69ca727721163b9e386d646cd636334041cbfed6c6defd0a39d9af57232e5e98

Sharing

Copy URL Twitter E-mail

General

Target

69ca727721163b9e386d646cd636334041cbfed6c6defd0a39d9af57232e5e98
Size

140KB
MD5

91f0a694bc817f4039bea70b9013fdb0
SHA1

f3195a87419ff0c6904952b41e06bcd6bd852bcb
SHA256

69ca727721163b9e386d646cd636334041cbfed6c6defd0a39d9af57232e5e98
SHA512

7fb6d520a208c1eb3a40aa65d64b428c81b84161ade7322b33f8934da0b29329a9a2f6e1be6c420e9d7cfecf0db8f1e89378cbb6245445b21d14c1373935ea20
SSDEEP

3072:95lXO1QR7H78ji3m6nsREE4sGUANRf5grTcFqzSMB1J1bfCNFZ8yL:FUQR7gu3mdUgANRfycYzx1JtCNr

Score

N/A

Malware Config

Signatures

Files

69ca727721163b9e386d646cd636334041cbfed6c6defd0a39d9af57232e5e98
.dll windows x86

8365e26b493650c825a2f50518e3c02d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetACP
GetCPInfo
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableW
GetFileType
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersionExA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
FindCloseChangeNotification
InterlockedExchange
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
LocalReAlloc
MultiByteToWideChar
OpenEventW
QueryPerformanceCounter
ResumeThread
RtlUnwind
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetProcessShutdownParameters
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiW
lstrcpyW
lstrlenW
FindClose
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnterCriticalSection
CreateThread
CreateEventW
CompareStringW
InitializeCriticalSection
CloseHandle

user32

GetWindowLongW
GetWindowRect
IsDlgButtonChecked
KillTimer
LoadIconW
LoadImageW
LoadStringW
MessageBoxW
PostMessageW
PostQuitMessage
RegisterClassW
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
GetSystemMetrics
SetTimer
SetWindowPos
TranslateMessage
LoadIconA
GetMessageW
GetDlgItem
GetDesktopWindow
GetClientRect
EndDialog
DispatchMessageW
DialogBoxParamW
DefWindowProcW
CreateWindowExW
CheckDlgButton
SetForegroundWindow
GetParent

gdi32

GetStockObject

advapi32

RegOpenKeyExW
GetSecurityInfo
RegCloseKey
RegNotifyChangeKeyValue
RegQueryValueExW
SetSecurityInfo
RegOpenKeyExA

shell32

Shell_NotifyIconW

msvcrt

memcpy

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 127KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8365e26b493650c825a2f50518e3c02d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msvcrt

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 127KB - Virtual size: 127KB

.rsrc Size: 4KB - Virtual size: 3KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 127KB - Virtual size: 127KB

.rsrc
Size: 4KB - Virtual size: 3KB