313dc38bada29a700a34ec2c11e61f6f3edb7e031e134afbd8bca668b494b599

Sharing

Copy URL

Twitter E-mail

General

Target

313dc38bada29a700a34ec2c11e61f6f3edb7e031e134afbd8bca668b494b599
Size

583KB
MD5

25f1acad71927d1f4f8559a75bb6319a
SHA1

33425c95c8d1cdfc5c244078fd799ca765fd6dc8
SHA256

313dc38bada29a700a34ec2c11e61f6f3edb7e031e134afbd8bca668b494b599
SHA512

5592b2cd5e5800f001e431f4d3eabeafeb80a4a53c83f6c42eb91fbf3e9f8db1d2d215a3a3701620ddb3d45616f9f8501993c5bb857285e0bcdab6270c0e6ca3
SSDEEP

12288:5ebVgxP7QIJxQeMjN59xvHF+ZwsnfgpgtHKhiqCgy0X0vpu:5ea7BQHjP9x9+ZwsnflHSiqTevpu

Score

N/A

Malware Config

Signatures

Files

313dc38bada29a700a34ec2c11e61f6f3edb7e031e134afbd8bca668b494b599
.dll windows x86

a60eddcd7c4ea68bad0bbe1c9a56a002

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FlushFileBuffers
GetACP
HeapReAlloc
GetTimeZoneInformation
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
FindClose
FindFirstFileExA
EnumSystemLocalesW
GetDateFormatW
SetFileAttributesW
GetFileAttributesExW
GetStdHandle
SetFilePointerEx
GetEnvironmentStringsW
ReadFile
SetEndOfFile
SetStdHandle
HeapFree
GetConsoleMode
GetConsoleCP
WriteFile
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
CloseHandle
FindNextFileA
CreateFileW
LoadLibraryExW
FreeLibrary
InterlockedFlushSList
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
HeapSize
GetExitCodeProcess
CreateSemaphoreA
CreateProcessA
FindFirstChangeNotificationA
GetProcessHeap
LocalFree
HeapAlloc
GetWindowsDirectoryA
ResetEvent
CreateThread
DeleteFileA
LoadLibraryA
GetCurrentThread
SetEvent
OpenMutexA
Sleep
DuplicateHandle
LocalAlloc
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
IsValidCodePage
GetOEMCP
GetCommandLineA
GetFileType
GetCommandLineW
WaitForSingleObject
CreateMutexA
GetEnvironmentVariableA
PeekNamedPipe
VirtualProtect
ReadConsoleW
MoveFileA
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
MultiByteToWideChar
GetLastError
WideCharToMultiByte
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter

user32

GetMessageA
LoadImageA
CheckMenuRadioItem
DispatchMessageA
UpdateWindow
FindWindowA
MapDialogRect
LoadIconA
EndDeferWindowPos
IntersectRect
IsWindowEnabled
GetWindowTextA
ExitWindowsEx
CloseClipboard
OffsetRect
GetAsyncKeyState
ShowWindow
DrawIcon
GetClassNameA
EndDialog
EnumChildWindows
GetDC
InflateRect
GetMessagePos

gdi32

OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx

ole32

OleInitialize
CoRegisterClassObject
CoUninitialize
CoRegisterSurrogate
OleUninitialize
CoInitialize

ws2_32

recvfrom
getservbyname
send
htons
WSACleanup
getsockopt
recv
WSAStartup

winspool.drv

OpenPrinterA
AddPrinterConnectionA
ClosePrinter
DocumentPropertiesA
GetJobA
GetPrinterDataA

advapi32

RegQueryValueExA
OpenServiceA
OpenThreadToken
RegOpenKeyExA
InitializeSecurityDescriptor
FreeSid
OpenProcessToken
SetSecurityDescriptorDacl
SetEntriesInAclA
RegEnumKeyA
RegCloseKey
StartServiceCtrlDispatcherA
RegOpenKeyA
QueryServiceStatus
RegDeleteKeyA
GetTokenInformation
AllocateAndInitializeSid
LookupPrivilegeValueA
SetServiceStatus
RegisterServiceCtrlHandlerA
OpenSCManagerA
RegCreateKeyExA
DeleteService
RegSetValueExA

winmm

mciGetErrorStringA
timeBeginPeriod
PlaySoundA
mciSendCommandA
timeEndPeriod

comdlg32

GetSaveFileNameA
CommDlgExtendedError
GetOpenFileNameA
ChooseFontA
ReplaceTextA

comctl32

ImageList_GetImageInfo
ImageList_GetImageCount
ImageList_Create
ImageList_GetBkColor
ImageList_EndDrag
ImageList_GetDragImage

rasapi32

RasEnumConnectionsA
RasGetConnectStatusA

Sections

.text
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a60eddcd7c4ea68bad0bbe1c9a56a002

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

ole32

ws2_32

winspool.drv

advapi32

winmm

comdlg32

comctl32

rasapi32

Sections

.text Size: 443KB - Virtual size: 442KB

.rdata Size: 105KB - Virtual size: 105KB

.data Size: 16KB - Virtual size: 83KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 443KB - Virtual size: 442KB

.rdata
Size: 105KB - Virtual size: 105KB

.data
Size: 16KB - Virtual size: 83KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 15KB - Virtual size: 14KB