854646BDCF4DA69C975DD627F5635037

Sharing

Copy URL Twitter E-mail

General

Target

854646BDCF4DA69C975DD627F5635037
Size

348KB
MD5

854646bdcf4da69c975dd627f5635037
SHA1

783010afd98f97884531d7a12c868f23c4779106
SHA256

d7a72e921b9cd11893e94ef720c78c569caea25f99e9c8529460523c7b8fddb6
SHA512

a5e23e01ddf6b7186384465039469757eff67c0be936bdf71cb320d5bd5d52d8fd40241d503cd97615cc832af286b814fc8a9cea1ea9660270d0362ec48aabf6
SSDEEP

6144:XpWNUATQJVssoJQvpIDDzOjgdkQ7IUZ5LrWrRs:XpWOAT4hRvpIw/XUZhraC

Score

N/A

Malware Config

Signatures

Files

854646BDCF4DA69C975DD627F5635037
.dll windows x86

a8e4f2d0d4f98ddeec85ff71f3a916cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommBreak
GetConsoleMode
GetCommProperties
GetAtomNameA
HeapDestroy
ResetEvent
SetUserGeoID
LocalSize
WriteProfileStringA
FindNextFileA
SetComputerNameW
CommConfigDialogA
SetFileShortNameA
GetModuleHandleExA
OpenJobObjectW
SetEnvironmentVariableW
FileTimeToLocalFileTime
GetPrivateProfileSectionW
DefineDosDeviceW
GetPriorityClass
FindNextVolumeA
CreateProcessW
WaitNamedPipeA
GetFullPathNameW
FindFirstFileW
CreateSemaphoreW
LocalHandle
CreateMutexA
VerLanguageNameA
GetDriveTypeA
OutputDebugStringA
ExitThread
IsBadReadPtr
SetConsoleHardwareState
SetComPlusPackageInstallStatus
SetTermsrvAppInstallMode
GetVolumeInformationA
ConvertThreadToFiber
SuspendThread
FindResourceExA
SetVolumeMountPointA
DeleteVolumeMountPointA
GetLocaleInfoA
FindFirstChangeNotificationA
EnumSystemLanguageGroupsA
GetUserDefaultLCID
SetLocalTime
GetShortPathNameA
SetNamedPipeHandleState
GlobalAddAtomW
GetVolumeInformationW
GetLogicalDriveStringsA
VirtualLock
UTUnRegister
SetDllDirectoryA
lstrcmpA
GetVolumePathNamesForVolumeNameW
GetDiskFreeSpaceW
InterlockedExchange
GetComputerNameW
SetConsoleTitleA
LoadLibraryExW
MoveFileWithProgressA
HeapQueryInformation
GetConsoleWindow
CreateHardLinkA
VirtualFree

user32

EndTask
ShowWindowAsync
GetWindow
EndDialog
FindWindowW

msacm32

acmFilterTagEnumA
acmDriverID
acmStreamSize
acmStreamPrepareHeader
acmFormatSuggest
acmFilterEnumA
acmFormatTagEnumA
acmFilterChooseW
acmDriverClose
acmFormatChooseW
acmFilterDetailsW
acmStreamMessage
acmDriverPriority
acmFilterChooseA
acmStreamConvert
acmDriverDetailsA
acmStreamOpen
acmFormatTagEnumW
acmFilterDetailsA
acmFormatEnumW
acmDriverMessage
acmFilterEnumW
acmFormatTagDetailsA
acmFilterTagDetailsW

setupapi

CM_Get_Global_State
CM_Set_HW_Prof_Flags_ExW
CM_Get_DevNode_Registry_PropertyA
CM_Query_Arbitrator_Free_Size_Ex
CM_Register_Device_Driver
CM_Get_DevNode_Registry_Property_ExW
CM_Locate_DevNodeW
CM_Set_Class_Registry_PropertyA
CM_Get_HW_Prof_Flags_ExW
CM_Get_Global_State_Ex
CM_Query_And_Remove_SubTree_ExW
CM_Locate_DevNodeA
CM_Open_Class_Key_ExA
CM_Register_Device_InterfaceW
CM_Set_DevNode_Registry_PropertyA
CM_Add_IDW
CM_Get_Resource_Conflict_DetailsW
CM_Create_DevNodeW
CM_Set_HW_Prof_Ex
CM_Get_Class_Key_Name_ExA
CM_Get_Device_ID_Size_Ex
CM_Delete_Class_Key_Ex
CMP_WaitServicesAvailable
CM_Enumerate_Enumerators_ExA
CM_Register_Device_Driver_Ex
CM_Get_Device_Interface_AliasW
CM_Set_HW_Prof_FlagsA
CM_Get_Log_Conf_Priority_Ex
CM_Get_Device_Interface_List_Size_ExA
CM_Connect_MachineA
CM_Create_Range_List
CM_Get_Child_Ex
CM_Get_Depth
CM_Disable_DevNode
CM_Dup_Range_List
CM_Free_Range_List
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Device_ID_ExW
CM_Add_Empty_Log_Conf_Ex
CM_Open_DevNode_Key
CM_Get_Resource_Conflict_Count
CMP_Init_Detection
CM_Get_HW_Prof_Flags_ExA
CM_Get_Device_ID_List_SizeW
CM_Add_Range
CM_Is_Dock_Station_Present
CM_Get_Version_Ex
CM_Get_Depth_Ex
CM_Get_Device_Interface_AliasA

imm32

ImmEnumInputContext
ImmGetConversionListW
ImmGetCompositionFontA
ImmRegisterWordW
ImmGetGuideLineW
ImmGetImeMenuItemsA
ImmDestroyContext
ImmIsIME
ImmGetCompositionStringA
ImmSetCompositionFontW
ImmGetContext
ImmGetCandidateListW
ImmReSizeIMCC
ImmConfigureIMEW
ImmNotifyIME
ImmGetVirtualKey
ImmEscapeW
ImmSetConversionStatus
ImmInstallIMEW
ImmDestroyIMCC
ImmGetCompositionStringW
ImmRegisterWordA
ImmEnumRegisterWordW
ImmGetDescriptionW
ImmRequestMessageA
ImmCreateSoftKeyboard
ImmSetCompositionStringW
ImmGetIMEFileNameW
ImmSetCompositionStringA

comsvcs

SafeRef
ComSvcsExceptionFilter
MTSCreateActivity
CoCreateActivity
CoLeaveServiceDomain
ComSvcsLogError
DispManGetContext

Exports

Exports

AnOptionIsMustValid
AroundSectionRun
BooleanHeaderWhat
ConfigurationINIAndShareThe
LeadingLinesInformationToSpace
MustButAll
PairA
PreservedIgnoredContinuations
RecognisedThatButClientsMust
SectionANameDescribedLine
SingleIsFileAt
StringsConfigurationForWhitespace
TheAA
WhichSectionAreWhitespace
WhitespaceIsIntoSeparatorDirectory

Sections

.text
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a8e4f2d0d4f98ddeec85ff71f3a916cf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msacm32

setupapi

imm32

comsvcs

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 109KB

.rdata Size: 32KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 104KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 1KB

.text
Size: 112KB - Virtual size: 109KB

.rdata
Size: 32KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 104KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 1KB