b87d91b7344f20622729c67ce8aff78732b94b2960492ac070e38e5d9424c298

Sharing

Copy URL Twitter E-mail

General

Target

b87d91b7344f20622729c67ce8aff78732b94b2960492ac070e38e5d9424c298
Size

132KB
MD5

56e1a928aa82228c45c10ab740afb7fd
SHA1

ae5dc40bc350e19a6b6c6037bfe0ee6497c8a37b
SHA256

b87d91b7344f20622729c67ce8aff78732b94b2960492ac070e38e5d9424c298
SHA512

1822594bfbd911ae5c7d855b0fa11101c076c6c208dfd6160c7bead994ec90b4e26b36f4f73bea37a5c061b92b0546e50f7b3e4436bd13d5537cc4b373ed6c3d
SSDEEP

3072:P7yuixiLfKLnPLAZGJk23quzZ5YTB3jQ5a4:TolL223RZ5YTB3jQ5d

Score

N/A

Malware Config

Signatures

Files

b87d91b7344f20622729c67ce8aff78732b94b2960492ac070e38e5d9424c298
.dll windows x86

de4530b593ec4f965d61a3f423bbf563

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GlobalDeleteAtom
SetCommTimeouts
SetWaitableTimer
CreateFileA
BuildCommDCBW
SetUnhandledExceptionFilter
GetFileType
Heap32Next
FillConsoleOutputAttribute
OutputDebugStringW
ConvertDefaultLocale
DeleteVolumeMountPointW
EnumDateFormatsW
AddAtomA
ReadFile
GetFileAttributesW
InterlockedIncrement
GetTimeFormatW
SetCalendarInfoA
WaitForSingleObject
WriteFileGather
GetNextVDMCommand
SetSystemPowerState
GetConsoleAliasExesA
GetSystemDefaultLCID
GetProfileSectionA
GlobalFindAtomA
GlobalFindAtomW
InitAtomTable
OpenProcess
GetStartupInfoA
FindNextVolumeMountPointA
ExpandEnvironmentStringsA
GetTempFileNameA
GetCPInfoExW
WritePrivateProfileStringW
GetCurrentDirectoryW
GetModuleHandleA
SetHandleCount
CompareStringA
GetCurrencyFormatA
GetEnvironmentVariableA
GetCompressedFileSizeW
SetComputerNameA
CmdBatNotification
GetCommState
SetConsoleActiveScreenBuffer
VirtualQueryEx
lstrcpyW
CreateThread
PurgeComm
GetSystemTime
CreateDirectoryExA
EnumCalendarInfoExW
IsBadHugeReadPtr
CreateFileMappingA
CloseHandle
WriteConsoleOutputCharacterA
BuildCommDCBAndTimeoutsW
GetNumberOfConsoleFonts
LocalFileTimeToFileTime
SetLocaleInfoA
TlsSetValue
GetEnvironmentVariableW
VDMConsoleOperation
VirtualAlloc
ReadConsoleOutputA
LocalCompact
GetTempPathW
EnumDateFormatsExA
InterlockedCompareExchange
CompareStringW
FindFirstFileExA
Beep
SetEnvironmentVariableW
WaitForMultipleObjectsEx
UpdateResourceA
GetTapeParameters
GetDiskFreeSpaceA
MoveFileWithProgressW
LoadLibraryA
FindAtomA
CreateWaitableTimerW
GetProcAddress
GetConsoleAliasesA
FindNextFileA
CreateJobObjectW
GetWindowsDirectoryA
LocalLock
GetConsoleDisplayMode
SetDefaultCommConfigW
OpenWaitableTimerA
GetHandleInformation
GetCurrentDirectoryA
GetThreadTimes
SetupComm
HeapAlloc
GetConsoleAliasesW
AddAtomW
EnumDateFormatsExW
QueryDosDeviceW
GetVersion
GetLastError
ExpandEnvironmentStringsW
VerLanguageNameA
SetThreadPriority
GetCommModemStatus
SetConsoleNumberOfCommandsW
SetConsoleWindowInfo
GetNamedPipeHandleStateW
VerLanguageNameW
FindNextVolumeA
FlushFileBuffers
OpenEventW
CreateHardLinkA
SleepEx
IsValidLocale
GetEnvironmentStringsW

