5944e3c23dcac873188d5d99a73ed52b36c3325012ab329981341a30b182c2ee

Sharing

Copy URL Twitter E-mail

General

Target

5944e3c23dcac873188d5d99a73ed52b36c3325012ab329981341a30b182c2ee
Size

300KB
MD5

72a328464a0b1902f8b2a3280e176160
SHA1

4fa23b631f917de79e14d5048209419d09753764
SHA256

5944e3c23dcac873188d5d99a73ed52b36c3325012ab329981341a30b182c2ee
SHA512

4933ca4e0e686f8098d1d46ceb4ffe138ec0ae93910f1039a3bcf3f85a578c7c04952e973a3de459a26662897e0d8c2fdf74b8801b7f67e598aca5e955e71b34
SSDEEP

3072:lquCwjXp3wqBo0nQSipcLVHcTUhDmVQy9qkRst5llLIcDla6uAIDD4nAiq:lAEX16VcLlcTIvmS/GcLID8nrq

Score

N/A

Malware Config

Signatures

Files

5944e3c23dcac873188d5d99a73ed52b36c3325012ab329981341a30b182c2ee
.dll windows x86

67bccffdfac6fe89a5c44e3725ea8d24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetWindowTextA
GetWindowThreadProcessId
EnumWindows
GetClassNameA
GetWindowPlacement
ShowWindow
SetWindowPos
FindWindowA
VkKeyScanA
MapVirtualKeyA
UnhookWindowsHookEx
SetWindowsHookExA
GetCursorPos
PeekMessageA
GetActiveWindow
SetClassLongA
WinHelpA
GetParent
ReleaseDC
SendMessageA
GetDC
GetKeyboardState
CallNextHookEx
GetWindowLongA
SetKeyboardState

comdlg32

ChooseColorA
ChooseFontA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA

advapi32

GetUserNameA
RegSetValueExA
RegQueryValueExA
RegCreateKeyA
RegDeleteKeyA
RegOpenKeyExA

mpr

WNetGetConnectionA

winmm

PlaySoundA

shell32

ShellExecuteA
ExtractIconA

gdi32

GetDeviceCaps

kernel32

WinExec
Sleep
OutputDebugStringA
MoveFileA
GetACP
CopyFileA
SetStdHandle
SetEndOfFile
GetStringTypeA
GetStringTypeW
GetCPInfo
GetEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetCurrentProcess
TerminateProcess
ReadFile
WriteFile
FlushFileBuffers
DeleteFileA
LoadLibraryA
GetOEMCP
GetStdHandle
SetHandleCount
SetFilePointer
GetCurrentProcessId
GetFileType
GetProcAddress
GetModuleHandleA
CloseHandle
GetVersionExA
GetTickCount
lstrlenA
lstrcpyA
LocalFree
LocalUnlock
GlobalFree
GlobalUnlock
GlobalLock
LocalLock
LocalAlloc
MulDiv
FindClose
FindFirstFileA
FindNextFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
ExpandEnvironmentStringsA
GetWindowsDirectoryA
GetTempPathA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetComputerNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
GetLastError
CreateFileA
TlsGetValue
GetTempFileNameA
GetStartupInfoA
WideCharToMultiByte
RemoveDirectoryA
CreateDirectoryA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
InterlockedDecrement
InterlockedIncrement
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
VirtualAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
GetCurrentThreadId
HeapReAlloc
RtlUnwind
TlsSetValue
TlsAlloc
TlsFree
SetLastError

Exports

Exports

d2kwutil_ActiveWin
d2kwutil_Bitwise
d2kwutil_ChangeMDIIcon
d2kwutil_ChooseColor
d2kwutil_ChooseFile
d2kwutil_ChooseFont
d2kwutil_ChoosePrinter
d2kwutil_CopyFile
d2kwutil_CreateDir
d2kwutil_DebugString
d2kwutil_DelFile
d2kwutil_DeleteDir
d2kwutil_ExtractByte
d2kwutil_ExtractWord
d2kwutil_FileClose
d2kwutil_FileEOF
d2kwutil_FileFlush
d2kwutil_FileInfo
d2kwutil_FileOpen
d2kwutil_FileRead
d2kwutil_FileRewind
d2kwutil_FileSeek
d2kwutil_FileTell
d2kwutil_FileTemp
d2kwutil_FileWrite
d2kwutil_Find3rdPartyApp
d2kwutil_FindAppWindow
d2kwutil_FromBitString
d2kwutil_FromHexString
d2kwutil_GetComputerName
d2kwutil_GetDOSEnv
d2kwutil_GetRegKey
d2kwutil_GetTickCount
d2kwutil_GetWindowsVersion
d2kwutil_GetWinuser
d2kwutil_GetWorkingDirectory
d2kwutil_MaintRegKey
d2kwutil_MakeLong
d2kwutil_MakeWord
d2kwutil_Mouse_x_y
d2kwutil_MoveFile
d2kwutil_OneSession
d2kwutil_ParentWin
d2kwutil_PeekButtonClick
d2kwutil_PlaySound
d2kwutil_ReadINIFile
d2kwutil_SendKeys
d2kwutil_SendMsg
d2kwutil_SetRegKey
d2kwutil_SetWorkingDirectory
d2kwutil_ShellExecute
d2kwutil_Sleep
d2kwutil_TimeOutInit
d2kwutil_TimeOutLastEvent
d2kwutil_TimeOutUnHook
d2kwutil_TmpDir
d2kwutil_TmpFile
d2kwutil_ToBitString
d2kwutil_ToHexString
d2kwutil_Version
d2kwutil_WNetGetConnection
d2kwutil_WinDir
d2kwutil_WinExec
d2kwutil_WinHelp
d2kwutil_WriteINIFile
d2kwutil_dirlist_close
d2kwutil_dirlist_first
d2kwutil_dirlist_next

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

67bccffdfac6fe89a5c44e3725ea8d24

Headers

File Characteristics

Imports

user32

comdlg32

advapi32

mpr

winmm

shell32

gdi32

kernel32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 16KB - Virtual size: 20KB

.rsrc Size: 96KB - Virtual size: 92KB

.reloc Size: 8KB - Virtual size: 5KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 16KB - Virtual size: 20KB

.rsrc
Size: 96KB - Virtual size: 92KB

.reloc
Size: 8KB - Virtual size: 5KB

.text
Size: 112KB - Virtual size: 112KB