6f4f33a2313a3b29691fed7dde3c72df9a6030a85be3a115faadf0e1ecefefd8

Sharing

Copy URL Twitter E-mail

General

Target

6f4f33a2313a3b29691fed7dde3c72df9a6030a85be3a115faadf0e1ecefefd8
Size

452KB
MD5

81da3195b5beeb3b2864b7722eb9bc02
SHA1

82f17d9c4a52738532852fb1d359479ebc9f0485
SHA256

6f4f33a2313a3b29691fed7dde3c72df9a6030a85be3a115faadf0e1ecefefd8
SHA512

d9ed8e8921f27d6da254cfc59810aa4bc157cc4ecc374d2356e662363a79548b0967365321b0a04f81b2e9a96158e3a13a06e2be938ebfd9c4c57e95fef8cc73
SSDEEP

6144:4qOppuMicu1DEy+ASzHhffFwjyGBEZtypI6l0pWIhlHWJ6p5HKOmAz5MGn4Y:4fpv7gDEjAyJFw26I6l0nth1WRY

Score

N/A

Malware Config

Signatures

Files

6f4f33a2313a3b29691fed7dde3c72df9a6030a85be3a115faadf0e1ecefefd8
.dll windows x86

eb61667c54fc87b4362ee502eef53201

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFileInfoW
SHGetDesktopFolder
SHChangeNotify
SHBrowseForFolderW
SHBindToParent
DragQueryFileW
SHGetPathFromIDListW
CommandLineToArgvW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

oleaut32

BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
LPSAFEARRAY_UserFree
VariantTimeToSystemTime
VariantInit
VariantClear
VarUI4FromStr
VarBstrCmp
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal

user32

IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromRect
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageW
PostMessageW
PostThreadMessageW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseDC
RemovePropW
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropW
SetWinEventHook
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
IsWindow
UnhookWinEvent
UnregisterClassA
UnregisterDeviceNotification
GetDesktopWindow
GetDC
GetCursor
GetClientRect
GetClassNameW
FillRect
EnumWindows
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DeferWindowPos
CreateWindowExW
CreatePopupMenu
CreateDialogParamW
CopyImage
CharUpperW
CharUpperBuffW
CharNextW
BeginDeferWindowPos
AllowSetForegroundWindow
GetLastActivePopup
IsDlgButtonChecked
InvalidateRect
IntersectRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetPropW
GetParent
GetMonitorInfoW
GetMessageW
TranslateMessage
GetDlgItem

ole32

CoAllowSetForegroundWindow
CoCreateInstance
CoGetInterfaceAndReleaseStream
CoInitialize
CoInitializeEx
CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateBindCtx
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HICON_UserFree
HICON_UserMarshal
HICON_UserSize
HICON_UserUnmarshal
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
PropVariantClear
PropVariantCopy
ReleaseStgMedium
StringFromGUID2
CLSIDFromString

setupapi

SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInterfaceW
SetupDiOpenDevRegKey
SetupDiGetDeviceInterfaceDetailW

msvcrt

wcsrchr
_vsnprintf
_unlock
_onexit
_lock
_initterm
wcsstr
_errno
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIlog
_CIexp
wcstoul
towupper
realloc
qsort
memset
memmove
memcpy
malloc
_vsnwprintf
iswspace
free
ceil
calloc
bsearch
_wcsicmp

shlwapi

PathRenameExtensionW
PathRemoveExtensionW
PathParseIconLocationW
PathMatchSpecW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathAppendW
PathAddBackslashW
SHStrDupW
StrCSpnW
StrCmpNIW
StrCmpW
StrRetToBufW
StrStrW
PathRemoveFileSpecW

advapi32

GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
InitializeAcl
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
UnregisterTraceGuids
TraceEvent
RegisterTraceGuidsW
RegSetValueExW

rpcrt4

NdrOleFree
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_Connect
CStdStubBuffer_AddRef

winmm

PlaySoundW

gdi32

SetBkMode
SelectPalette
SetBrushOrgEx
SetStretchBltMode
BitBlt
CreateCompatibleDC
CreateDIBSection
CreateHalftonePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectW
GetStockObject
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectObject
SetTextColor
StretchBlt
SetBkColor

kernel32

UnhandledExceptionFilter
TerminateProcess
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OutputDebugStringA
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
UnmapViewOfFile
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GetVolumeInformationW
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetEnvironmentVariableW
GetDriveTypeW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibraryAndExitThread
FreeLibrary
FormatMessageW
FlushInstructionCache
FindResourceW
FindResourceExW
FindNextFileW
FindClose
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateMutexW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CopyFileExW
CompareStringW
CompareFileTime
CloseHandle
VirtualAlloc
VirtualFree
WaitForMultipleObjects
WriteFile
lstrcmpiW
lstrlenW
LoadResource

Exports

Exports

AddPyObject
FromCComplex
HashNotImplemented
Method_Fini
Number_ToBase
set_shift

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 272KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb61667c54fc87b4362ee502eef53201

Headers

File Characteristics

Imports

shell32

version

oleaut32

user32

ole32

setupapi

msvcrt

shlwapi

advapi32

rpcrt4

winmm

gdi32

kernel32

Exports

Exports

Sections

.text Size: 79KB - Virtual size: 78KB

.rdata Size: 272KB - Virtual size: 272KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 25KB - Virtual size: 25KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 79KB - Virtual size: 78KB

.rdata
Size: 272KB - Virtual size: 272KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 25KB - Virtual size: 25KB

.reloc
Size: 4KB - Virtual size: 4KB