f74399cc0be275376dad23151e3d0c2e2a1c966e6db6a695a05ec1a30551c0ad

Sharing

Copy URL Twitter E-mail

General

Target

f74399cc0be275376dad23151e3d0c2e2a1c966e6db6a695a05ec1a30551c0ad
Size

43KB
MD5

26f5d66b94d3bf161a896323f753a06b
SHA1

974ca8f4a4e92b31ecb23eb351da5a0027c0b764
SHA256

f74399cc0be275376dad23151e3d0c2e2a1c966e6db6a695a05ec1a30551c0ad
SHA512

8d4c74e1e19d283d8ca623fd523556e2952b7d019ebbae1152d55edabe0b8a68b4d628bed84f0ec4e82841d9030d1d4959b3187b5188c95428e763ee81e4436c
SSDEEP

768:M2P0008KCTzXaYCgmPMrAQ/USEtaZR9k/Ii2eoN8:zP9KC3nCgOMrAQcSiaKIi

Score

N/A

Malware Config

Signatures

Files

f74399cc0be275376dad23151e3d0c2e2a1c966e6db6a695a05ec1a30551c0ad
.dll windows x86

fc2708ef47a37f6345a3c07b1b9f7bdc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

ShowWindow
wsprintfA
DefWindowProcA
PostQuitMessage
DispatchMessageA
RegisterClassExA
CreateWindowExA
MoveWindow
SendMessageA
RegisterDeviceNotificationA
GetMessageA
TranslateMessage

advapi32

OpenProcessToken
QueryServiceStatus
ControlService
DeleteService
OpenSCManagerA
CreateServiceA
OpenServiceA
StartServiceA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegQueryValueExA

ws2_32

htonl
gethostbyname
gethostname
inet_ntoa

mpr

WNetCloseEnum
WNetOpenEnumA
WNetCancelConnection2A
WNetAddConnection2A
WNetEnumResourceA

msvcrt

free
time
srand
tolower
_strlwr
_stricmp
strcpy
rand
fputs
strstr
_initterm
fgets
fclose
memset
memcmp
strlen
strcat
sprintf
memcpy
_except_handler3
strcmp
strncpy
malloc
_adjust_fdiv
fopen

kernel32

GetDriveTypeA
GetLogicalDrives
FindNextChangeNotification
WaitForMultipleObjects
DeviceIoControl
OpenEventA
CreateThread
ReadProcessMemory
CopyFileA
FindFirstChangeNotificationA
ExitThread
DisableThreadLibraryCalls
FreeLibrary
FindFirstFileA
lstrcmpiA
FindNextFileA
FindClose
Sleep
WaitForSingleObject
GlobalAlloc
OpenMutexA
OpenProcess
OpenThread
QueueUserAPC
Thread32First
Thread32Next
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemDirectoryA
GetModuleHandleA
lstrlenA
MultiByteToWideChar
SetFileAttributesA
GetFileTime
CreateFileMappingA
MapViewOfFile
GetFileSize
SetFilePointer
SetFileTime
UnmapViewOfFile
RemoveDirectoryA
GetTempFileNameA
MoveFileA
TerminateProcess
GetThreadContext
VirtualAllocEx
WriteProcessMemory
SetThreadContext
ResumeThread
CreateMutexA
GetLastError
WideCharToMultiByte
GetModuleFileNameA
GetProcAddress
LoadLibraryA
GetCurrentProcess
WriteFile
DeleteFileA
CloseHandle
CreateFileA
GetTempPathA
ReadFile
GetCurrentProcessId
CreateProcessA
GetVolumeInformationA
GetVersionExA
GetFileAttributesA
lstrcpynA
lstrcatA
GetWindowsDirectoryA
ExitProcess
VirtualFree
VirtualAlloc

Exports

Exports

CompareLinkInfoReferents
CompareLinkInfoVolumes
CreateLinkInfo
CreateLinkInfoA
CreateLinkInfoW
DestroyLinkInfo
DisconnectLinkInfo
GetCanonicalPathInfo
GetCanonicalPathInfoA
GetCanonicalPathInfoW
GetLinkInfoData
IsValidLinkInfo
ResolveLinkInfo
ResolveLinkInfoA
ResolveLinkInfoW

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fc2708ef47a37f6345a3c07b1b9f7bdc

Headers

File Characteristics

Imports

user32

advapi32

ws2_32

mpr

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 17KB - Virtual size: 17KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 17KB - Virtual size: 17KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 2KB - Virtual size: 2KB