3fe92e14559ee6d25620f46d4166cc6b1c0bf234123943f2c6db1094a7b9f3bb

Sharing

Copy URL Twitter E-mail

General

Target

3fe92e14559ee6d25620f46d4166cc6b1c0bf234123943f2c6db1094a7b9f3bb
Size

153KB
MD5

5d93abd83d57cedfa0c19d9706d47bc3
SHA1

0bd5661150fbb67267d06f93669c0306731e04f1
SHA256

3fe92e14559ee6d25620f46d4166cc6b1c0bf234123943f2c6db1094a7b9f3bb
SHA512

09724378f50a5008f2bd7d1583781b0b85b5b9e10c0441806b1b23d63f1394955f272dec57b9515d66bd1e48fdbdbf28bb950774c6b826b8f69e1a6b9e690f5e
SSDEEP

1536:M+UC9K2OAShB+zN7qf9dbM2a8hFc2SoBJt/c1z5VF9/3leWGUGoCrG2XVXBrmog:M+Uacexq+8gn1FPdaG2XVXBrmT

Score

1^/10

Malware Config

Signatures

Files

3fe92e14559ee6d25620f46d4166cc6b1c0bf234123943f2c6db1094a7b9f3bb
.dll windows x86

06ea2d72a19948d127c668a02c20d871

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ollydbg.exe

_Addtolist
_Deletenamerange
_Disasm
_Finddecode
_Findlabel
_Findmemory
_Findmodule
_Findthread
_Getcputhreadid
_Getstatus
_Insertname
_Plugingetvalue
_Readmemory
_Redrawdisassembler
_Setcpu

kernel32

CloseHandle
CreateFileA
EnterCriticalSection
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileSize
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultLangID
GetUserDefaultLCID
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapCreate
HeapFree
IsValidLocale
LCMapStringA
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
RaiseException
ReadFile
RtlUnwind
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetFilePointer
SetHandleCount
SetLastError
SetThreadLocale
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA

comctl32

InitCommonControlsEx

shell32

ShellExecuteA

user32

CallWindowProcA
ClientToScreen
DestroyMenu
DialogBoxParamA
EnableWindow
EndDialog
EnumThreadWindows
GetCursorPos
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetSubMenu
GetSystemMetrics
GetWindowRect
GetWindowTextLengthA
IsDlgButtonChecked
LoadMenuA
MessageBoxA
MoveWindow
SendMessageA
SetDlgItemInt
SetDlgItemTextA
SetWindowLongA
TrackPopupMenu
wsprintfA

Exports

Exports

_ODBG_Pluginaction
_ODBG_Plugindata
_ODBG_Plugindestroy
_ODBG_Plugininit
_ODBG_Pluginmenu
___CPPdebugHook

Sections

.text
Size: 55KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

06ea2d72a19948d127c668a02c20d871

Headers

File Characteristics

Imports

ollydbg.exe

kernel32

comctl32

shell32

user32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 56KB

.data Size: 11KB - Virtual size: 16KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 3KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 4KB

.reloc Size: 3KB - Virtual size: 4KB

.rmnet Size: 76KB - Virtual size: 76KB

.text
Size: 55KB - Virtual size: 56KB

.data
Size: 11KB - Virtual size: 16KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 3KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 4KB

.reloc
Size: 3KB - Virtual size: 4KB

.rmnet
Size: 76KB - Virtual size: 76KB