d2e02e8cf7c5c9ca27bce370cc36ff7c6d450218f78d7d05bb3142d17fcd8984

Sharing

Copy URL Twitter E-mail

General

Target

d2e02e8cf7c5c9ca27bce370cc36ff7c6d450218f78d7d05bb3142d17fcd8984
Size

128KB
MD5

8475c1723c0537c5c0333eab93a975a6
SHA1

9eef8e4e6a85205cc504a729dcc53bc710ef9403
SHA256

d2e02e8cf7c5c9ca27bce370cc36ff7c6d450218f78d7d05bb3142d17fcd8984
SHA512

e29eba261cdb1ea91134689b4de89ba898d9c29650c7de9f64e03581d68c944be6d87cda36037cad3a787d74a2660c051887db4734bff462b621ead0226732ac
SSDEEP

3072:f8xuazNwTkaRGahPWxVeo7cYmTzLXXfF8aAZGJk8u8J+Mf45ay2RkIQ/oRh:f8gazCTXR5VWZw/zLHk3l2RFAo7

Score

N/A

Malware Config

Signatures

Files

d2e02e8cf7c5c9ca27bce370cc36ff7c6d450218f78d7d05bb3142d17fcd8984
.dll windows x86

c495cffcfbd5bcf613f5f9d01b636a33

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileA
GlobalDeleteAtom
SetCommTimeouts
SetWaitableTimer
CreateFileA
BuildCommDCBW
SetUnhandledExceptionFilter
GetFileType
Heap32Next
FillConsoleOutputAttribute
OutputDebugStringW
ConvertDefaultLocale
DeleteVolumeMountPointW
EnumDateFormatsW
AddAtomA
ReadFile
GetFileAttributesW
InterlockedIncrement
GetTimeFormatW
SetCalendarInfoA
WaitForSingleObject
WriteFileGather
GetNextVDMCommand
SetSystemPowerState
GetConsoleAliasExesA
GetSystemDefaultLCID
GetProfileSectionA
GlobalFindAtomA
GlobalFindAtomW
InitAtomTable
OpenProcess
GetStartupInfoA
FindNextVolumeMountPointA
ExpandEnvironmentStringsA
GetTempFileNameA
IsValidLocale
GetCPInfoExW
WritePrivateProfileStringW
GetCurrentDirectoryW
SetHandleCount
CompareStringA
GetCurrencyFormatA
GetEnvironmentVariableA
GetCompressedFileSizeW
SetComputerNameA
CmdBatNotification
GetCommState
SetConsoleActiveScreenBuffer
VirtualQueryEx
lstrcpyW
CreateThread
PurgeComm
GetSystemTime
CreateDirectoryExA
EnumCalendarInfoExW
IsBadHugeReadPtr
CreateFileMappingA
CloseHandle
WriteConsoleOutputCharacterA
BuildCommDCBAndTimeoutsW
GetNumberOfConsoleFonts
LocalFileTimeToFileTime
SetLocaleInfoA
TlsSetValue
GetEnvironmentVariableW
VDMConsoleOperation
VirtualAlloc
GetModuleHandleA
ReadConsoleOutputA
LocalCompact
GetTempPathW
EnumDateFormatsExA
InterlockedCompareExchange
CompareStringW
FindFirstFileExA
Beep
SetEnvironmentVariableW
WaitForMultipleObjectsEx
UpdateResourceA
GetTapeParameters
GetDiskFreeSpaceA
MoveFileWithProgressW
LoadLibraryA
FindAtomA
CreateWaitableTimerW
GetConsoleAliasesA
FindNextFileA
CreateJobObjectW
GetWindowsDirectoryA
LocalLock
GetConsoleDisplayMode
SetDefaultCommConfigW
OpenWaitableTimerA
GetHandleInformation
GetCurrentDirectoryA
GetThreadTimes
SetupComm
HeapAlloc
GetConsoleAliasesW
AddAtomW
EnumDateFormatsExW
QueryDosDeviceW
GetVersion
GetLastError
ExpandEnvironmentStringsW
VerLanguageNameA
SetThreadPriority
GetCommModemStatus
SetConsoleNumberOfCommandsW
SetConsoleWindowInfo
GetNamedPipeHandleStateW
VerLanguageNameW
FindNextVolumeA
FlushFileBuffers
OpenEventW
CreateHardLinkA
SleepEx
GetProcAddress
GetEnvironmentStringsW