user32

GetClassNameA
ToUnicode
GetActiveWindow
LoadMenuIndirectA
SetClipboardData
GetSysColor
GetMenuItemInfoW
ChangeDisplaySettingsW
CreateAcceleratorTableW
GrayStringA
DdeCreateDataHandle
PostMessageA
GetWindowPlacement
IsCharAlphaNumericA
DefMDIChildProcA
SetProcessDefaultLayout
RemoveMenu
GetDlgItem
IsIconic
DdeInitializeA
GetComboBoxInfo
CopyAcceleratorTableW
SetMenuItemInfoW
OpenDesktopA
FindWindowExW
EnumDisplaySettingsW

gdi32

GdiFlush
ExtSelectClipRgn
SetDIBitsToDevice
OffsetViewportOrgEx
EnumFontsA
SelectPalette
CreateDIBitmap
PolyPolyline
SetPolyFillMode
ColorMatchToTarget
GetTextExtentPointW
GetICMProfileW
PolyDraw
GetMetaFileW
GetEnhMetaFileW
SetTextColor
SetViewportExtEx
GdiResetDCEMF
AddFontResourceExW
SetDIBColorTable
AddFontMemResourceEx
GetViewportOrgEx
gdiPlaySpoolStream
GetEnhMetaFileHeader
Escape
GdiPlayDCScript
RoundRect

advapi32

CryptEnumProvidersA
SystemFunction008
RegLoadKeyW
ElfOpenEventLogA
ElfBackupEventLogFileA
LsaDeleteTrustedDomain
QueryServiceConfigA
SetFileSecurityA
GetAuditedPermissionsFromAclA
LsaGetUserName
DecryptFileW
LsaLookupSids
IsValidAcl
RegisterServiceCtrlHandlerW
LsaEnumerateTrustedDomains
SystemFunction023
ClearEventLogW
OpenProcessToken
CryptDestroyKey
AreAllAccessesGranted
SetUserFileEncryptionKey
LookupSecurityDescriptorPartsA
LsaCreateSecret
RegOpenKeyExW
QueryServiceConfig2A
LsaICLookupSids
ReadEventLogW
GetAuditedPermissionsFromAclW
EnumDependentServicesA
DuplicateTokenEx
ElfRegisterEventSourceW
BuildSecurityDescriptorA
RegEnumKeyExW
RegDeleteKeyW
AccessCheckAndAuditAlarmW
OpenBackupEventLogW
StartServiceCtrlDispatcherW
AddAuditAccessAceEx

comctl32

ImageList_AddMasked
DrawStatusTextW
ImageList_SetDragCursorImage
FlatSB_SetScrollProp
InitCommonControlsEx
ImageList_EndDrag
CreateStatusWindowW
ImageList_Merge
ImageList_DragShowNolock
FlatSB_GetScrollPos
ImageList_SetIconSize
ImageList_Remove
ImageList_GetDragImage
ImageList_SetFilter
ImageList_Draw
FlatSB_SetScrollInfo
ImageList_DragEnter
ord4
ord5
ord16
FlatSB_SetScrollRange
UninitializeFlatSB
ImageList_DrawEx
ord6
ord17
CreatePropertySheetPageW
ImageList_BeginDrag
ord14
ImageList_DragLeave
FlatSB_ShowScrollBar
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageRect
FlatSB_EnableScrollBar
InitializeFlatSB
ord13
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_DrawIndirect

opengl32

glRectd
glVertex2d
glIndexPointer
glDisableClientState
glLightf
glVertex3i
glTexCoord2sv
glGetTexGeniv
glStencilMask
glColor3bv
glVertex3dv
glGetTexEnvfv
glGetDoublev
glNormal3b
glNewList
wglUseFontOutlinesA
glGetMaterialiv
glIndexdv
glPixelTransferi
glTexGeniv
glRasterPos2f
glRasterPos4fv
glPixelTransferf
glColor4ub
glCopyTexImage2D
glIsTexture
glFrontFace
glDebugEntry
wglCreateContext
glMapGrid1d
glTexCoord3i
glGetTexImage
glTexCoord4i
glSelectBuffer
glColor3ub
glAlphaFunc
glPixelMapuiv
glTexCoord1dv
glLineWidth
glVertex4sv
glLoadIdentity
glTexCoord3fv
glBegin
glAccum
glVertex4f
glColor3s
glPushMatrix
glLightfv
glColor3usv

