8a24893bc92f54608d6472be10307441a89ce6a882aff202315a011a48fda327

Sharing

Copy URL Twitter E-mail

General

Target

8a24893bc92f54608d6472be10307441a89ce6a882aff202315a011a48fda327
Size

245KB
MD5

46bfb3d9a5b32f2281f56cca94043cc0
SHA1

1ce0a801cc176ca1bade45614d8a0163ca561c56
SHA256

8a24893bc92f54608d6472be10307441a89ce6a882aff202315a011a48fda327
SHA512

f80d63c255f9739ded39595f4a7fb5e23e94251a9e7397201559c8ec1a3c11fcb665119aef6b7debe1e33d0312e5d17481be02bf11b9f37cbb30c562cd1dc1ac
SSDEEP

6144:VhD4OfF3xhGU1DXI+/wcNhmcSrLqHvkNPYPM:T5N3xhGUvYcNktdYP

Score

N/A

Malware Config

Signatures

Files

8a24893bc92f54608d6472be10307441a89ce6a882aff202315a011a48fda327
.dll windows x86

bb375f0343662c2cc5446a6fd85543d2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtoi
_onexit
_lock
memset
_unlock
iswdigit
memcpy
wcschr
wcsrchr
_vsnwprintf
__dllonexit
_wcsicmp
bsearch
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
wcsncmp
_wcsnicmp
wcsspn
memmove
wcsstr

kernel32

GetUserDefaultUILanguage
GetSystemDefaultUILanguage
UnmapViewOfFile
GetLocaleInfoW
CreateFileMappingW
MapViewOfFile
LoadLibraryExW
FindResourceExW
FindResourceW
InterlockedExchange
VirtualAlloc
VirtualFree
LoadLibraryA
OutputDebugStringW
DebugBreak
lstrlenA
GlobalAlloc
SearchPathW
GetModuleHandleW
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
InterlockedCompareExchange
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadResource
GlobalFree
lstrcmpW
HeapAlloc
GetProcessHeap
HeapFree
GetModuleFileNameW
GetVersionExW
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
DisableThreadLibraryCalls
DeleteCriticalSection
HeapDestroy
FreeLibrary
SetEvent
GetProcAddress
LoadLibraryW
CloseHandle
LocalFree
LocalReAlloc
LocalAlloc
WideCharToMultiByte
WaitForSingleObject
CreateThread
CreateEventW
MultiByteToWideChar
GetLastError
lstrlenW
GetVersion
ReadFile
GetFileSize
CreateFileW
lstrcmpiW
GetSystemDirectoryW
LeaveCriticalSection
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
RaiseException
GetCurrentThreadId
SetLastError
Sleep
GetWindowsDirectoryW
GetFileAttributesW
GetSystemTime

ole32

StringFromGUID2
CoUninitialize
CoInitialize
CoGetObject

wininet

InternetCrackUrlW

urlmon

IsValidURL

user32

DialogBoxParamW
CharNextW
SetPropW
RemovePropW
wvsprintfW
GetClientRect
SetWindowPos
SetDlgItemTextW
GetWindowTextLengthW
IsDlgButtonChecked
CheckDlgButton
SendDlgItemMessageW
LoadIconW
LoadImageW
MessageBoxW
LoadStringW
SetWindowLongW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
IsWindow
SendMessageW
GetPropW
SetFocus
GetDlgItem
EndDialog
GetDlgItemTextW
GetFocus
GetWindowTextW
SetForegroundWindow
ShowWindow
EnableWindow
GetSysColor
GetParent
SetWindowTextW
DestroyWindow
GetDC
ReleaseDC
DestroyIcon
GetSystemMetrics
GetWindowLongW
GetWindowRect
PostMessageW

advapi32

RegCloseKey
RegEnumValueW
RegQueryValueExW
RegSetValueExW
FreeSid
SetSecurityDescriptorDacl
GetAce
AddAccessAllowedAce
AllocateAndInitializeSid
InitializeAcl
InitializeSecurityDescriptor
RegCreateKeyExW
RegDeleteValueW
RegFlushKey
RegUnLoadKeyW
RegLoadKeyW
RegSaveKeyW
RegEnumKeyW
RegCreateKeyW
RegOpenKeyExW

ws2_32

gethostbyname
inet_addr

shlwapi

ord2
StrDupW
ord437
UrlApplySchemeW
SHDeleteKeyW

shell32

ShellExecuteW

iertutil

ord110
ord9
ord30
ord111
ord44
ord309

Exports

Exports

ChangeSupervisorPassword
ClickedOnPRF
ClickedOnRAT
DllCanUnloadNow
DllGetClassObject
RatingAccessDeniedDialog
RatingAccessDeniedDialog2
RatingAccessDeniedDialog2W
RatingAccessDeniedDialogW
RatingAddPropertyPages
RatingAddToApprovedSites
RatingCheckUserAccess
RatingCheckUserAccessW
RatingClickedOnPRFInternal
RatingClickedOnRATInternal
RatingCustomAddRatingHelper
RatingCustomAddRatingSystem
RatingCustomCrackData
RatingCustomDeleteCrackedData
RatingCustomInit
RatingCustomRemoveRatingHelper
RatingCustomSetDefaultBureau
RatingCustomSetUserOptions
RatingEnable
RatingEnableW
RatingEnabledQuery
RatingFreeDetails
RatingInit
RatingObtainCancel
RatingObtainQuery
RatingObtainQueryW
RatingSetupUI
RatingSetupUIW
VerifySupervisorPassword

Sections

.text
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bb375f0343662c2cc5446a6fd85543d2

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

ole32

wininet

urlmon

user32

advapi32

ws2_32

shlwapi

shell32

iertutil

Exports

Exports

Sections

.text Size: 133KB - Virtual size: 133KB

.data Size: 4KB - Virtual size: 8KB

.rsrc Size: 44KB - Virtual size: 43KB

.reloc Size: 6KB - Virtual size: 6KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 133KB - Virtual size: 133KB

.data
Size: 4KB - Virtual size: 8KB

.rsrc
Size: 44KB - Virtual size: 43KB

.reloc
Size: 6KB - Virtual size: 6KB

.rmnet
Size: 56KB - Virtual size: 60KB