51361c0c166b8d11231c7fd03be31473248aff454092df5ee0101690deb02216

Sharing

Copy URL

Twitter E-mail

General

Target

51361c0c166b8d11231c7fd03be31473248aff454092df5ee0101690deb02216
Size

163KB
MD5

69bd05fdcc804e6c51692a5f01b17687
SHA1

77e94b35e46748ee47fa988fe997d93558d9a2f8
SHA256

51361c0c166b8d11231c7fd03be31473248aff454092df5ee0101690deb02216
SHA512

a1eb4c007378275b8ef1459fc6fb8d52c907b67359720475573c0fa67c771669343462bd9806c6a8664b6262e7da4db4d977ce62adc787293edd066bcd7fed07
SSDEEP

3072:qIHjWh4h00eVCic5Ls9XRnKFWpkBWcQ3fvq6w4tUv7nFX:rHjWhnVVKsL6nWc57nF

Score

N/A

Malware Config

Signatures

Files

51361c0c166b8d11231c7fd03be31473248aff454092df5ee0101690deb02216
.dll windows x86

c70d66321288e10e703fb38274616523

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ole32

CoCreateInstance

kernel32

CreateFileW
CreateMutexA
DeleteCriticalSection
DeleteFileW
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsW
GetFileAttributesW
GetFileSizeEx
GetFileType
GetGeoInfoW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
CreateFileA
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
CreateEventA
LockResource
MoveFileW
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
RtlUnwind
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
lstrlenW
CreateDirectoryW
CompareStringA
CloseHandle
GetTickCount
LoadResource

setupapi

SetupGetStringFieldW
SetupGetFieldCount
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiDeleteDeviceInfo
CM_Get_Device_IDW
CM_Get_DevNode_Status
SetupDiGetClassDevsW

oleaut32

VariantInit
VariantCopy
VariantClear
VariantChangeType
SysStringLen
SysStringByteLen
SysFreeString
LoadRegTypeLi
LoadTypeLi
SafeArrayCopy
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayLock
SafeArrayUnlock
SysAllocString
SysAllocStringByteLen
SysAllocStringLen

advapi32

RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegOpenCurrentUser
RegEnumValueW
RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
LsaNtStatusToWinError

shell32

ShellExecuteW
SHOpenFolderAndSelectItems

shlwapi

PathFindFileNameW

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c70d66321288e10e703fb38274616523

Headers

DLL Characteristics

File Characteristics

Imports

version

ole32

kernel32

setupapi

oleaut32

advapi32

shell32

shlwapi

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 98KB - Virtual size: 98KB

.data Size: 10KB - Virtual size: 11KB

.rsrc Size: 14KB - Virtual size: 13KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 98KB - Virtual size: 98KB

.data
Size: 10KB - Virtual size: 11KB

.rsrc
Size: 14KB - Virtual size: 13KB