user32

GetClassNameA
ToUnicode
GetActiveWindow
LoadMenuIndirectA
SetClipboardData
GetSysColor
GetMenuItemInfoW
ChangeDisplaySettingsW
CreateAcceleratorTableW
GrayStringA
DdeCreateDataHandle
PostMessageA
GetWindowPlacement
IsCharAlphaNumericA
DefMDIChildProcA
SetProcessDefaultLayout
RemoveMenu
GetDlgItem
IsIconic
DdeInitializeA
GetComboBoxInfo
CopyAcceleratorTableW
SetMenuItemInfoW
OpenDesktopA
FindWindowExW
EnumDisplaySettingsW

gdi32

GdiFlush
ExtSelectClipRgn
SetDIBitsToDevice
OffsetViewportOrgEx
EnumFontsA
SelectPalette
CreateDIBitmap
PolyPolyline
SetPolyFillMode
ColorMatchToTarget
GetTextExtentPointW
GetICMProfileW
PolyDraw
GetMetaFileW
GetEnhMetaFileW
SetTextColor
SetViewportExtEx
GdiResetDCEMF
AddFontResourceExW
SetDIBColorTable
AddFontMemResourceEx
GetViewportOrgEx
gdiPlaySpoolStream
GetEnhMetaFileHeader
Escape
GdiPlayDCScript
RoundRect

advapi32

CryptEnumProvidersA
SystemFunction008
RegLoadKeyW
ElfOpenEventLogA
ElfBackupEventLogFileA
LsaDeleteTrustedDomain
QueryServiceConfigA
SetFileSecurityA
GetAuditedPermissionsFromAclA
LsaGetUserName
DecryptFileW
LsaLookupSids
IsValidAcl
RegisterServiceCtrlHandlerW
LsaEnumerateTrustedDomains
SystemFunction023
ClearEventLogW
OpenProcessToken
CryptDestroyKey
AreAllAccessesGranted
SetUserFileEncryptionKey
LookupSecurityDescriptorPartsA
LsaCreateSecret
RegOpenKeyExW
QueryServiceConfig2A
LsaICLookupSids
ReadEventLogW
GetAuditedPermissionsFromAclW
EnumDependentServicesA
DuplicateTokenEx
ElfRegisterEventSourceW
BuildSecurityDescriptorA
RegEnumKeyExW
RegDeleteKeyW
AccessCheckAndAuditAlarmW
OpenBackupEventLogW
StartServiceCtrlDispatcherW
AddAuditAccessAceEx

comctl32

ImageList_AddMasked
DrawStatusTextW
ImageList_SetDragCursorImage
FlatSB_SetScrollProp
InitCommonControlsEx
ImageList_EndDrag
CreateStatusWindowW
ImageList_Merge
ImageList_DragShowNolock
FlatSB_GetScrollPos
ImageList_SetIconSize
ImageList_Remove
ImageList_GetDragImage
ImageList_SetFilter
ImageList_Draw
FlatSB_SetScrollInfo
ImageList_DragEnter
ord4
ord5
ord16
FlatSB_SetScrollRange
UninitializeFlatSB
ImageList_DrawEx
ord6
ord17
CreatePropertySheetPageW
ImageList_BeginDrag
ord14
ImageList_DragLeave
FlatSB_ShowScrollBar
ImageList_Add
ImageList_SetImageCount
ImageList_GetImageRect
FlatSB_EnableScrollBar
InitializeFlatSB
ord13
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_DrawIndirect

opengl32

glRectd
glVertex2d
glIndexPointer
glDisableClientState
glLightf
glVertex3i
glTexCoord2sv
glGetTexGeniv
glStencilMask
glColor3bv
glVertex3dv
glGetTexEnvfv
glGetDoublev
glNormal3b
glNewList
wglUseFontOutlinesA
glGetMaterialiv
glIndexdv
glPixelTransferi
glTexGeniv
glRasterPos2f
glRasterPos4fv
glPixelTransferf
glColor4ub
glCopyTexImage2D
glIsTexture
glFrontFace
glDebugEntry
wglCreateContext
glMapGrid1d
glTexCoord3i
glGetTexImage
glTexCoord4i
glSelectBuffer
glColor3ub
glAlphaFunc
glPixelMapuiv
glTexCoord1dv
glLineWidth
glVertex4sv
glLoadIdentity
glTexCoord3fv
glBegin
glAccum
glVertex4f
glColor3s
glPushMatrix
glLightfv
glColor3usv

