123d4e1692becb4c1fdb8b0ebed5202c9a677184fb7949865ec524a3b8c775fd

Sharing

Copy URL Twitter E-mail

General

Target

123d4e1692becb4c1fdb8b0ebed5202c9a677184fb7949865ec524a3b8c775fd
Size

163KB
MD5

0bc00a517fc15d9e270ad64b13f0440e
SHA1

af3a6395803069ea6aeff0713575762f30ff4776
SHA256

123d4e1692becb4c1fdb8b0ebed5202c9a677184fb7949865ec524a3b8c775fd
SHA512

66ec5b63f7c8c743765a27d00f231546d87215e7f64a0dc2515b933a9653df869d38271007b1247f4b9d82e7661756f54bab35b4226eff2f2c9ca650f63eb1b1
SSDEEP

3072:7+RRGKfJ1H+TkI6R0zrGRWDUz9gNDkwUYupfTGAAaowHzXV8RjiaZkgT2oxSGs:7cRsTkb0HGQkwUJtHJ8Rj8doxSG

Score

N/A

Malware Config

Signatures

Files

123d4e1692becb4c1fdb8b0ebed5202c9a677184fb7949865ec524a3b8c775fd
.dll windows x86

6ccb0c12e56dea6f7c8c238d9b981234

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetComboBoxInfo
EnableScrollBar
DispatchMessageA
DestroyWindow
DestroyMenu
GetDC
CreateWindowExA
CreateMenu
CreateIconFromResourceEx
CloseClipboard
GetDlgItem
GetListBoxInfo
GetMessageA
GetNextDlgTabItem
BringWindowToTop
GetPriorityClipboardFormat
GetShellWindow
GetWindowPlacement
IntersectRect
IsWindowUnicode
KillTimer
PostQuitMessage
PtInRect
RegisterClassA
SetClipboardViewer
SetTimer
ShowWindow
ToUnicode
UnpackDDElParam
UpdateWindow
WaitForInputIdle
DefWindowProcA

winmm

aux32Message
midiStreamRestart
mmioWrite
mmsystemGetVersion
waveInOpen
waveOutGetVolume
midiOutClose

advapi32

RegSetValueExW
SystemFunction014
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
RegQueryValueExA
RegCreateKeyExW
OpenThreadToken
OpenProcessToken
MakeSelfRelativeSD
LsaSetQuotasForAccount
IsTokenRestricted
InitializeSecurityDescriptor
GetUserNameW
GetManagedApplications
FreeSid
CryptSetProvParam
CryptImportKey
CheckTokenMembership
AreAnyAccessesGranted
AllocateAndInitializeSid
AdjustTokenPrivileges
AddAccessAllowedAce
SystemFunction033

msvcrt

strcspn
strncat
strncmp
strstr
strtoul
swscanf
towlower
wcsncmp
wcsncpy
wcsrchr
wctomb
ldexp
iswupper
iswspace
iswdigit
iswalpha
iswalnum
isspace
isprint
isleadbyte
ftell
fseek
fprintf
fgets
feof
ceil
atol
atoi
_wtmpnam
_write
_wrename
strcpy
_wctime
_wcsupr
_wcslwr
_vsnwprintf
_strnicmp
_stricmp
_spawnl
_snwprintf
_setsystime
_purecall
_popen
_memicmp
_lseeki64
_lrotl
_itow
_ismbcsymbol
_ismbcspace
_isatty
_iob
_initterm
_getche
_fileno
_execl
_errno
_atoi64
_amsg_exit
__pioinfo
__doserrno
__dllonexit
__badioinfo
__CxxFrameHandler
_XcptFilter
strchr
sscanf
realloc
qsort
printf
memmove
_wgetenv
malloc
_wstrtime

shell32

DragAcceptFiles
SHGetFolderPathW

rpcrt4

NdrRpcSsEnableAllocate
RpcSsDestroyClientContext
CStdStubBuffer_Disconnect
CStdStubBuffer_QueryInterface
NdrEncapsulatedUnionBufferSize
NdrFixedArrayFree
NdrFixedArrayMemorySize
NdrFullPointerXlatFree
NdrMesSimpleTypeDecode
NdrPointerMarshall
NdrServerCall2
NdrSimpleStructUnmarshall
NdrXmitOrRepAsFree
NdrpReleaseTypeGenCookie
RpcAsyncCancelCall
RpcAsyncRegisterInfo
RpcIfIdVectorFree
RpcSmDisableAllocate

kernel32

LoadLibraryExA
LocalAlloc
LocalFree
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
RtlUnwind
UnhandledExceptionFilter
InterlockedIncrement
lstrlenA
lstrcpynA
WriteFile
WideCharToMultiByte
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
InterlockedDecrement
InitializeCriticalSection
GetVersion
GetTickCount
GetThreadLocale
GetStdHandle
GetStartupInfoA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetCurrentThreadId
GetCommandLineA
FreeLibrary
FindFirstFileA
FindClose
ExitThread
ExitProcess
EnterCriticalSection
DeleteCriticalSection
CreateThread
LeaveCriticalSection

Exports

Exports

GetCounter
GetRecordPosition
ProcessBatch
SetScissorRect

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6ccb0c12e56dea6f7c8c238d9b981234

Headers

DLL Characteristics

File Characteristics

Imports

user32

winmm

advapi32

msvcrt

shell32

rpcrt4

kernel32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 90KB - Virtual size: 90KB

.data Size: 14KB - Virtual size: 14KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 90KB - Virtual size: 90KB

.data
Size: 14KB - Virtual size: 14KB

.rsrc
Size: 2KB - Virtual size: 1KB