03b0619566ab34af447f8c567b677a77a745c8d186d67246f561034bc1095427

Sharing

Copy URL Twitter E-mail

General

Target

03b0619566ab34af447f8c567b677a77a745c8d186d67246f561034bc1095427
Size

204KB
MD5

633ff28f5bb324c3fa9ea4898e1e031c
SHA1

56b172ea9bf3ea8a6cc5431b6293c6d987319915
SHA256

03b0619566ab34af447f8c567b677a77a745c8d186d67246f561034bc1095427
SHA512

4deab10430dece67b57712100249a1ab6d491f6f6ef73f6004ecc6a0bb8cd064cad4f40904ba071cae999cfc76e822021406ebc88f0af455daf1104d24ccd5cc
SSDEEP

6144:BXHX7KijGRQz0qZWpbpGRyusGC2qqDLu:1GK00vNCzqnu

Score

N/A

Malware Config

Signatures

Files

03b0619566ab34af447f8c567b677a77a745c8d186d67246f561034bc1095427
.dll windows x86

bbce56e8a6e95d6efe19178ef9787e15

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberFormatW
GetConsoleOutputCP
FormatMessageW
WriteConsoleW
GetStdHandle
FileTimeToSystemTime
GetModuleFileNameW
GetComputerNameExW
ExitProcess
SetConsoleMode
ReadFile
ReadConsoleW
GetProcessHeap
HeapValidate
CompareStringA
GetThreadLocale
CompareStringW
GetFileType
GetConsoleMode
DisableThreadLibraryCalls
InterlockedExchange
Sleep
InterlockedCompareExchange
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStringTypeW
GetStringTypeA
GetDateFormatW
LCMapStringA
HeapSize
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
HeapAlloc
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
WriteFile
GetEnvironmentStringsW
GetLastError
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
SetHandleCount
GetModuleHandleA
VirtualQuery
GetVersionExA
RtlUnwind
GetTimeFormatW
GetCurrentThreadId
LocalUnlock
LocalLock
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GlobalSize
lstrcpyA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
lstrcmpA
InterlockedDecrement
InterlockedIncrement
CreateMutexW
CreateFileW
LocalAlloc
DeviceIoControl
GetSystemInfo
LocalFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
lstrlenW
RaiseException
lstrlenA
MultiByteToWideChar
CloseHandle
MapViewOfFile
UnmapViewOfFile
GetSystemDefaultLangID
GlobalAlloc
GlobalLock
GlobalHandle
GlobalUnlock
GlobalFree
WaitForSingleObject
ReleaseMutex
LockResource
LoadResource
FindResourceExW
LoadLibraryW
FreeLibrary
GetProcAddress
GetModuleHandleW
VirtualProtect
LCMapStringW
GetCommandLineA

user32

SetPropA
GetClassNameA
GetWindowThreadProcessId
EnumChildWindows
EnumPropsA
CreateWindowExA
PostMessageA
SetWindowLongA
SetWindowWord
RegisterDeviceNotificationW
LoadStringW
WinHelpW
DialogBoxParamW
wsprintfW
PostMessageW
FindWindowW
CheckDlgButton
MoveWindow
EndDialog
PostQuitMessage
UnregisterDeviceNotification
SetWindowTextW
GetPropA
CallWindowProcW
ValidateRect
ReleaseDC
IsWindowUnicode
SetWindowLongW
SetWindowPos
GetWindowRect
GetDlgItem
DrawFocusRect
GetSysColor
FillRect
DrawIconEx
DrawStateW
DrawFrameControl
IsWindowVisible
MonitorFromPoint
GetMonitorInfoW
DefWindowProcW
IsWindow
LoadIconW
GetDC
KillTimer
SendMessageW
RemovePropA
DefWindowProcA
UnpackDDElParam
GetWindowLongA
CharUpperW
GetDesktopWindow
SystemParametersInfoW
GetSysColorBrush
FrameRect
GetDlgCtrlID
PtInRect
DrawEdge
ClientToScreen
SetCursorPos
ReleaseCapture
SetCapture
GetParent
BeginPaint
GetCursorPos
ScreenToClient
DrawTextW
EndPaint
GetScrollInfo
SetScrollInfo
EnableScrollBar
InvalidateRect
SendMessageA
UpdateWindow
GetWindow
DestroyWindow
SetTimer
GetWindowLongW
GetClientRect
GetSystemMetrics
LoadImageW
CreateWindowExW
GetClassInfoExW
LoadCursorW
RegisterClassExW

advapi32

RegSetValueExW
RegQueryValueExW
RegCloseKey
GetSidSubAuthority
GetSidSubAuthorityCount
IsValidSid
GetTokenInformation
OpenProcessToken
RegOpenKeyExW
RegOpenKeyA
RegQueryValueA
OpenSCManagerW
OpenServiceW
LookupAccountNameW
SetServiceObjectSecurity
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
QueryServiceObjectSecurity
GetSecurityDescriptorDacl
CloseServiceHandle
RegCreateKeyExW

gdi32

DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
SetBkMode
GetTextExtentPoint32W
CreateSolidBrush
GetObjectW
DeleteObject
CreateFontIndirectW
SetTextColor
SetBkColor
GetStockObject
SelectObject
GetTextMetricsW
EnumFontFamiliesExW
LineTo
MoveToEx
CreatePen
GetLayout
ExtTextOutW
GetTextExtentPointA
CopyEnhMetaFileA
CopyMetaFileA
DeleteMetaFile
DeleteEnhMetaFile
BitBlt

ole32

CoTaskMemFree
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance

rpcrt4

RpcBindingSetOption
RpcStringFreeW
RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingSetAuthInfoW
NdrClientCall2

Sections

.text
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bbce56e8a6e95d6efe19178ef9787e15

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

Sections

.text Size: 124KB - Virtual size: 123KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 20KB - Virtual size: 61KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 124KB - Virtual size: 123KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 20KB - Virtual size: 61KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 8KB - Virtual size: 7KB