YouNewRules[.]local

Sharing

Copy URL

Twitter E-mail

General

Target

YouNewRules.local
Size

516KB
MD5

934ce14971f8b392035091f6c4b8359b
SHA1

1c64dc1cf040e89834a787722ed49367d515184c
SHA256

0e1f44187d73e706600e63c7ffb8132be360e44962a4f6ef2e34f53cdd8681b2
SHA512

0cc8d1645913f8a44cfd7d7f5a1e83f5416637f62ce54cf07fee88673d81c567598633dac60dcc38484a12cb4f3a329326690b642e01e6a7ced4824a7ac3e147
SSDEEP

6144:wiIqnct7uycRpLrFPQleGc2BpeQvfTiD3MJIyFX+OwjzK9y9KOc6rXPMATcBu:wihnctArBgRprvbiIIAuz19nTMAgc

Score

N/A

Malware Config

Signatures

Files

YouNewRules.local
.dll windows x86

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
GetLastError
CloseHandle
WriteFile
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
GlobalMemoryStatus
GetTickCount
FindFirstFileA
OpenFile
lstrcpynA
GetDriveTypeA
IsDBCSLeadByte
lstrlenA
GetFileAttributesA
_lclose
_llseek
_lread
_lwrite
DeleteFileA
FreeLibrary
GetDiskFreeSpaceA
GetTempFileNameA
GetTempPathA
lstrcatA
lstrcpyA
FindClose
CompareStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
SetEnvironmentVariableA
CompareStringW
IsDBCSLeadByteEx
MoveFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapCompact
RaiseException
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr

user32

MessageBoxA
CharUpperBuffA
CharToOemBuffA
OemToCharBuffA
GetActiveWindow

mpr

WNetEnumResourceA
WNetCloseEnum
WNetGetConnectionA
WNetOpenEnumA
WNetAddConnection2A

Exports

Exports

TDFAddDocJavaScript
TDFAddTemplate
TDFClose
TDFCreate
TDFEmbedAndClose
TDFEnumValues
TDFExtractAppendSaves
TDFExtractAttachment
TDFGetAP
TDFGetEncoding
TDFGetFDFVersion
TDFGetFile
TDFGetFlags
TDFGetID
TDFGetNthValue
TDFGetOpt
TDFGetStatus
TDFGetValue
TDFGetVersion
TDFNextFieldName
TDFOpen
TDFOpenFromEmbedded
TDFRemoveItem
TDFSave
TDFSetAP
TDFSetAPRef
TDFSetAS
TDFSetEncoding
TDFSetFDFVersion
TDFSetFile
TDFSetFileEx
TDFSetFlags
TDFSetGoToAction
TDFSetGoToRAction
TDFSetHideAction
TDFSetID
TDFSetIF
TDFSetImportDataAction
TDFSetJavaScriptAction
TDFSetNamedAction
TDFSetOnImportJavaScript
TDFSetOpt
TDFSetResetByNameAction
TDFSetResetFormAction
TDFSetStateAction
TDFSetStatus
TDFSetSubmitByNameAction
TDFSetSubmitFormAction
TDFSetTargetFrame
TDFSetURIAction
TDFSetValue
Updt

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

Imports

kernel32

user32

mpr

Exports

Exports

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 36KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 124KB - Virtual size: 123KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 36KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 124KB - Virtual size: 123KB