dfddd785c4e9c9fe153a1827853fd9efc1c8364dd11318a01f6472a95ae877fa

Sharing

Copy URL Twitter E-mail

General

Target

dfddd785c4e9c9fe153a1827853fd9efc1c8364dd11318a01f6472a95ae877fa
Size

264KB
MD5

4180631cfda48bf1038d69a73b3ebe33
SHA1

20a5ab7318466e72fd70e5b64674f879d5343d30
SHA256

dfddd785c4e9c9fe153a1827853fd9efc1c8364dd11318a01f6472a95ae877fa
SHA512

456385ef1b0ea2af1a36de2ad1860bba1985a07233233139023cc990e99d39d32655ca771a03335f1aab950272ba4a0c38b32b63a05e154898775a0d00151807
SSDEEP

6144:wM27arTN6YD9NlA3N/RQzhC/QXtmsBy2Dl:U7ETcYD12RshcUW2D

Score

N/A

Malware Config

Signatures

Files

dfddd785c4e9c9fe153a1827853fd9efc1c8364dd11318a01f6472a95ae877fa
.dll windows x86

71b665daca0558ab84d831bc8b6ce3c0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathCombineA

kernel32

ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FlushConsoleInputBuffer
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleMode
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDriveTypeA
GetEnvironmentStringsA
GetEnvironmentStringsW
GetFileAttributesA
GetFileInformationByHandle
GetFileSize
GetFileType
GetFullPathNameA
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetOverlappedResult
GetPrivateProfileSectionNamesW
GetPrivateProfileStringW
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetUserDefaultLangID
GetVersion
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalMemoryStatus
EnterCriticalSection
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedExchange
IsBadCodePtr
IsBadReadPtr
DeleteFileA
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MultiByteToWideChar
OpenEventA
PeekNamedPipe
QueryPerformanceCounter
RaiseException
ReadConsoleInputA
ReadFile
RemoveDirectoryA
ResetEvent
RtlUnwind
SetConsoleCtrlHandler
SetConsoleMode
SetEndOfFile
SetEnvironmentVariableA
SetEvent
SetFileAttributesA
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryA
CompareStringW
CompareStringA
CompareFileTime
CloseHandle
HeapAlloc
IsBadWritePtr

advapi32

SetSecurityDescriptorDacl
RegSetValueExA
RegSetKeySecurity
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
InitializeSecurityDescriptor
FreeSid
DeregisterEventSource
AllocateAndInitializeSid
ReportEventA
RegisterEventSourceA

ole32

CoCreateGuid

user32

GetWindowLongA
wsprintfA
CloseWindow
EnumWindows
GetDesktopWindow
GetProcessWindowStation
GetSystemMetrics
GetUserObjectInformationW
GetWindowThreadProcessId
IsIconic
MessageBoxA
MessageBoxW
ShowWindow

Exports

Exports

AddPicture2
BindSurfaceToAddr
D3D9ResourceGetMappedPitch
D3D9ResourceGetMappedSize
EnumAvValueRelease
EnumImageDataInItemReset
EventElapsedTime
GetDevSplineArray
GetDevice
GetImageItemCount
GetLimitation
GetTypeNameOfMedia
Launch
MakeMyColorDataFromBinary
Memcpy
Memcpy2DToArray
MutexOperation
RegisterFatBinary
RegisterFunction
SetExpectedAPIVersionEx
UnregisterDriveStatusCallback

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71b665daca0558ab84d831bc8b6ce3c0

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

ole32

user32

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 156KB

.data Size: 96KB - Virtual size: 124KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 156KB - Virtual size: 156KB

.data
Size: 96KB - Virtual size: 124KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB