4014a5a1be7e31ca4c539e9d3a8eb37a72a803d72ce4ec88738eb76ec73b2679

Sharing

Copy URL

Twitter E-mail

General

Target

4014a5a1be7e31ca4c539e9d3a8eb37a72a803d72ce4ec88738eb76ec73b2679
Size

1.1MB
MD5

4d803834a48509b5ac8976dc8f16d140
SHA1

f653de4be3f3f71e385c9a93a5a02d9c1d4ad988
SHA256

4014a5a1be7e31ca4c539e9d3a8eb37a72a803d72ce4ec88738eb76ec73b2679
SHA512

c33823369556a417ec4fe686541e7dca106f1bbbc613844a1efa1c51cb659465430a879a9c82d2fdc5c57a40a496cae6a6d16f29920947bf41b3614a918c34ce
SSDEEP

24576:fyUaP64t9+JfrRJiz8F+p/N2/cmWdh77:P+680rRJiz8F+lucVP

Score

N/A

Malware Config

Signatures

Files

4014a5a1be7e31ca4c539e9d3a8eb37a72a803d72ce4ec88738eb76ec73b2679
.dll windows x86

45cba60d0833bef75d882d15b2d5a2cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
strcpy_s
_itow_s
_ultow_s
_ltow_s
iswdigit
ceil
wcsncmp
_wcsnicmp
_wfullpath
_wtol
__argc
swscanf_s
__wargv
_beginthreadex
_endthreadex
_wcsdup
_wtoi
_expand
wcstod
wcstoul
wcstol
_mbsrchr
_resetstkoflw
_recalloc
_wmakepath_s
_wsplitpath_s
_snwscanf_s
_vsnwprintf_s
labs
abs
calloc
_msize
wcscat_s
_snwprintf_s
_errno
_purecall
_mktime64
_localtime64_s
realloc
fputws
fwrite
clearerr_s
ferror
feof
fread
__doserrno
_fdopen
_open_osfhandle
_fileno
_get_osfhandle
fclose
fflush
ftell
fseek
fgetws
wcscpy_s
abort
memcmp
swprintf_s
wcsncpy_s
malloc
_wcsupr_s
_mbsicoll
vsprintf_s
wcslen
_mbsinc
wcsstr
_wcslwr_s
_mbsrev
memset
_mbscoll
_mbslwr_s
_vscwprintf
_mbscspn
_mbscmp
memmove
iswspace
_mbsicmp
wcsrchr
wcspbrk
_wcsrev
wcschr
wcscspn
_mbsupr_s
memcpy_s
_mbsspn
vswprintf_s
_wcsicoll
_wcsicmp
memcpy
_mbschr
free
_mbspbrk
wcsspn
wcscoll
memmove_s
_ismbcspace
strlen
_mbsstr
_vscprintf
_CxxThrowException
wcscmp
__clean_type_info_names_internal
__CxxFrameHandler3

kernel32

GetLocaleInfoA
GetSystemTimeAsFileTime
GetLastError
MultiByteToWideChar
FindResourceExW
GetEnvironmentVariableW
SizeofResource
LockResource
FormatMessageW
FindResourceW
WideCharToMultiByte
GetEnvironmentVariableA
LocalFree
FormatMessageA
LoadResource
SetLastError
GetAtomNameW
GlobalGetAtomNameW
lstrlenW
lstrcmpA
lstrlenA
DuplicateHandle
GetCurrentProcess
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
CreateFileW
FindClose
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
lstrcmpiW
CloseHandle
LockFile
GetThreadLocale
UnlockFile
GetStringTypeExW
SetEndOfFile
GetFileSize
MoveFileW
DeleteFileW
GetModuleFileNameW
GetShortPathNameW
LoadLibraryW
GetProcAddress
GlobalLock
GlobalSize
GlobalAlloc
GlobalUnlock
GlobalReAlloc
GlobalFree
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileAttributesW
SetFileTime
GetFileTime
GetFileAttributesW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetModuleHandleW
FreeLibrary
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
LocalAlloc
TlsAlloc
InitializeCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
WaitForSingleObject
CreateSemaphoreW
ReleaseSemaphore
CreateMutexW
ReleaseMutex
CreateEventW
WaitForMultipleObjects
GlobalAddAtomW
GetCurrentThreadId
GetVersionExA
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomW
CompareStringW
GetCurrentProcessId
GetVersion
MulDiv
GetVersionExW
GetProfileIntW
LoadLibraryA
VirtualProtect
GetModuleHandleA
RaiseException
GlobalFlags
GetDiskFreeSpaceW
GetTempFileNameW
LocalLock
LocalUnlock
GetTempPathW
SearchPathW
SetEvent
SetThreadPriority
ResumeThread
SuspendThread
GetLocaleInfoW
CompareStringA
ConvertDefaultLocale
EnumResourceLanguagesW
GetCurrentThread
InterlockedExchange
SetErrorMode
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCurrentDirectoryW
InterlockedIncrement
FindNextFileW
GetTickCount
CopyFileW
GetUserDefaultLCID
IsDBCSLeadByte
lstrcpyW
lstrcpyA
GetSystemTime
LoadLibraryExW
Sleep
InterlockedCompareExchange
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetACP

