28501e0e87725ebf3638b600bf6e2dc9fe2fed25d7c8d52aeb3c535a43f8aada

Sharing

Copy URL Twitter E-mail

General

Target

28501e0e87725ebf3638b600bf6e2dc9fe2fed25d7c8d52aeb3c535a43f8aada
Size

599KB
MD5

0c06a1b1fea206af5c0a7cc9dda84d90
SHA1

7968708244eaef22d3c7057661785a72eb2bcf09
SHA256

28501e0e87725ebf3638b600bf6e2dc9fe2fed25d7c8d52aeb3c535a43f8aada
SHA512

1c15f15289a3c5018ea9978c141c146d268ca6e93f80dd790a078647c7c4058668d538f85ee21119d722ac81825ff28637ac91bb346b8e095c7ba12f3d96b2e8
SSDEEP

6144:DQl7LP/qsL5q0A/GYhq4wrYwu46gy7fiRxAwdS8ytG5dHL+g64PpdbPjV0:c5b/q0AK16gy7fihbzp0

Score

N/A

Malware Config

Signatures

Files

28501e0e87725ebf3638b600bf6e2dc9fe2fed25d7c8d52aeb3c535a43f8aada
.dll windows x86

bf4f0f5dd23915918af48d2062da525d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_isatty
_write
_lseeki64
_fileno
__pioinfo
__badioinfo
wctomb
_itoa
_snprintf
_iob
isleadbyte
memcpy
memset
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
_errno
memmove
_vsnprintf

kernel32

GetACP
ConvertDefaultLocale
IsValidLocale
GetLastError
InterlockedIncrement
MulDiv
GetProcAddress
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
GetProfileIntA
GetProfileStringA
lstrcmpiA
CreateFileA
ReadFile
CloseHandle
DeleteCriticalSection
HeapDestroy
DisableThreadLibraryCalls
LoadLibraryA
InitializeCriticalSection
GetUserDefaultLCID
GetVersionExA
HeapCreate
HeapAlloc
InterlockedExchange
HeapFree
IsDBCSLeadByte
FindResourceA
LoadResource
LockResource
Sleep
InterlockedCompareExchange
OutputDebugStringA
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
EnterCriticalSection
GetLocaleInfoW
LeaveCriticalSection

user32

ReleaseDC
CharUpperW
GetSystemMetrics
GetSysColor
SetRect
GetDC

gdi32

GetTextExtentExPointW
GetTextExtentExPointA
GetObjectW
Ellipse
CreateSolidBrush
LineTo
CreatePen
GetStockObject
GetTextColor
DeleteDC
SetGraphicsMode
GetGraphicsMode
CreateCompatibleDC
MoveToEx
SetBkMode
ExtTextOutA
GetBkMode
ExtTextOutW
GetTextMetricsW
CreateFontA
TranslateCharsetInfo
CreateFontIndirectW
GetFontData
GetCharWidthA
DPtoLP
GetGlyphOutlineA
GetTextCharset
GetCharABCWidthsA
GetOutlineTextMetricsW
GetTextMetricsA
SelectObject
CreateFontIndirectA
GetObjectA
GetCurrentObject
GetViewportExtEx
GetWindowExtEx
EnumFontFamiliesExW
GetDeviceCaps
GetTextFaceA
GetOutlineTextMetricsA
GetTextFaceW
SetTextAlign
SetTextColor
SetBkColor
GetTextAlign
GetCurrentPositionEx
DeleteObject

advapi32

RegEnumKeyExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumValueW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

Exports

Exports

LpkPresent
ScriptApplyDigitSubstitution
ScriptApplyLogicalWidth
ScriptBreak
ScriptCPtoX
ScriptCacheGetHeight
ScriptFreeCache
ScriptGetCMap
ScriptGetFontAlternateGlyphs
ScriptGetFontFeatureTags
ScriptGetFontLanguageTags
ScriptGetFontProperties
ScriptGetFontScriptTags
ScriptGetGlyphABCWidth
ScriptGetLogicalWidths
ScriptGetProperties
ScriptIsComplex
ScriptItemize
ScriptItemizeOpenType
ScriptJustify
ScriptLayout
ScriptPlace
ScriptPlaceOpenType
ScriptPositionSingleGlyph
ScriptRecordDigitSubstitution
ScriptShape
ScriptShapeOpenType
ScriptStringAnalyse
ScriptStringCPtoX
ScriptStringFree
ScriptStringGetLogicalWidths
ScriptStringGetOrder
ScriptStringOut
ScriptStringValidate
ScriptStringXtoCP
ScriptString_pLogAttr
ScriptString_pSize
ScriptString_pcOutChars
ScriptSubstituteSingleGlyph
ScriptTextOut
ScriptXtoCP
UspAllocCache
UspAllocTemp
UspFreeMem

Sections

.text
Size: 343KB - Virtual size: 343KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Shared
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bf4f0f5dd23915918af48d2062da525d

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 343KB - Virtual size: 343KB

.data Size: 62KB - Virtual size: 61KB

Shared Size: 7KB - Virtual size: 7KB

.rsrc Size: 71KB - Virtual size: 70KB

.reloc Size: 6KB - Virtual size: 6KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 343KB - Virtual size: 343KB

.data
Size: 62KB - Virtual size: 61KB

Shared
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 71KB - Virtual size: 70KB

.reloc
Size: 6KB - Virtual size: 6KB

.text
Size: 108KB - Virtual size: 108KB