80184d0312cbe2ff939f9ac6ce1ebb9232e7bbe5f1908943a8166a5a63d2c1cb

Sharing

Copy URL

Twitter E-mail

General

Target

80184d0312cbe2ff939f9ac6ce1ebb9232e7bbe5f1908943a8166a5a63d2c1cb
Size

449KB
MD5

a294431f250926bb2303d1a6405ab273
SHA1

1a10bc171ad36fe1e371462617d30dd83cea08e4
SHA256

80184d0312cbe2ff939f9ac6ce1ebb9232e7bbe5f1908943a8166a5a63d2c1cb
SHA512

dd6039b1dbb87ed892da66568ac609d2c1c2e7bb74b3a0ca4fe483e608ff07f4eca4f0e7679bee8eedad50bfb41a2a17f002418f5fb0767083c77b9861c8633b
SSDEEP

6144:QdUT++McaeVKEbwZWeTfKnMVWpftaagWvmVJUt0A/7Dz623Yh/loxCRdgMEt1i/v:++MXeV1UWqKMeftaC6UdYZJ721iLNN

Score

N/A

Malware Config

Signatures

Files

80184d0312cbe2ff939f9ac6ce1ebb9232e7bbe5f1908943a8166a5a63d2c1cb
.dll windows x86

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupTermDefaultQueueCallback
SetupQueueCopyW
SetupQueueCopyIndirectW
SetupPromptReboot
SetupOpenInfFileW
SetupOpenAppendInfFileW
SetupInstallFromInfSectionW
SetupInstallFilesFromInfSectionW
SetupInitDefaultQueueCallbackEx
SetupGetTargetPathW
SetupGetStringFieldW
SetupGetLineCountW
SetupGetIntField
SetupGetFieldCount
SetupFindNextLine
SetupDiSetSelectedDevice
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiOpenClassRegKey
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDefaultQueueCallbackW
SetupCopyOEMInfW
SetupCommitFileQueueW
SetupCloseInfFile
SetupCloseFileQueue
CM_Setup_DevNode
CM_Locate_DevNodeW
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Enumerate_Classes

kernel32

lstrcmpiW
WriteFile
WriteConsoleW
CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EnterCriticalSection
EnumResourceLanguagesW
ExitProcess
FillConsoleOutputCharacterW
FindClose
FindNextFileW
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetDevicePowerState
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempFileNameW
GetThreadLocale
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
WriteConsoleOutputW
LocalReAlloc
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleOutputW
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetWriteWatch
SearchPathW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
UnregisterWait
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
LocalAlloc

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdi32

Polyline
GetTextMetricsW
GetObjectW
GetDeviceCaps
EndPage
DeleteObject
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
StartDocW
StartPage
SetBkMode

advapi32

SetEntriesInAclW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
QueryServiceStatus
OpenServiceW
OpenSCManagerW
OpenProcessToken
LsaLookupPrivilegeValue
IsTextUnicode
InitializeSecurityDescriptor
GetTokenInformation
GetLengthSid
FreeSid
DeleteService
ControlService
CloseServiceHandle
AllocateAndInitializeSid
AddAccessDeniedAce
StartServiceW
SetTraceCallback
SetSecurityDescriptorDacl

user32

AllowSetForegroundWindow
AnimateWindow
CharLowerW
CheckDlgButton
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DestroyIcon
DialogBoxParamW
DrawTextExW
EndDialog
GetDC
GetIconInfo
GetProcessWindowStation
GetSysColor
GetSystemMetrics
GetUserObjectInformationW
IsDlgButtonChecked
LoadBitmapW
LoadIconW
LoadImageW
MessageBoxW
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
ShowWindow
SystemParametersInfoW

shell32

ShellHookProc
ShellExecuteExW
SHGetFolderPathW

Exports

Exports

ClearWeakRefs
ReInitThreads
_ReadlineFunctionPointer
free_default

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 210KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

Imports

setupapi

kernel32

version

gdi32

advapi32

user32

shell32

Exports

Exports

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 210KB - Virtual size: 210KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 22KB - Virtual size: 21KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 210KB - Virtual size: 210KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 22KB - Virtual size: 21KB

.reloc
Size: 5KB - Virtual size: 5KB