General

Malware Config

Signatures

Files

• 71294290d7f4be76b77229c3e0cc626186843b3600634463711a04b7b69a4cd1

  .dll windows x64

  38951475d1776b0413c62618bddf1ed2

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  Imports

  advapi32

  CloseEventLog

  DecryptFileW

  LookupAccountSidA

  GetSecurityDescriptorSacl

  user32

  DrawStateW

  DrawTextW

  DrawIconEx

  InsertMenuW

  kernel32

  GetThreadId

  GetSystemDefaultUILanguage

  FillConsoleOutputCharacterA

  GetCurrentThread

  VirtualAlloc

  lstrcmpiW

  GetPrivateProfileStringW

  DeleteTimerQueueTimer

  GlobalDeleteAtom

  GetCommProperties

  GetEnvironmentStringsW

  GetNLSVersion

  GetLastError

  LoadLibraryA

  FreeResource

  GetThreadTimes

  DebugActiveProcess

  gdi32

  GetCharWidthW

  GetWindowExtEx

  DeleteEnhMetaFile

  GetStretchBltMode

  GetCharWidth32A

  GetTextExtentExPointI

  GetViewportOrgEx

  Exports

  Exports

  CloseDriver

  DefDriverProc

  DriverCallback

  DrvGetModuleHandle

  GetDriverModuleHandle

  OpenDriver

  PlaySound

  PlaySoundA

  PlaySoundW

  SendDriverMessage

  WOWAppExit

  auxGetDevCapsA

  auxGetDevCapsW

  auxGetNumDevs

  auxGetVolume

  auxOutMessage

  auxSetVolume

  joyConfigChanged

  joyGetDevCapsA

  joyGetDevCapsW

  joyGetNumDevs

  joyGetPos

  joyGetPosEx

  joyGetThreshold

  joyReleaseCapture

  joySetCapture

  joySetThreshold

  mciDriverNotify

  mciDriverYield

  mciExecute

  mciFreeCommandResource

  mciGetCreatorTask

  mciGetDeviceIDA

  mciGetDeviceIDFromElementIDA

  mciGetDeviceIDFromElementIDW

  mciGetDeviceIDW

  mciGetDriverData

  mciGetErrorStringA

  mciGetErrorStringW

  mciGetYieldProc

  mciLoadCommandResource

  mciSendCommandA

  mciSendCommandW

  mciSendStringA

  mciSendStringW

  mciSetDriverData

  mciSetYieldProc

  midiConnect

  midiDisconnect

  midiInAddBuffer

  midiInClose

  midiInGetDevCapsA

  midiInGetDevCapsW

  midiInGetErrorTextA

  midiInGetErrorTextW

  midiInGetID

  midiInGetNumDevs

  midiInMessage

  midiInOpen

  midiInPrepareHeader

  midiInReset

  midiInStart

  midiInStop

  midiInUnprepareHeader

  midiOutCacheDrumPatches

  midiOutCachePatches

  midiOutClose

  midiOutGetDevCapsA

  midiOutGetDevCapsW

  midiOutGetErrorTextA

  midiOutGetErrorTextW

  midiOutGetID

  midiOutGetNumDevs

  midiOutGetVolume

  midiOutLongMsg

  midiOutMessage

  midiOutOpen

  midiOutPrepareHeader

  midiOutReset

  midiOutSetVolume

  midiOutShortMsg

  midiOutUnprepareHeader

  midiStreamClose

  midiStreamOpen

  midiStreamOut

  midiStreamPause

  midiStreamPosition

  midiStreamProperty

  midiStreamRestart

  midiStreamStop

  mixerClose

  mixerGetControlDetailsA

  mixerGetControlDetailsW

  mixerGetDevCapsA

  mixerGetDevCapsW

  mixerGetID

  mixerGetLineControlsA

  mixerGetLineControlsW

  mixerGetLineInfoA

  mixerGetLineInfoW

  mixerGetNumDevs

  mixerMessage

  mixerOpen

  mixerSetControlDetails

  mmDrvInstall

  mmGetCurrentTask

  mmTaskBlock

  mmTaskCreate

  mmTaskSignal

  mmTaskYield

  mmioAdvance

  mmioAscend

  mmioClose

  mmioCreateChunk

  mmioDescend

  mmioFlush

  mmioGetInfo

  mmioInstallIOProcA

  mmioInstallIOProcW

  mmioOpenA

  mmioOpenW

  mmioRead

  mmioRenameA

  mmioRenameW

  mmioSeek

  mmioSendMessage

  mmioSetBuffer

  mmioSetInfo

  mmioStringToFOURCCA

  mmioStringToFOURCCW

  mmioWrite

  mmsystemGetVersion

  sndPlaySoundA

  sndPlaySoundW

  timeBeginPeriod

  timeEndPeriod

  timeGetDevCaps

  timeGetSystemTime

  timeGetTime

  timeKillEvent

  timeSetEvent

  waveInAddBuffer

  waveInClose

  waveInGetDevCapsA

  waveInGetDevCapsW

  waveInGetErrorTextA

  waveInGetErrorTextW

  waveInGetID

  waveInGetNumDevs

  waveInGetPosition

  waveInMessage

  waveInOpen

  waveInPrepareHeader

  waveInReset

  waveInStart

  waveInStop

  waveInUnprepareHeader

  waveOutBreakLoop

  waveOutClose

  waveOutGetDevCapsA

  waveOutGetDevCapsW

  waveOutGetErrorTextA

  waveOutGetErrorTextW

  waveOutGetID

  waveOutGetNumDevs

  waveOutGetPitch

  waveOutGetPlaybackRate

  waveOutGetPosition

  waveOutGetVolume

  waveOutMessage

  waveOutOpen

  waveOutPause

  waveOutPrepareHeader

  waveOutReset

  waveOutRestart

  waveOutSetPitch

  waveOutSetPlaybackRate

  waveOutSetVolume

  waveOutUnprepareHeader

  waveOutWrite

  Sections

  .text

  Size: 492KB - Virtual size: 492KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 57KB - Virtual size: 57KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 118KB - Virtual size: 118KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .pdata

  Size: 4KB - Virtual size: 3KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 1024B - Virtual size: 976B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 11KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  Size: 1KB - Virtual size: 1KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