91acaf2dfc6bbcbbd50c10234f178fe81d2f164abe4393a292ea06eec28f56bc

Sharing

Copy URL Twitter E-mail

General

Target

91acaf2dfc6bbcbbd50c10234f178fe81d2f164abe4393a292ea06eec28f56bc
Size

243KB
MD5

691f2162d147eb63956d01ff09f871c0
SHA1

15794eeac5c2a3d1a6c0c7c9b1d9040b5411058f
SHA256

91acaf2dfc6bbcbbd50c10234f178fe81d2f164abe4393a292ea06eec28f56bc
SHA512

8a25dc5c768e2fc9fbf5a25bdc8da8e2a93cd1f7d4f4786992b90cf169b42b5b9a4b759ad19ca01cb5e7ce3b2738aaa82714028dd4fb092f00f43de636043920
SSDEEP

6144:hm08WxhOmNV8Y80PuZLxDzyaMh04hSYWQf1S2/LLBs0a2g+8U7ekbbGfn:d8cOmNOYGZLxD+v0xYl82/Llrk+lbi

Score

N/A

Malware Config

Signatures

Files

91acaf2dfc6bbcbbd50c10234f178fe81d2f164abe4393a292ea06eec28f56bc
.dll windows x86

ebd4dac1b1e58625232297688fc67bb7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA

kernel32

GetStartupInfoW
lstrcmpiA
GetThreadPriority
GetConsoleMode
LoadLibraryExW
CreateSemaphoreA
FileTimeToLocalFileTime
CreateEventA
GetDiskFreeSpaceA
GetCommandLineW
GetEnvironmentVariableW
GetDriveTypeW
GlobalCompact
GetCurrentProcess
GetEnvironmentStringsW
GetUserDefaultLCID
SetVolumeMountPointW
GetLogicalDrives
GetSystemDefaultLCID
GetModuleHandleW
GetCurrentThread
GetProcessHeap
IsBadReadPtr
GetCompressedFileSizeW
GetCommandLineA
GetDriveTypeA
GetVolumeInformationA
GetConsoleAliasExesLengthW
GetVersionExW
MulDiv
IsDBCSLeadByte
GetConsoleOutputCP
GetStdHandle
GetLastError
IsDBCSLeadByteEx
SetLastError
GetThreadLocale
SetFileApisToOEM
GetModuleHandleA
GetUserDefaultUILanguage
GetCurrentThreadId
GetVolumeInformationW
FindVolumeClose
GetTickCount

user32

DdeAddData
MapVirtualKeyA
DrawEdge
SetActiveWindow
RemoveMenu
InternalGetWindowText
GetClassLongA
DefFrameProcW
GetMessagePos
GetMessageTime
GetDialogBaseUnits
GetScrollPos
FindWindowA
SetClipboardData
CountClipboardFormats
SetWindowTextA
DdeNameService
AllowSetForegroundWindow
IsWindowVisible
GetSystemMetrics
HiliteMenuItem
UnhookWindowsHookEx
OpenClipboard
CheckRadioButton
GetKeyboardType
FindWindowExW
IsWindow
GetMenuItemCount
AppendMenuA
SwitchDesktop
CheckDlgButton
SetWindowPos
DestroyCaret
SetWindowLongW
IsWindowUnicode
EmptyClipboard
EnableMenuItem
GetDCEx
SetClassLongW
GetWindowLongW
SetCursorPos
SetWindowLongA
GetAsyncKeyState
IsCharAlphaNumericW
GetCapture
GetDC
GetClassLongW
GetWindowTextLengthA
CloseDesktop
SetParent
FindWindowExA
IsClipboardFormatAvailable
DeleteMenu
GetKeyState
SetCapture
GetTopWindow
GetMenuItemID
TrackPopupMenu
ImpersonateDdeClientWindow
OpenIcon
HideCaret
DrawAnimatedRects
IsCharUpperA
CallWindowProcA
DrawFrameControl
GetShellWindow

gdi32

GetStockObject
StretchDIBits
SetViewportExtEx

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_MEM_READ

.data
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebd4dac1b1e58625232297688fc67bb7

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

Sections

.text Size: 100KB - Virtual size: 99KB

.edata Size: 45KB - Virtual size: 45KB

.data Size: 82KB - Virtual size: 81KB

.reloc Size: 3KB - Virtual size: 3KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 100KB - Virtual size: 99KB

.edata
Size: 45KB - Virtual size: 45KB

.data
Size: 82KB - Virtual size: 81KB

.reloc
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 11KB - Virtual size: 11KB