gdi32

GetBkMode
GetClipBox
OffsetRgn
SetBrushOrgEx
GetRgnBox
CreateMetaFileW
CopyMetaFileW
Ellipse
CreateEllipticRgn
LPtoDP
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
DPtoLP
SetRectRgn
CombineRgn
GetMapMode
PolylineTo
PolyDraw
SetArcDirection
StartDocW
ArcTo
SetMapperFlags
SetTextCharacterExtra
SetTextJustification
SetTextAlign
LineTo
OffsetClipRgn
GetPixel
ExcludeClipRect
SelectClipRgn
OffsetWindowOrgEx
EnumMetaFile
PlayMetaFile
ModifyWorldTransform
PlayMetaFileRecord
SetWorldTransform
GetObjectType
SetGraphicsMode
ExtSelectClipRgn
SetStretchBltMode
CreateDIBPatternBrushPt
GetClipRgn
SetROP2
CreateRectRgn
SetPolyFillMode
CreateHatchBrush
SelectClipPath
SetBkMode
CreateSolidBrush
PolyBezierTo
ExtCreatePen
SelectPalette
SetColorAdjustment
EnumFontFamiliesExW
CreateDCW
BitBlt
CreateRectRgnIndirect
PatBlt
UnrealizeObject
Rectangle
CreatePen
CreatePatternBrush
CreateBitmap
DeleteMetaFile
CloseMetaFile
TextOutW
GetViewportOrgEx
GetDeviceCaps
GetTextColor
Escape
GetStretchBltMode
GetPolyFillMode
RectVisible
ExtTextOutW
PtVisible
MoveToEx
GetCurrentPositionEx
GetROP2
GetTextAlign
GetTextExtentPoint32A
ScaleWindowExtEx
RestoreDC
SetWindowExtEx
ScaleViewportExtEx
SaveDC
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetNearestColor
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
CreateFontIndirectW
SetWindowOrgEx
GetWindowOrgEx
GetTextFaceW
GetStockObject
GetTextMetricsW
GetTextExtentPoint32W
DeleteObject
GetCharWidthW
CreateFontW
DeleteDC
StretchDIBits
SelectObject
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
SetBkColor
GetObjectW
SetTextColor

