3ad684ebbc34c078199571167c1def79448214aaf64dfd9730f367d686a127bb

Sharing

Copy URL

Twitter E-mail

General

Target

3ad684ebbc34c078199571167c1def79448214aaf64dfd9730f367d686a127bb
Size

699KB
MD5

78e64476f51827077fc95a6ab9dce58e
SHA1

aecc81fc338b7d3f81db503f9c56c3a768866fb0
SHA256

3ad684ebbc34c078199571167c1def79448214aaf64dfd9730f367d686a127bb
SHA512

583dff1b0fee31e2df942492d27bb3883190ded197a67202872c7658f8eeccc102354d6873329c55dfd00d9c946afe036f7f571209cadaf4b1ec7b98b63f36ed
SSDEEP

12288:lPpIO2+XLK2QV7xxCQ9HJy/A4hG7Y/zZCImg8kGr:JpbGd9HJwhCY/FdmR

Score

N/A

Malware Config

Signatures

Files

3ad684ebbc34c078199571167c1def79448214aaf64dfd9730f367d686a127bb
.dll windows x86

7bbf19d2e89e136a79912761d58f0957

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_except_handler3
_adjust_fdiv
_initterm
wcslen
_purecall
__dllonexit
_callnewh
malloc
realloc
??2@YAPAXI@Z
free
??3@YAXPAX@Z
_onexit

msvcp60

?nothrow@std@@3Unothrow_t@1@B

ntdll

memset

advapi32

RegCloseKey
RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyW
CloseServiceHandle
QueryServiceStatusEx
StartServiceW
ControlService
OpenSCManagerW
OpenServiceW
RegSetValueExW

gdi32

SelectObject
DeleteObject
SetTextColor
SetBkMode
Rectangle
GetStockObject
CreateSolidBrush
GetTextExtentPoint32W

kernel32

lstrcmpW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersionExA
SetLastError
GetProcAddress
LoadLibraryA
VirtualAlloc
GetSystemWindowsDirectoryW
GetWindowsDirectoryW
LoadLibraryW
VirtualFree
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleFileNameW
GetLastError
LeaveCriticalSection
EnterCriticalSection
lstrlenW
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
LockResource
FlushInstructionCache
GetCurrentProcess
GetProcessHeap
HeapFree
HeapAlloc
GetCurrentThreadId
GetModuleHandleW
SetEvent
ExitThread
CloseHandle
WaitForSingleObject
CreateThread
CreateEventW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime

ole32

CoTaskMemAlloc
CoInitializeEx
CoUninitialize
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree

oleaut32

VariantChangeType
SysFreeString
VarUI4FromStr
SysAllocString
VariantInit
VariantClear
SysStringLen

user32

MoveWindow
EnumChildWindows
UnregisterClassW
CharNextW
GetParent
GetDlgCtrlID
SendMessageW
GetSystemMetrics
GetWindowRect
ReleaseDC
GetDC
SetWindowLongW
GetWindowLongW
BeginPaint
EndPaint
GetDlgItem
EnableWindow
ShowWindow
PostMessageW
InvalidateRect
DrawIcon
DrawTextW
GetSysColor
LoadIconW
LoadStringW
SetClassLongW
DialogBoxParamW
GetActiveWindow
MessageBoxW
SetTimer
KillTimer
EndDialog
GetWindowInfo

uxtheme

CloseThemeData
OpenThemeData

dot3api

Dot3OpenHandle
Dot3SetProfile
Dot3SetInterface
Dot3CloseHandle
Dot3GetCurrentProfile
Dot3GetInterfaceState

onex

OneXFreeMemory
OneXInitialize
OneXCreateDefaultProfile
OneXDeInitialize

eappcfg

EapHostPeerInvokeConfigUI
EapHostPeerGetMethods
EapHostPeerConfigXml2Blob
EapHostPeerConfigBlob2Xml
EapHostPeerFreeErrorMemory
EapHostPeerFreeMemory

rtutils

TraceVprintfExA

Exports

Exports

Dot3CreatePsPage
LanFreeProfile
LanInvokeProfileUI
LanInvokeProfileUIXml

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 586KB - Virtual size: 585KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7bbf19d2e89e136a79912761d58f0957

Headers

File Characteristics

Imports

msvcrt

msvcp60

ntdll

advapi32

gdi32

kernel32

ole32

oleaut32

user32

uxtheme

dot3api

onex

eappcfg

rtutils

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 65KB - Virtual size: 65KB

.rsrc Size: 586KB - Virtual size: 585KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 65KB - Virtual size: 65KB

.rsrc
Size: 586KB - Virtual size: 585KB

.reloc
Size: 5KB - Virtual size: 4KB