fad899d208ae5944fa800b539af419c48d24821cf6298abd5c3abd6134b3f7fa

Sharing

Copy URL

Twitter E-mail

General

Target

fad899d208ae5944fa800b539af419c48d24821cf6298abd5c3abd6134b3f7fa
Size

147KB
MD5

90ccb3d2040e0976a2ca9ceba7dd4fb4
SHA1

63f30a0b22d7a69de17bca9b27e829c02f51ff16
SHA256

fad899d208ae5944fa800b539af419c48d24821cf6298abd5c3abd6134b3f7fa
SHA512

2816bcda3d5ffe04b50a9fe2e94b926e9e1b83a78a967932b8488ff712215856feb2a3a03b8d3f6600a2bc325177a546de59208181849ada5eea25eacfbff5fb
SSDEEP

3072:HpGVunlAXtH4MdiEHKi+cKVW/snwgpDYs0qu1zbjTJsqR1L:HpG8l8h4UKi/+WknwgFPudbjTJs

Score

N/A

Malware Config

Signatures

Files

fad899d208ae5944fa800b539af419c48d24821cf6298abd5c3abd6134b3f7fa
.dll windows x86

55152649d03a15827bc1d302ad0d68ca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

CloseEnhMetaFile

msvcrt

_except_handler3
wcscmp

shell32

ShellExecuteW
SHOpenFolderAndSelectItems
SHSetUnreadMailCountW

kernel32

GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcmpiW
GetCurrentThreadId
GetCurrentProcess
GetComputerNameW
GetLastError
CloseHandle
CompareStringW
DisableThreadLibraryCalls
ExitProcess
GetCommandLineA

user32

ShowWindow
SetWindowLongW
SendMessageW
OffsetRect
GetWindowTextW
GetWindowLongW
GetThreadDesktop
EndDialog
EnableWindow
DialogBoxParamW
SetWindowTextW
GetParent

setupapi

SetupDiGetClassInstallParamsW
SetupOpenLog
SetupLogErrorW
SetupDiSetClassInstallParamsW
CMP_Report_LogOn
CM_Create_DevNodeA
SetupCloseLog
SetupDiCreateDevRegKeyW
SetupDiGetDeviceRegistryPropertyW
SetupDiInstallDevice
SetupDiOpenDevRegKey

advapi32

ChangeServiceConfigW
RegSetValueExW
RegSetKeySecurity
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
OpenServiceW
OpenSCManagerW
InitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ControlService
CloseServiceHandle
AddAce

Sections

.text
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

55152649d03a15827bc1d302ad0d68ca

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

msvcrt

shell32

kernel32

user32

setupapi

advapi32

Sections

.text Size: 38KB - Virtual size: 38KB

.rdata Size: 71KB - Virtual size: 70KB

.data Size: 34KB - Virtual size: 35KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 38KB - Virtual size: 38KB

.rdata
Size: 71KB - Virtual size: 70KB

.data
Size: 34KB - Virtual size: 35KB

.rsrc
Size: 3KB - Virtual size: 2KB