shell32

SHGetDataFromIDListA
ShellExecuteW
StrRChrIA
RealShellExecuteW
CheckEscapesW
SHGetFileInfoA
StrChrW
SHInvokePrinterCommandA
StrRStrIW
DragQueryFileAorW
StrCmpNIA
ExtractIconA
SHAddToRecentDocs
SHGetPathFromIDListW
StrCmpNIW
Shell_NotifyIconW
SheChangeDirA
SHGetDataFromIDListW
ExtractIconW
ShellHookProc
StrNCmpIW
SHLoadInProc
ExtractAssociatedIconA
StrRStrA
ord179
ExtractAssociatedIconW
StrNCmpA
SheChangeDirExW
SHGetInstanceExplorer
SHGetMalloc
FindExecutableW
StrRChrA
SHChangeNotify
SHGetSpecialFolderLocation
StrChrA
ExtractAssociatedIconExW
StrStrW
FindExecutableA
RealShellExecuteExW
ShellExecuteExW
RegenerateUserEnvironment
RealShellExecuteA
DuplicateIcon
StrNCmpW
SHFormatDrive
SHGetDesktopFolder
StrStrIA
StrRChrW
SHFileOperationW
SHQueryRecycleBinW
SHFileOperationA
StrRChrIW
SHInvokePrinterCommandW
FreeIconList
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
DragQueryPoint
SHGetDiskFreeSpaceA
StrNCmpIA
DoEnvironmentSubstA
ord180
SHQueryRecycleBinA
SHBrowseForFolderA
StrCmpNA
WOWShellExecute
DragFinish
StrCmpNW
ShellAboutW
SHGetPathFromIDListA
SHFreeNameMappings
ExtractIconExA
CommandLineToArgvW
Shell_NotifyIconA
RealShellExecuteExA
InternalExtractIconListW
StrRStrW
InternalExtractIconListA
StrChrIA
DoEnvironmentSubstW
StrChrIW
SHGetFileInfoW
SHEmptyRecycleBinA
StrRStrIA
SHEmptyRecycleBinW

shlwapi

StrIsIntlEqualW
PathMakePrettyW
SHDeleteKeyA
IntlStrEqWorkerW

version

GetFileVersionInfoA
GetFileVersionInfoW
VerFindFileW
VerInstallFileA
GetFileVersionInfoSizeW
VerQueryValueW
VerInstallFileW
VerFindFileA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

auxOutMessage
mciGetDeviceIDA
midiOutGetDevCapsA
waveOutReset
mmioStringToFOURCCA
waveInStart
midiInPrepareHeader
waveInGetErrorTextA
waveInReset
mciGetCreatorTask
midiInClose
waveInGetID
WOW32ResolveMultiMediaHandle
mmioOpenA
waveInGetErrorTextW
midiOutSetVolume
mmioDescend
mciGetErrorStringA
mciSetYieldProc
mciSendStringA
waveOutGetErrorTextA
mmioRead
joySetThreshold
mciSendCommandA
waveOutClose
mmTaskBlock
joyReleaseCapture

msvcrt

fwprintf
_lrotl
_umask
isleadbyte
_strnset
_spawnl
_wspawnvpe
wcstod
_ismbcupper
_getmaxstdio
_ismbbprint
_atoi64
_mbsnicoll
_findnexti64
_wsearchenv
_wspawnl
atan2
_wstat
printf
_outpw
_mbsstr
_mbslen
_mbsncat
_mbccpy
_mbsncoll
_mbclen
__p__fmode
fmod
_initterm
_except_handler3
strtol
feof
fwrite
_mbsnicmp
__RTCastToVoid
_errno
ungetc
_dup2
fputs
_mbsnbset
memset
clearerr
_strrev
_cexit
localeconv
ldiv
_mkdir
_eof
fputwc
_memccpy
__p___wargv
fputc
ftell
_mbsset
_isatty
__mb_cur_max
_ultow
strerror
_mbsupr
_logb
_atodbl
_environ
isdigit
log
_wcsupr
malloc
ferror
_wfsopen
__toascii
_ismbbalnum
_commode
fread
_setsystime
_adj_fdiv_m16i
_mbctokata
exit
__winitenv
_adj_fptan
_ismbcgraph
_wchmod
_creat
_putw
fseek
_ismbclower
__p__daylight
_sys_nerr
_mbslwr
_mbsinc
_ismbbpunct
_telli64
_strcmpi
_CIcosh
vprintf
isxdigit
fclose
sprintf
fprintf
_wstrtime
fopen
_unlock
__p__environ
_i64tow
_unlink
_spawnlpe
fsetpos
_mbsrev
__wargv
_ui64toa
_wstati64
_ctype
_spawnve
_wexecl

Exports

Exports

Hfoegeendq
Nxsxny

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de4530b593ec4f965d61a3f423bbf563

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

opengl32

shell32

shlwapi

version

winmm

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 56KB - Virtual size: 54KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 56KB - Virtual size: 54KB

.reloc
Size: 8KB - Virtual size: 7KB