shell32

SHGetDataFromIDListA
ShellExecuteW
StrRChrIA
RealShellExecuteW
CheckEscapesW
SHGetFileInfoA
StrChrW
SHInvokePrinterCommandA
StrRStrIW
DragQueryFileAorW
StrCmpNIA
ExtractIconA
SHAddToRecentDocs
SHGetPathFromIDListW
StrCmpNIW
Shell_NotifyIconW
SheChangeDirA
SHGetDataFromIDListW
ExtractIconW
ShellHookProc
StrNCmpIW
SHLoadInProc
ExtractAssociatedIconA
StrRStrA
ord179
ExtractAssociatedIconW
StrNCmpA
SheChangeDirExW
SHGetInstanceExplorer
SHGetMalloc
FindExecutableW
StrRChrA
SHChangeNotify
SHGetSpecialFolderLocation
StrChrA
ExtractAssociatedIconExW
StrStrW
FindExecutableA
RealShellExecuteExW
ShellExecuteExW
RegenerateUserEnvironment
RealShellExecuteA
DuplicateIcon
StrNCmpW
SHFormatDrive
SHGetDesktopFolder
StrStrIA
StrRChrW
SHFileOperationW
SHQueryRecycleBinW
SHFileOperationA
StrRChrIW
SHInvokePrinterCommandW
FreeIconList
ShellExecuteExA
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
DragQueryPoint
SHGetDiskFreeSpaceA
StrNCmpIA
DoEnvironmentSubstA
ord180
SHQueryRecycleBinA
SHBrowseForFolderA
StrCmpNA
WOWShellExecute
DragFinish
StrCmpNW
ShellAboutW
SHGetPathFromIDListA
SHFreeNameMappings
ExtractIconExA
CommandLineToArgvW
Shell_NotifyIconA
RealShellExecuteExA
InternalExtractIconListW
StrRStrW
InternalExtractIconListA
StrChrIA
DoEnvironmentSubstW
StrChrIW
SHGetFileInfoW
SHEmptyRecycleBinA
StrRStrIA
SHEmptyRecycleBinW

shlwapi

StrIsIntlEqualW
PathMakePrettyW
SHDeleteKeyA
IntlStrEqWorkerW

version

GetFileVersionInfoA
GetFileVersionInfoW
VerFindFileW
VerInstallFileA
GetFileVersionInfoSizeW
VerQueryValueW
VerInstallFileW
VerFindFileA
VerQueryValueA
GetFileVersionInfoSizeA

winmm

auxOutMessage
mciGetDeviceIDA
midiOutGetDevCapsA
waveOutReset
mmioStringToFOURCCA
waveInStart
midiInPrepareHeader
waveInGetErrorTextA
waveInReset
mciGetCreatorTask
midiInClose
waveInGetID
WOW32ResolveMultiMediaHandle
mmioOpenA
waveInGetErrorTextW
midiOutSetVolume
mmioDescend
mciGetErrorStringA
mciSetYieldProc
mciSendStringA
waveOutGetErrorTextA
mmioRead
joySetThreshold
mciSendCommandA
waveOutClose
mmTaskBlock
joyReleaseCapture

msvcrt

fwprintf
_lrotl
_umask
isleadbyte
_strnset
_spawnl
_wspawnvpe
wcstod
_ismbcupper
_getmaxstdio
_ismbbprint
_atoi64
_mbsnicoll
_findnexti64
_wsearchenv
_wspawnl
atan2
_wstat
printf
_outpw
_mbsstr
_mbslen
_mbsncat
_mbccpy
_mbsncoll
_mbclen
__p__fmode
fmod
_initterm
_except_handler3
strtol
feof
fwrite
_mbsnicmp
__RTCastToVoid
_errno
ungetc
_dup2
fputs
_mbsnbset
memset
clearerr
_strrev
_cexit
localeconv
ldiv
_mkdir
_eof
fputwc
_memccpy
__p___wargv
fputc
ftell
_mbsset
_isatty
__mb_cur_max
_ultow
strerror
_mbsupr
_logb
_atodbl
_environ
isdigit
log
_wcsupr
malloc
ferror
_wfsopen
__toascii
_ismbbalnum
_commode
fread
_setsystime
_adj_fdiv_m16i
_mbctokata
exit
__winitenv
_adj_fptan
_ismbcgraph
_wchmod
_creat
_putw
fseek
_ismbclower
__p__daylight
_sys_nerr
_mbslwr
_mbsinc
_ismbbpunct
_telli64
_strcmpi
_CIcosh
vprintf
isxdigit
fclose
sprintf
fprintf
_wstrtime
fopen
_unlock
__p__environ
_i64tow
_unlink
_spawnlpe
fsetpos
_mbsrev
__wargv
_ui64toa
_wstati64
_ctype
_spawnve
_wexecl

Exports

Exports

Bsollc
Btfgyxyv
Ibvvupjrni
Ljiihlxr
Piflowe
Qmhwfnvu
Rrizdjd
Vyjsddth
Xznraoqhi

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c495cffcfbd5bcf613f5f9d01b636a33

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

opengl32

shell32

shlwapi

version

winmm

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 52KB - Virtual size: 51KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 52KB - Virtual size: 51KB

.reloc
Size: 8KB - Virtual size: 7KB