9423fab4183eb2a8f158cf815028a55d483e21e87603df82983089bdc17a8c46

Sharing

Copy URL Twitter E-mail

General

Target

9423fab4183eb2a8f158cf815028a55d483e21e87603df82983089bdc17a8c46
Size

145KB
MD5

60eee8793d6c5144d07482fbb4124c17
SHA1

bb9663899044ebedc558604de624e3184672d85c
SHA256

9423fab4183eb2a8f158cf815028a55d483e21e87603df82983089bdc17a8c46
SHA512

37bc5250a1f6374089175d521121ec1449b224d04b6b8b5d7b175a366d93b43c5fb34c361564980706acfb0803036cc2d9039baba2a2637f4d3c64fc05f198ba
SSDEEP

3072:T+D5GZcRJjCfKnBbjeCVJD3qU76c8lZUzYEgWZz0aNkJIKQY8ye4oy42:TQnj5BnKEgWZ7NUe4o

Score

N/A

Malware Config

Signatures

Files

9423fab4183eb2a8f158cf815028a55d483e21e87603df82983089bdc17a8c46
.dll windows x86

ede0d51965aa9279f27765eab90ed0b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
lstrcmpiW
GlobalUnlock
GlobalLock
GetModuleFileNameW
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
SetErrorMode
FreeLibrary
GlobalReAlloc
GlobalAlloc
GetCurrentThreadId
LocalFree
WaitForSingleObject
CreateEventW
WideCharToMultiByte
lstrcmpW
FreeResource
LockResource
LoadResource
LoadLibraryExW
FindResourceW
ExitThread
GetProcAddress
GetVersionExW
GlobalHandle
WriteConsoleW
LoadLibraryW
lstrcpynW
GetStdHandle
GetLocalTime
GetSystemTime
CreateDirectoryW
GetWindowsDirectoryW
FormatMessageW
CreateProcessW
GetProcessHeap
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
IsDebuggerPresent
TerminateThread
GetCurrentThread
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetOverlappedResult
DeviceIoControl
CreateFileW
CloseHandle
SearchPathW
lstrlenW
GetLastError
Sleep
HeapFree
HeapAlloc
TlsSetValue
TlsGetValue
TlsFree
GetSystemInfo
TlsAlloc
DisableThreadLibraryCalls
GetCurrentProcessId
InterlockedExchange
WaitForSingleObjectEx
MapViewOfFile
OpenFileMappingW
InterlockedCompareExchange
SetLastError
GlobalFree
GetTickCount
GetCommandLineA
SetEvent
VirtualProtect

user32

GetWindowLongW
LoadStringW
PostMessageW
IsWindow
UnregisterClassA
PostThreadMessageA
DestroyWindow
SetCursor
IntersectRect
InvalidateRect
EqualRect
CharLowerW
LoadCursorW
WinHelpW
PeekMessageW

advapi32

RegCreateKeyW
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegCloseKey
QueryServiceConfigW
RegCreateKeyExW
RegSetValueExW
CloseServiceHandle
SetThreadToken
AdjustTokenPrivileges
DuplicateTokenEx
OpenProcessToken
OpenThreadToken
RegQueryValueExW
LookupPrivilegeValueW

gdi32

CreateRectRgn
GetRegionData
CreateRectRgnIndirect
OffsetRgn
DeleteObject
GetBkMode
GetObjectW
CombineRgn

ole32

StringFromGUID2
CoTaskMemFree
CoRevertToSelf
CoImpersonateClient
CoUninitialize
CoCreateInstance

rpcrt4

NdrClientCall2

msvcrt

_wcsnicmp
wcschr
wcslen
_vsnwprintf
_XcptFilter
_wcsicmp
wcsstr
wcsrchr
fclose
fopen
malloc
fprintf
fflush
__CxxFrameHandler
_except_handler3
_initterm
_adjust_fdiv
memset
memcpy
free
_CxxThrowException
calloc
wcsncmp

msvcp60

??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??Ostd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
??A?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAADI@Z
??Hstd@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z

Sections

.text
Size: 131KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ede0d51965aa9279f27765eab90ed0b9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

gdi32

ole32

rpcrt4

msvcrt

msvcp60

Sections

.text Size: 131KB - Virtual size: 130KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 1024B - Virtual size: 34KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 131KB - Virtual size: 130KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 1024B - Virtual size: 34KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB