c4b5f4ff99cfcde4c4013d447765e366871649737f1f6c3581adf9f02c30c678

Sharing

Copy URL Twitter E-mail

General

Target

c4b5f4ff99cfcde4c4013d447765e366871649737f1f6c3581adf9f02c30c678
Size

849KB
MD5

a32c259a230bf0f46b649101a16664f0
SHA1

3f6f09b4fc99adff7a7132e868d57168c23a0b47
SHA256

c4b5f4ff99cfcde4c4013d447765e366871649737f1f6c3581adf9f02c30c678
SHA512

08a0b8e282f1b117c26530e89b3f546cdaa0117c46755c94b8ef779d4614aeb69d82c83eb48a9f0af3328267240b0f2fa241a75511c57d6ca2a1ad5eb0cbd473
SSDEEP

24576:ffIXPnZX2tQCuUzNKLfLU20nyfAF8VRz3J2cnF2uy:ffa/ZXLQKLAeRzJW3

Score

N/A

Malware Config

Signatures

Files

c4b5f4ff99cfcde4c4013d447765e366871649737f1f6c3581adf9f02c30c678
.dll windows x86

2d1449d6cea0c2630bd30c455afe2010

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
GetPrivateProfileIntW
GetModuleHandleA
InterlockedExchangeAdd
VirtualProtectEx
GetStdHandle
InitializeCriticalSection
ExitProcess
GetModuleHandleW
GetStartupInfoW
LoadLibraryExW
GetFileSize
GetTickCount
GetCurrentProcessId
GetVersionExW
FormatMessageW
SetEvent
Thread32Next
HeapFree
OutputDebugStringW
WaitForSingleObject
QueryPerformanceCounter
GetSystemDirectoryW
RaiseException
SetFilePointer
ResetEvent
LocalFree
HeapSize
GetLastError
GetModuleFileNameW
IsProcessorFeaturePresent
CreateFileW
GetLogicalDriveStringsW
DeviceIoControl
Sleep
GetCurrentThreadId
DuplicateHandle
CreateToolhelp32Snapshot
Process32NextW
GetFullPathNameW
FindResourceW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InterlockedCompareExchange
OpenEventW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
DeleteCriticalSection
SizeofResource
FindResourceExW
GetSystemTimeAsFileTime
LoadLibraryW
GlobalAlloc
GlobalLock
GetVersion
GetFileAttributesExW
InterlockedIncrement
WaitForMultipleObjects
LoadLibraryA
HeapDestroy
OpenProcess
GlobalUnlock
GetFileAttributesW
TerminateProcess
GlobalFree
Thread32First
GetCurrentProcess
HeapSetInformation
MultiByteToWideChar
ReadFile
MulDiv
SetLastError
EnterCriticalSection
InterlockedDecrement
GetProcAddress
SetCurrentDirectoryW
VerifyVersionInfoW
LocalAlloc
GetExitCodeProcess
ExpandEnvironmentStringsA
WriteFile
QueryDosDeviceW
FreeLibrary
CloseHandle
CreateEventW
GetProcessHeap
VerSetConditionMask
SetEndOfFile
LeaveCriticalSection
LockResource
CreateProcessW
Process32FirstW
HeapAlloc
WideCharToMultiByte
LoadResource
SetErrorMode

user32

DdeUninitialize
DdeDisconnect
ReleaseDC
LoadCursorFromFileW
ScrollWindow
CreateMenu
TrackPopupMenu
PeekMessageW
ClientToScreen
PtInRect
ChildWindowFromPoint
SetParent
IsDialogMessageW
IsWindowEnabled
UnionRect
CallWindowProcW
CreatePopupMenu
LoadIconW
GetSubMenu
EnumWindows
GetMenu
SetWindowLongW
SetFocus
EnumClipboardFormats
CheckMenuItem
UpdateWindow
SetCapture
GetClipboardFormatNameW
HideCaret
GetDoubleClickTime
GetScrollInfo
DdeCreateDataHandle
TranslateAcceleratorW
ToUnicode
OpenClipboard
DdeGetData
ChangeDisplaySettingsW
GetCursorPos
DestroyIcon
SendMessageW
DrawTextW
GetFocus
GetSysColor
CallNextHookEx
DdeCreateStringHandleW
ShowCaret
SetWindowPos
DeferWindowPos
DestroyMenu
GetWindow
GetSystemMenu
LoadAcceleratorsW
ShowCursor
FindWindowExW
DdeQueryStringW
GetSystemMetrics
GetParent
RegisterClipboardFormatW
GetUpdateRgn
BeginDeferWindowPos
GetCapture
MapWindowPoints
GetDesktopWindow
SetTimer
ShowWindow
CopyRect
RegisterClassW
TranslateMessage
UnregisterClassW
PostQuitMessage
VkKeyScanW
UnhookWindowsHookEx
SetWindowTextW
MoveWindow
IsWindowVisible
LoadBitmapW
ExitWindowsEx
IsWindow
WaitForInputIdle
GetUpdateRect
GetWindowDC
OffsetRect
GetDC
SetClipboardData
DdeFreeDataHandle
ScreenToClient
InsertMenuItemW
RedrawWindow
CloseClipboard
GetWindowLongW
DdePostAdvise
RemoveMenu
EndDialog
CreateAcceleratorTableW
DestroyWindow
GetMessagePos
SetCursor
ReleaseCapture
GetMessageTime
RegisterWindowMessageW
BringWindowToTop
GetWindowTextLengthW
GetForegroundWindow
GetMenuItemCount
DdeFreeStringHandle
CheckMenuRadioItem
EndMenu
BeginPaint
PostThreadMessageW
EnableMenuItem
GetWindowThreadProcessId
LoadImageW
CreateIconIndirect
EnumDisplaySettingsW
keybd_event
DrawIconEx
GetMenuItemInfoW
DefWindowProcW
EnableWindow
MessageBoxW
SetWindowsHookExW
GetAsyncKeyState
GetDlgItem
MsgWaitForMultipleObjects
GetWindowTextW
GetClipboardData
SystemParametersInfoW
SetScrollInfo
ModifyMenuW
CreateWindowExW
CreateDialogParamW
DdeGetLastError
DestroyAcceleratorTable
EmptyClipboard
GetKeyboardState
DdeClientTransaction
IsClipboardFormatAvailable
DdeInitializeW
IsZoomed
MessageBeep
GetClassNameW
GetWindowRect
InsertMenuW
DdeConnect
FlashWindow
DdeNameService
DrawIcon
CreateDialogIndirectParamW
SetWindowRgn
InvalidateRect
GetActiveWindow
DrawFrameControl
SetMenu
GetMessageW
IsIconic
PostMessageW
EnumThreadWindows
SetCursorPos
AppendMenuW
AdjustWindowRectEx
GetClientRect
DrawStateW
EndPaint
InflateRect
DestroyCursor
KillTimer
EndDeferWindowPos
DrawFocusRect
DrawMenuBar
SetForegroundWindow
WindowFromPoint
ValidateRect
DrawEdge
GetMenuState
FillRect
GetKeyState
DispatchMessageW
GetIconInfo
GetClassInfoW
SetMenuItemInfoW

