckDebugger
WLRegCheckMachineLocked
WLRegDateDaysLeft
WLRegDaysLeft
WLRegDisableCurrentKey
WLRegDisableKeyCurrentInstance
WLRegExecutionsLeft
WLRegExpirationDate
WLRegFirstRun
WLRegGetDynSmartKey
WLRegGetLicenseHardwareID
WLRegGetLicenseInfo
WLRegGetLicenseInfoW
WLRegGetStatus
WLRegGlobalTimeLeft
WLRegLicenseCreationDate
WLRegLicenseName
WLRegLockedCountry
WLRegNormalKeyCheck
WLRegNormalKeyCheckW
WLRegNormalKeyInstallToFile
WLRegNormalKeyInstallToFileW
WLRegNormalKeyInstallToRegistry
WLRegNormalKeyInstallToRegistryW
WLRegRemoveCurrentKey
WLRegRuntimeLeft
WLRegSmartKeyCheck
WLRegSmartKeyCheckW
WLRegSmartKeyInstallToFile
WLRegSmartKeyInstallToFileInFolder
WLRegSmartKeyInstallToFileW
WLRegSmartKeyInstallToRegistry
WLRegSmartKeyInstallToRegistryW
WLRegTotalDays
WLRegTotalExecutions
WLResetLicenseFeatures
WLRestartApplication
WLRestartApplicationArgs
WLSplashHide
WLStringDecrypt
WLStringDecryptW
WLTrialCustomCounter
WLTrialCustomCounterDec
WLTrialCustomCounterInc
WLTrialCustomCounterSet
WLTrialDateDaysLeft
WLTrialDaysLeft
WLTrialExecutionsLeft
WLTrialExpirationDate
WLTrialExpireTrial
WLTrialExtGetLevel
WLTrialExtGetStatus
WLTrialExtendExpiration
WLTrialFirstRun
WLTrialGetStatus
WLTrialGlobalTimeLeft
WLTrialLockedCountry
WLTrialRuntimeLeft
WLTrialTotalDays
WLTrialTotalExecutions
_TestWinLicenseSDK@0

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 996B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67c59fa2a7e88bc8852ca0d05a68e413

Headers

File Characteristics

Imports

kernel32

user32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 40KB - Virtual size: 38KB

.data Size: 8KB - Virtual size: 17KB

.rsrc Size: 4KB - Virtual size: 996B

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 40KB - Virtual size: 38KB

.data
Size: 8KB - Virtual size: 17KB

.rsrc
Size: 4KB - Virtual size: 996B

.reloc
Size: 8KB - Virtual size: 6KB