user32

IsWindow
IsChild
DeferWindowPos
GetClassNameW
GetClientRect
GetLastActivePopup
GetClassInfoW
AdjustWindowRectEx
MapWindowPoints
MessageBoxW
SetPropW
GetFocus
GetForegroundWindow
RegisterClassW
GetTopWindow
SetWindowsHookExW
SetActiveWindow
SetForegroundWindow
SetFocus
SetScrollPos
GetMessageTime
CreateWindowExW
SendDlgItemMessageW
SendDlgItemMessageA
GetScrollPos
GetMessagePos
RegisterWindowMessageW
SetScrollRange
UpdateWindow
DestroyWindow
GetKeyState
GetScrollRange
WinHelpW
GetDlgCtrlID
ShowScrollBar
PostMessageW
SendMessageW
IsIconic
GetCapture
DefWindowProcW
GetWindowTextLengthW
SetScrollInfo
LoadIconW
GetWindowPlacement
GetWindowTextW
GetScrollInfo
GetWindowRect
GetPropW
GetDlgItem
IsWindowVisible
SystemParametersInfoA
CallWindowProcW
SetWindowPlacement
ScrollWindow
PtInRect
RemovePropW
TrackPopupMenu
OffsetRect
TrackPopupMenuEx
GetWindowLongW
IntersectRect
GetMenuItemCount
PeekMessageW
SetWindowLongW
BeginDeferWindowPos
CallNextHookEx
DispatchMessageW
SetWindowPos
CopyRect
GetClassLongW
GetSubMenu
EndDeferWindowPos
GetMenuItemID
ScreenToClient
GetSysColor
EnableWindow
TranslateAcceleratorW
InsertMenuItemW
ReleaseCapture
BringWindowToTop
UnpackDDElParam
SetCursor
ReuseDDElParam
GetDesktopWindow
IsWindowEnabled
ShowWindow
GetWindowThreadProcessId
GetActiveWindow
LoadMenuW
DestroyMenu
CreatePopupMenu
InvalidateRect
SetMenu
SetRectEmpty
LoadAcceleratorsW
LoadCursorW
EqualRect
WaitMessage
WindowFromPoint
SetCapture
ClientToScreen
GetMessageW
TranslateMessage
DrawMenuBar
DefMDIChildProcW
RedrawWindow
DefFrameProcW
TranslateMDISysAccel
InflateRect
KillTimer
SetTimer
SetRect
GetDC
ReleaseDC
IsZoomed
SetParent
IsRectEmpty
GetSystemMenu
DeleteMenu
AppendMenuW
GetDCEx
LockWindowUpdate
GetTabbedTextExtentA
DrawTextW
DrawTextExW
GrayStringW
UnionRect
MapVirtualKeyW
GetKeyNameTextW
DrawFocusRect
LoadBitmapW
FillRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
GetDialogBaseUnits
TabbedTextOutW
GetWindowDC
BeginPaint
EndPaint
GetMenuStringW
SystemParametersInfoW
GetMenuItemInfoW
GetSysColorBrush
SetWindowTextW
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageW
MoveWindow
CheckDlgButton
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
ModifyMenuW
GetMenuCheckMarkDimensions
DestroyIcon
DestroyCursor
SetCursorPos
DrawIcon
FindWindowW
SetWindowRgn
GetTabbedTextExtentW
MessageBeep
IsClipboardFormatAvailable
RemoveMenu
ValidateRect
PostQuitMessage
UnregisterClassW
ShowOwnedPopups
InsertMenuW
RegisterClipboardFormatW
SendNotifyMessageW
CopyAcceleratorTableW
InSendMessage
PostThreadMessageW
CreateMenu
WindowFromDC
CountClipboardFormats
SetWindowContextHelpId
CharNextW
InvalidateRgn
GetNextDlgGroupItem
ClipCursor
DrawEdge
EnumChildWindows
GetWindow
GetMenu
GetClassInfoExW
GetParent
MsgWaitForMultipleObjects
UnhookWindowsHookEx
GetCursorPos
CharUpperW
OemToCharBuffA
UnregisterClassA
CharToOemBuffA
GetSystemMetrics

shlwapi

UrlUnescapeW
PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionW
PathStripToRootW
PathIsUNCW

Sections

.text
Size: 924KB - Virtual size: 923KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45cba60d0833bef75d882d15b2d5a2cd

Headers

DLL Characteristics

File Characteristics

Imports

msvcr80

kernel32

gdi32

user32

shlwapi

Sections

.text Size: 924KB - Virtual size: 923KB

.data Size: 18KB - Virtual size: 26KB

.rsrc Size: 46KB - Virtual size: 45KB

.reloc Size: 78KB - Virtual size: 77KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 924KB - Virtual size: 923KB

.data
Size: 18KB - Virtual size: 26KB

.rsrc
Size: 46KB - Virtual size: 45KB

.reloc
Size: 78KB - Virtual size: 77KB

.rmnet
Size: 56KB - Virtual size: 60KB