gdi32

Polygon
SetBrushOrgEx
SetPixel
GetClipBox
SelectClipRgn
CreateFontIndirectW
DeleteDC
SetTextColor
GetSystemPaletteEntries
SetWindowExtEx
SetBkColor
StretchDIBits
GetRegionData
Rectangle
CreateEnhMetaFileW
GetRgnBox
Polyline
GetWinMetaFileBits
EnumFontFamiliesExW
Pie
GetCharABCWidthsW
GetDIBColorTable
Ellipse
LineTo
CopyEnhMetaFileW
CreateICW
BitBlt
GetTextExtentPoint32W
SetViewportExtEx
GetTextMetricsW
SetTextAlign
PlayEnhMetaFile
CloseEnhMetaFile
SetStretchBltMode
OffsetRgn
GetNearestPaletteIndex
SetMapMode
GetBkColor
RestoreDC
CreateBitmapIndirect
SetMetaFileBitsEx
PolyPolygon
CreatePalette
SelectObject
GetStockObject
TextOutW
CreateHatchBrush
CreateDIBitmap
GetPixel
CreateCompatibleDC
CreateBitmap
CreateDIBSection
SaveDC
GetMetaFileBitsEx
CreatePolygonRgn
RealizePalette
PtInRegion
CreatePen
MoveToEx
GetEnhMetaFileW
DeleteEnhMetaFile
SetViewportOrgEx
SelectPalette
ExcludeClipRect
CreatePatternBrush
CreateCompatibleBitmap
ExtCreateRegion
GetTextExtentExPointW
GetPaletteEntries
Arc
GetDIBits
GetDeviceCaps
PatBlt
GetTextColor
DeleteObject
RoundRect
ExtCreatePen
MaskBlt
CreateRectRgn
GetObjectW
SetPolyFillMode
EqualRgn
GdiFlush
GetEnhMetaFileHeader
SetWindowOrgEx
CreateRectRgnIndirect
CombineRgn
StretchBlt
ExtFloodFill
SetWinMetaFileBits
CreateSolidBrush
SetBkMode
SetROP2
ExtSelectClipRgn
RectInRegion

comdlg32

ChooseFontW
GetSaveFileNameW
CommDlgExtendedError
GetOpenFileNameW
ChooseColorW

advapi32

AdjustTokenPrivileges
RegDeleteKeyW
RegSetValueExW
RegDeleteValueW
GetUserNameW
RegCreateKeyW
OpenProcessToken
LookupPrivilegeValueW
RegEnumKeyW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegCloseKey

shell32

SHGetFolderPathW
DragQueryPoint
ExtractIconExW
DragQueryFileW
Shell_NotifyIconW
ExtractIconW
SHGetFileInfoW
SHGetMalloc
DragFinish
ShellExecuteExW
SHGetIconOverlayIndexW
DragAcceptFiles
SHGetSpecialFolderLocation
SHFileOperationW
SHBrowseForFolderW
SHGetPathFromIDListW

oleaut32

SysAllocString
SysStringLen

winmm

joyGetNumDevs

oledlg

ord3

Sections

.text
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 295KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d1449d6cea0c2630bd30c455afe2010

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

oleaut32

winmm

oledlg

Sections

.text Size: 496KB - Virtual size: 496KB

.rdata Size: 80KB - Virtual size: 79KB

.data Size: 259KB - Virtual size: 295KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 496KB - Virtual size: 496KB

.rdata
Size: 80KB - Virtual size: 79KB

.data
Size: 259KB - Virtual size: 295KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 4KB - Virtual size: 3KB