6e2bda38f6c9f1df59232b4480bd7a06ca1b0a1243dad3cdd47275718621311a

Sharing

Copy URL Twitter E-mail

General

Target

6e2bda38f6c9f1df59232b4480bd7a06ca1b0a1243dad3cdd47275718621311a
Size

84KB
MD5

20cdfc8a1f0a7c5f1ff3e7620d4933a1
SHA1

912f0efd94c78c6cbf518e0a339cb7c830b9886b
SHA256

6e2bda38f6c9f1df59232b4480bd7a06ca1b0a1243dad3cdd47275718621311a
SHA512

fdebb63ca71cc9b5919a35f483fa67ec9974b0db607b9933941666cd108e1998089d3658cd8396adaa9a3f7a196f5ede4607827bfdbdd8d20012001b198b057b
SSDEEP

1536:Yc3+xNaPEEXR8SLbeaGh1zIBkC1jIylC1SyH:F38aPvALukCxIrp

Score

N/A

Malware Config

Signatures

Files

6e2bda38f6c9f1df59232b4480bd7a06ca1b0a1243dad3cdd47275718621311a
.dll windows x86

f36e36ab5d9d2d549a84c055ab21fff4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidLanguageGroup
CreateIoCompletionPort
VirtualQueryEx
GlobalDeleteAtom
GetStringTypeExA
GetSystemDirectoryW
UnregisterWaitEx
CreateTimerQueueTimer
LocalSize
ExitProcess
GetProcessVersion
WaitNamedPipeA
GetLogicalDriveStringsW
FindAtomW
GetVersionExW
WriteFileEx
PeekConsoleInputA
FreeConsole
TerminateJobObject
AllocConsole
LockFileEx
GetLongPathNameW
SetMailslotInfo
WaitForMultipleObjectsEx
LockFile
SetCommMask
WinExec
GetCommTimeouts
LCMapStringA
LocalHandle
HeapWalk
EnumResourceNamesW
SetCommTimeouts
GetProfileStringA
FatalAppExitA
WriteProfileStringW
GetDateFormatA
GetVolumeInformationW
SetHandleCount
GetStdHandle
InterlockedCompareExchange
lstrcpynW
GetSystemWindowsDirectoryA
GetLocaleInfoA
CreateActCtxW
FindNextFileA
LocalFlags
GetLargestConsoleWindowSize
MoveFileW
AssignProcessToJobObject
ResetEvent
GetTimeZoneInformation
lstrcpynA
HeapFree
VirtualQuery
WriteFile
InterlockedDecrement
GetCurrentProcessId
GetProcAddress
LocalFree
LoadLibraryA
GetModuleFileNameA
CreateDirectoryA
SetCurrentDirectoryW

ole32

CoSwitchCallContext
OleLoadFromStream
CreateAntiMoniker
OleCreateFromData
DoDragDrop
OleCreateFromFile
CoTaskMemRealloc
OleLockRunning
RevokeDragDrop
CoCreateInstanceEx
CoTaskMemAlloc
CoUninitialize

user32

GetForegroundWindow
CharUpperBuffW
OpenDesktopW
LoadImageA
GetPropA
ClientToScreen
CharUpperW
LoadMenuW
GetTabbedTextExtentA
ModifyMenuW
GetSystemMenu
SendMessageTimeoutW
GetWindowRect
DispatchMessageW
RemoveMenu
DrawTextW
MapVirtualKeyExW
GetLastActivePopup
CreateDialogParamW
GetUserObjectInformationA
ScrollWindow
OemToCharA
UpdateLayeredWindow
InvalidateRgn
GetDialogBaseUnits
InSendMessage
SetPropW
CreateDialogIndirectParamW
SendInput
GetMessageTime
CreateWindowExA
FindWindowA
GetClassNameA
SetWinEventHook
DefWindowProcA
GetWindowThreadProcessId
OpenWindowStationW

oleaut32

SysAllocString

shlwapi

StrFormatByteSizeW
StrCmpW
PathFileExistsA
PathGetDriveNumberW
PathAddBackslashW
SHCreateShellPalette
PathBuildRootW
SHRegSetPathW
PathFindExtensionA
StrChrW

advapi32

GetUserNameA
RegQueryValueExA
RegDeleteValueA
SetSecurityInfo
IsTokenRestricted
QueryServiceConfigW
RegNotifyChangeKeyValue
RegRestoreKeyW
NotifyChangeEventLog
RegSetValueExW
GetOldestEventLogRecord
RegOpenKeyExW
CredReadDomainCredentialsW
GetUserNameW
GetAclInformation
RegDeleteKeyW
ReportEventA
DeregisterEventSource

shell32

SHOpenFolderAndSelectItems
SHChangeNotify
SHGetSpecialFolderPathA

gdi32

PolyPolygon
UnrealizeObject
StretchDIBits
RealizePalette
CloseFigure
CreatePen
EndPage
GetEnhMetaFileHeader
GetTextExtentExPointW
GetMapMode
AbortPath
SetViewportOrgEx
GetObjectType
Polyline
CreateEnhMetaFileW
CreatePenIndirect
CreateDIBitmap
SetBitmapBits
GetDIBits
CreateFontIndirectW
GetROP2
GetGraphicsMode
CreateHalftonePalette
Polygon
RemoveFontResourceW
GetViewportExtEx
SetRectRgn
AddFontResourceA
ArcTo
EndDoc

Exports

Exports

SecurityMobiledrm

Sections

.text
Size: 60KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f36e36ab5d9d2d549a84c055ab21fff4

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

advapi32

shell32

gdi32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 56KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 56KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 2KB