d0817effc017e87fd7387054e0b67b47dbe716bf5b35974058f46a1afda4a756

Sharing

Copy URL Twitter E-mail

General

Target

d0817effc017e87fd7387054e0b67b47dbe716bf5b35974058f46a1afda4a756
Size

155KB
MD5

a218eabb6ed8f698a0607be92805204d
SHA1

0006855b40a852299cd7d7a35e3050952d8197ac
SHA256

d0817effc017e87fd7387054e0b67b47dbe716bf5b35974058f46a1afda4a756
SHA512

2f3ca8e9aafef4247c1f505c774d16a92697c9698e67516208fe561895670e49927ad53333130ee46a46249725bad4e085bcdd1b6192b311b8075cad4d2fc276
SSDEEP

3072:GKaLHkSY01qoDzXdbXcaB4LFnf6iuY0NCcYRtuwhl8PbrymxBnb63FHY:gLHk9JodDVoxSiA+G/ymxN6x

Score

N/A

Malware Config

Signatures

Files

d0817effc017e87fd7387054e0b67b47dbe716bf5b35974058f46a1afda4a756
.dll windows x86

32ea4a9180f23d267f813ca2dbe7dbf8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsW
GetFileAttributesW
GetFileSizeEx
GetFileType
GetGeoInfoW
GetLastError
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapCreate
ExitProcess
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadResource
LockResource
MoveFileW
MultiByteToWideChar
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
RtlUnwind
SetEnvironmentVariableA
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WaitForSingleObject
lstrlenW
EnterCriticalSection
DeleteFileW
DeleteCriticalSection
CreateMutexA
CreateFileW
CreateFileA
CreateEventA
CreateDirectoryW
CompareStringA
HeapDestroy
CloseHandle

shell32

ShellExecuteW
SHOpenFolderAndSelectItems

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

ole32

CoCreateInstance

advapi32

RegCloseKey
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
RegOpenCurrentUser
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
LsaNtStatusToWinError

oleaut32

SysFreeString
VariantInit
VariantCopy
VariantClear
VariantChangeType
SysStringLen
SysStringByteLen
SysAllocStringLen
LoadRegTypeLi
LoadTypeLi
SafeArrayCopy
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayGetVartype
SafeArrayLock
SafeArrayUnlock
SysAllocString
SysAllocStringByteLen

setupapi

CM_Get_DevNode_Status
SetupDiOpenDevRegKey
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiSetSelectedDriverW
SetupGetFieldCount
SetupGetStringFieldW
SetupDiGetClassDevsW
SetupDiSetSelectedDevice
CM_Get_Device_IDW
SetupDiDeleteDeviceInfo
SetupDiEnumDeviceInfo

shlwapi

PathFindFileNameW

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

32ea4a9180f23d267f813ca2dbe7dbf8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

version

ole32

advapi32

oleaut32

setupapi

shlwapi

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 11KB - Virtual size: 11KB

.rsrc Size: 13KB - Virtual size: 12KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 13KB - Virtual size: 12KB