d374170e4ff4cc05eb4a5104b428361d8c813555d4fd06c84554df3f05f6fb8c

Sharing

Copy URL Twitter E-mail

General

Target

d374170e4ff4cc05eb4a5104b428361d8c813555d4fd06c84554df3f05f6fb8c
Size

209KB
MD5

83abbd421ce0d3ae720ada37218a1b5d
SHA1

4dd8892794a20b9f11027529d6029d56e067d007
SHA256

d374170e4ff4cc05eb4a5104b428361d8c813555d4fd06c84554df3f05f6fb8c
SHA512

e3eb17a5f0c1a1aac7d9247f145b06f8afd9623cb01ea05e91704c6b12e55c61c78fb9669c3e3f514d2b0dd00d15637bd4138a5d6869619aed3470d6c3b089d4
SSDEEP

6144:rPBLEtruiDPP0ob/R/ikFn86oia/KxOxTxno8:rZwtrusBJ/rxNoVOQxo8

Score

N/A

Malware Config

Signatures

Files

d374170e4ff4cc05eb4a5104b428361d8c813555d4fd06c84554df3f05f6fb8c
.dll windows x86

c219d6f6c725d01c5e655fa4a9900d45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ResetEvent
GetSystemTimes
CreateFileA
FindFirstFileA
DeleteFileA
GlobalFree
DeleteCriticalSection
GetFileType
GetProcessHeap
VirtualAlloc
GlobalAlloc
FindNextFileA
OpenMutexA
GetFullPathNameA
FindClose
GlobalLock
CreateWaitableTimerA
InitializeCriticalSection

ntdll

ZwQueryObject
ZwWriteFile
ZwQueryObject

gdi32

CreateFontA
AddFontResourceA
GetStockObject
TextOutW
StartPage
SetBkColor
GetTextMetricsA
ExtTextOutW

user32

CreateMenu
DefFrameProcW
AnimateWindow
InvalidateRect
SetClipboardData
SetDlgItemTextW
PeekMessageA
ExitWindowsEx
TranslateMDISysAccel
EndDialog
SetTimer
CreatePopupMenu
LoadStringA
PtInRect
DestroyCaret
GetClassInfoW
EnumChildWindows
GetNextDlgTabItem
LoadMenuA
GetMenuStringA
BringWindowToTop
OemToCharA
MessageBoxW

Exports

Exports

EntryPoint
EnumObjectsHA
TranslateLocaleCounterW
ComputeCounterStatistics
EnumObjectItemsHW
ListLogFileHeaderA
GetLogSetGUID
ValidatePathW
CollectQueryDataEx
SetCounterScaleFactor
GetLogFileTypeW
MakeCounterPathA
BindInputDataSourceA
VbGetDoubleCounterValue
GetDefaultPerfObjectHA
CollectQueryData
SetQueryTimeRange
SetDefaultRealTimeDataSource
GetDefaultPerfCounterW
RelogA
GetFormattedCounterValue
OpenQuery
BrowseCountersHA
EnumObjectItemsW
GetDefaultPerfObjectA
GetFormattedCounterArrayW
ExpandWildCardPathHA
FormatFromRawValue
OpenLogA
LookupPerfIndexByNameA
EnumObjectsHW
VbIsGoodStatus
EnumLogSetNamesA
GetDefaultPerfObjectHW
VbOpenLog
GetRawCounterValue
GetDataSourceTimeRangeA
RemoveCounter
GetCounterTimeBase
OpenQueryA
GetRawCounterArrayW
VbOpenQuery
GetDefaultPerfCounterHA
GetDefaultPerfCounterHW
IsRealTimeQuery
GetDefaultPerfCounterA
VbGetCounterPathElements
SelectDataSourceW
GetDataSourceTimeRangeW
ExpandCounterPathA
ParseInstanceNameW
UpdateLogA
BrowseCountersA
ExpandWildCardPathA
CalculateCounterFromRawValue
OpenLogW
VbGetOneCounterPath
GetCounterInfoW
GetDllVersion
EnumLogSetNamesW
OpenQueryW
SetLogSetRunID
EnumMachinesHA
EnumObjectItemsA
ConnectMachineW
ReadRawLogRecord

Sections

.text
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c219d6f6c725d01c5e655fa4a9900d45

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

gdi32

user32

Exports

Exports

Sections

.text Size: 193KB - Virtual size: 193KB

.data Size: 14KB - Virtual size: 14KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 193KB - Virtual size: 193KB

.data
Size: 14KB - Virtual size: 14KB

.reloc
Size: 512B - Virtual size: 4KB