dec9deab220a19f36e76535cad28c2f1c90a9a0c823563a4f6321103ae7a674a

Sharing

Copy URL Twitter E-mail

General

Target

dec9deab220a19f36e76535cad28c2f1c90a9a0c823563a4f6321103ae7a674a
Size

197KB
MD5

905a12b0c7b62a4b61a420d317a27aaf
SHA1

0f62c9c358c64cf5380caa772f3b3ffc7c677ba2
SHA256

dec9deab220a19f36e76535cad28c2f1c90a9a0c823563a4f6321103ae7a674a
SHA512

4661df78bdbb9bc96f450831963ab6b64991853df42a72ad420f442da2df085e82c1e8529b9845993eeab72f5195f93161bf45727301a60a332b645c44c80b3f
SSDEEP

3072:xFkMo9AYd2g7y29uvuBOTeqdFO1NTesE7XHb3xsJE6ixZOKriZeWP0bmmJKL66bk:bVVdvCIu1yr3xsMxZO21mu

Score

N/A

Malware Config

Signatures

Files

dec9deab220a19f36e76535cad28c2f1c90a9a0c823563a4f6321103ae7a674a
.dll windows x64

f35341d152d400129c9aed6d2a6646b8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

PulseEvent
WideCharToMultiByte
TlsSetValue
TlsGetValue
TlsAlloc
CloseHandle
UnmapViewOfFile
CreateEventA
GetLastError
CreateMutexA
CreateFileMappingA
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
MapViewOfFile
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
GetProcAddress
GetModuleFileNameA
DeleteCriticalSection
LoadLibraryExA
FreeLibrary
CreateProcessA
WaitForSingleObject
InitializeCriticalSection
ExpandEnvironmentStringsA
MultiByteToWideChar
SetStdHandle
ReadFile
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetFilePointer
lstrlenA
HeapFree
GetProcessHeap
RtlLookupFunctionEntry
RtlUnwindEx
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
HeapAlloc
RaiseException
RtlPcToFileHeader
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
FlsGetValue
TlsFree
FlsFree
SetLastError
FlsAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
RtlVirtualUnwind
HeapSetInformation
HeapCreate
HeapDestroy
LCMapStringA
LCMapStringW
Sleep
HeapSize
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetStringTypeA
GetStringTypeW
GetLocaleInfoA

user32

PostMessageA
wsprintfA
LoadStringW
LoadStringA
PtInRect
IsWindow
GetWindowThreadProcessId
SendMessageA

advapi32

RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyA

ole32

CLSIDFromProgID
CoCreateInstance
CoInitialize

oleaut32

SysFreeString
SysAllocString
VariantClear

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

CommitPlugIns
ConfigurePlugIn
DllGetVersion
DllMain
ExitPlugIns
FindAndGetCustomZoneProperty
GetActionHandle
GetActivePlugIn
GetActivePlugInDefault
GetNumPlugIns
GetPlugInActionIDA
GetPlugInActionIDW
GetPlugInBitmapID
GetPlugInHandle
GetPlugInHandleW
GetPlugInHelpCommand
GetPlugInHelpData
GetPlugInHelpFile
GetPlugInHelpFileW
GetPlugInKeySequence
GetPlugInLongName
GetPlugInLongNameW
GetPlugInOrderID
GetPlugInRegistryValueToChangeA
GetPlugInRegistryValueToChangeW
GetPlugInShortName
GetPlugInShortNameW
GetPlugInValidZones
GetPlugInWindowMessageA
GetPlugInWindowMessageW
IsPlugInConfigurable
IsPlugInValidOnDevice
IsPlugInValidOnZone
ReInitZonesA
ReInitZonesW
RegisterActionHandle
RegisterPlugIn
RegisterPlugInW
RevertPlugIns
SendPlugInEvent
SetActivePlugIn
StartPlugIns
UpdateTPList

Sections

.text
Size: 125KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f35341d152d400129c9aed6d2a6646b8

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

version

Exports

Exports

Sections

.text Size: 125KB - Virtual size: 124KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 8KB - Virtual size: 16KB

.pdata Size: 8KB - Virtual size: 7KB

.rsrc Size: 15KB - Virtual size: 14KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 125KB - Virtual size: 124KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 8KB - Virtual size: 16KB

.pdata
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 15KB - Virtual size: 14KB

.reloc
Size: 2KB - Virtual size: 1KB