c29dce43cc53cf48068f1c325e1ba422addfe909cde53d544a0030c336b27d00

Sharing

Copy URL Twitter E-mail

General

Target

c29dce43cc53cf48068f1c325e1ba422addfe909cde53d544a0030c336b27d00
Size

306KB
MD5

5b712f5f3fc4fa792d119120f85c0f24
SHA1

2eab6aaa5c147f4898cfbc429403efae5b8c2290
SHA256

c29dce43cc53cf48068f1c325e1ba422addfe909cde53d544a0030c336b27d00
SHA512

06f3e665a24522de0b5c5f34e79a5f2910cf6fc05663347aec0d33d77882ae189914d9e333342130569ab00c8835bbab43efcb7f64930e2072e1f94532dcc451
SSDEEP

6144:P0tZPlsReJfltsT8mavNY/qarbxzAJPmU9Vu/mUOHA2gA+:e9tsWlK5rdA1mU9ETOg2Q

Score

N/A

Malware Config

Signatures

Files

c29dce43cc53cf48068f1c325e1ba422addfe909cde53d544a0030c336b27d00
.dll windows x86

63a79b1520ccbba15e84c6a111d03f57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpA
MulDiv
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
LocalFree
FormatMessageA
HeapFree
GetProcessHeap
HeapAlloc
HeapReAlloc
GlobalFree
lstrcpynA
IsProcessorFeaturePresent
InterlockedCompareExchange
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetModuleFileNameA
GetConsoleMode
GetConsoleCP
SetFilePointer
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
WriteFile
ExitProcess
Sleep
VirtualFree
HeapDestroy
HeapCreate
GetCommandLineA
RtlUnwind
VirtualQuery
GetSystemInfo
GetModuleHandleW
SetLastError
IsDBCSLeadByte
GetCurrentThreadId
GetModuleHandleA
GetProcAddress
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenA
lstrlenW
GetCurrentProcess
SetCurrentDirectoryA
FlushInstructionCache
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
RaiseException
lstrcmpiA
GetFileAttributesA
lstrcpyA
GetCurrentDirectoryA
LCMapStringA
VirtualAlloc
VirtualProtect
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess

user32

GetClassInfoExA
IsWindow
GetParent
GetWindowLongA
LoadCursorA
CharNextA
SendMessageA
DefWindowProcA
RegisterClassExA
CreateWindowExA
DestroyWindow
SetWindowLongA
UnregisterClassA
UpdateWindow
PostMessageA
wsprintfA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
KillTimer
SetTimer
GetWindowRect
MapWindowPoints
CreateDialogParamA
DrawTextA
DrawFocusRect
SetPropA
SetCursor
RemovePropA
GetPropA
CharPrevA
MapDialogRect
RegisterWindowMessageA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
CreateAcceleratorTableA
GetDesktopWindow
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
BeginPaint
EndPaint
FillRect
ReleaseCapture
GetClassNameA
GetDlgItem
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
CallWindowProcA
GetSysColor

gdi32

SetTextColor
GetStockObject
GetObjectA
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetDeviceCaps

comdlg32

GetOpenFileNameA
GetSaveFileNameA
CommDlgExtendedError

advapi32

RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA

ole32

CoTaskMemFree
CoInitialize
CoUninitialize
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
OleRun
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VariantChangeType
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
DispCallFunc
VarUI4FromStr
SysAllocStringLen
SysAllocString
VariantCopy
SysStringLen
SysFreeString
VariantInit
VariantClear

Exports

Exports

Continue
ConvertToDialogUnits
ConvertToPixels
Create
CreateControl
CreateItem
CreateTimer
Destroy
GetUserData
HtmlExecJavascript
HtmlQueryState
HtmlReturnValue
HtmlSetSilent
HtmlSetState
OnBack
OnChange
OnClick
OnNotify
SelectFileDialog
SelectFolderDialog
SetNsisResponse
SetRTL
SetUserData
Show
nsdKillTimer

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 684B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 132KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

63a79b1520ccbba15e84c6a111d03f57

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 121KB - Virtual size: 120KB

.rdata Size: 30KB - Virtual size: 29KB

.data Size: 9KB - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 684B

.reloc Size: 12KB - Virtual size: 12KB

.text Size: 132KB - Virtual size: 132KB

.text
Size: 121KB - Virtual size: 120KB

.rdata
Size: 30KB - Virtual size: 29KB

.data
Size: 9KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 684B

.reloc
Size: 12KB - Virtual size: 12KB

.text
Size: 132KB - Virtual size: 132KB