67866d9ed31d326b244786caf2b3601de1448e5976c80ebd0e70c4d5fe504721

Sharing

Copy URL Twitter E-mail

General

Target

67866d9ed31d326b244786caf2b3601de1448e5976c80ebd0e70c4d5fe504721
Size

134KB
MD5

1cd458e6c6eb97e744fc56bc48ec7dce
SHA1

20b1a327eea80043f602c8b893c3c9ea3aa7fe6b
SHA256

67866d9ed31d326b244786caf2b3601de1448e5976c80ebd0e70c4d5fe504721
SHA512

e9251a6115ee1903ae5b78be1efac6299b72037c6bd4314d2b21aec593235f43d130e16c3760411872f9ef295de2585334692b05937d0f9adc087689edb7234a
SSDEEP

3072:fD6eJYoUYqEP+27D6+tzskjpS0lIWge6/U:7HJKT32bZpS0lk

Score

N/A

Malware Config

Signatures

Files

67866d9ed31d326b244786caf2b3601de1448e5976c80ebd0e70c4d5fe504721
.dll windows x86

2840040ccb9b6c19816ee71343b5291d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
memset

user32

DestroyWindow
LoadCursorW
SetCursor
IsDlgButtonChecked
SendMessageW
PostQuitMessage
LoadImageW
LoadIconW
SendDlgItemMessageW
CheckRadioButton
CreateDialogParamW
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW

advapi32

RegDeleteValueW
TraceEvent
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
GetTokenInformation
OpenProcessToken
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryInfoKeyW
GetTraceEnableFlags

kernel32

FreeLibrary
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LocalFree
GetSystemDirectoryW
GetCurrentProcess
CloseHandle
GetVersionExW
GetModuleFileNameW
GetProcAddress
GetModuleHandleW
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
LoadLibraryW
TerminateProcess

advpack

IsNTAdmin
ExecuteCabW

shlwapi

PathAppendW

oleaut32

SysFreeString
SysAllocString

ole32

CoCreateInstance

Exports

Exports

IEApplyCurrentHardening
IEHardenAdmin
IEHardenAdminNow
IEHardenLMSettings
IEHardenMachineNow
IEHardenUser
IEShowHardeningDialog

Sections

.text
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 65KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2840040ccb9b6c19816ee71343b5291d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

advapi32

kernel32

advpack

shlwapi

oleaut32

ole32

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 24KB

.data Size: 65KB - Virtual size: 65KB

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 24KB - Virtual size: 24KB

.data
Size: 65KB - Virtual size: 65KB

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 1KB - Virtual size: 1KB