75db9d97ad9991e9f9a6a0428207fdd34ea1430685dce0f93702b87d933e6df6

Sharing

Copy URL Twitter E-mail

General

Target

75db9d97ad9991e9f9a6a0428207fdd34ea1430685dce0f93702b87d933e6df6
Size

192KB
MD5

82c88134e75ed37e265b79cd9da16ad1
SHA1

6adeef8c1a07cea5877adf59c9623b97ae18cad4
SHA256

75db9d97ad9991e9f9a6a0428207fdd34ea1430685dce0f93702b87d933e6df6
SHA512

27d11ed5402d3e240d07948e5cd9ba7825bdb8b49fd10f745abdfa0d192ccf33467f0cccd8149e0fdc64e5256e22dbad68ca73997fb93d6fc7316ba5b512d3b8
SSDEEP

3072:ToaogkkoxjjYB2zaEipk9SWgkvbZK3KRc9N0rf/wLsBREjYN1lIYwW3DW:uJxvYB1ELsaE3KRc9YuTsvlI/Wz

Score

N/A

Malware Config

Signatures

Files

75db9d97ad9991e9f9a6a0428207fdd34ea1430685dce0f93702b87d933e6df6
.dll windows x86

15d0285df727f3bc7dea26870f1b127c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegQueryInfoKeyW
OpenSCManagerW
RegCloseKey
CloseServiceHandle
QueryServiceConfigW
QueryServiceStatus
RegDeleteValueW
ImpersonateSelf
RegEnumKeyExW
OpenServiceW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyA
RegQueryValueExA

gdi32

GetObjectW
GetBkMode

kernel32

LocalFree
WaitForSingleObject
CreateEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
HeapReAlloc
TlsGetValue
TlsSetValue
DisableThreadLibraryCalls
TlsAlloc
TlsFree
OpenFileMappingW
MapViewOfFile
WaitForSingleObjectEx
InterlockedExchange
UnmapViewOfFile
SleepEx
VerifyVersionInfoW
HeapSize
MultiByteToWideChar
GetACP
PulseEvent
LoadLibraryA
GetTickCount
GetModuleFileNameW
Beep
GetFileSize
GetFileTime
CompareFileTime
GlobalHandle
GlobalFree
MoveFileW
_lclose
GetTempPathW
GetTempFileNameW
DeleteFileW
GetFileAttributesW
GetFullPathNameW
_llseek
_lwrite
_lread
CreateEventA
GetCurrentThread
SetEvent
ExitThread
FindResourceW
LoadLibraryExW
LoadResource
LockResource
FreeResource
SetCurrentDirectoryW
GetCurrentDirectoryW
lstrcmpW
lstrcpyA
WideCharToMultiByte
CreateThread
SetThreadPriority
LocalAlloc
OpenEventW
EnterCriticalSection
HeapAlloc
HeapFree
Sleep
GetLastError
GetCurrentProcessId
IsBadWritePtr
IsBadStringPtrW
SetLastError
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsW
lstrlenW
lstrcpyW
lstrcatW
lstrcmpiW
GetPrivateProfileStringW
CloseHandle
SearchPathW
CreateFileW
GetProfileStringW
GetProcAddress
GetModuleHandleW
LeaveCriticalSection
lstrcmpiA
lstrcpynA
FileTimeToSystemTime
GlobalUnlock
GlobalLock
GetFileAttributesExA
GetModuleFileNameA
lstrcpynW
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
LoadLibraryW
SetErrorMode
FreeLibrary
GlobalReAlloc
GlobalAlloc
InitializeCriticalSection
GetCurrentThreadId
GetThreadPriority
ResetEvent

ntdll

NtQueryVirtualMemory
RtlUnwind
RtlDeleteResource
RtlImageNtHeader
RtlInitializeResource
mbstowcs
VerSetConditionMask
NtCreateEvent
NtWaitForMultipleObjects
NtCreateTimer
NtSetTimer
NtCancelTimer
NtSetEvent
NtSetTimerResolution
NtQueryTimerResolution
memmove
RtlUnicodeToMultiByteN
RtlMultiByteToUnicodeN
wcsrchr
towlower
isdigit
wcscpy
wcscat
strncpy
strspn
strncmp
strstr
RtlReleaseResource
RtlAcquireResourceShared
RtlAcquireResourceExclusive
NtCreateSection
NtMapViewOfSection
NtUnmapViewOfSection
atoi
wcschr
wcstol
swprintf
RtlCreateUserThread
NtResumeThread
wcsncpy
wcsncmp
_wcsnicmp
wcslen
wcsncat
NtSetValueKey
RtlOpenCurrentUser
NtQueryValueKey
RtlInitUnicodeString
NtOpenKey
NtClose

rpcrt4

RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingFree
NdrClientCall2
RpcStringFreeW

user32

GetWinStationInfo
GetSystemMetrics
SystemParametersInfoW
CharUpperA
LoadIconA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
PostThreadMessageA
PeekMessageA
UnregisterClassA
PeekMessageW
MessageBoxW
GetAsyncKeyState
LoadStringA
SendMessageA
CharLowerBuffA
PostMessageA
SetTimer
LoadStringW
PostMessageW
KillTimer
RegisterWindowMessageW
IsWindow
wsprintfA
wsprintfW

Exports

Exports

CloseDriver
DefDriverProc
DriverCallback
DrvGetModuleHandle
GetDriverModuleHandle
MigrateAllDrivers
MigrateSoundEvents
NotifyCallbackData
OpenDriver
PlaySound
PlaySoundA
PlaySoundW
SendDriverMessage
WOW32DriverCallback
WOW32ResolveMultiMediaHandle
WOWAppExit
WinmmLogoff
WinmmLogon
_gfxLogoff@0
_gfxLogon@4
aux32Message
auxGetDevCapsA
auxGetDevCapsW
auxGetNumDevs
auxGetVolume
auxOutMessage
auxSetVolume
gfxAddGfx
gfxBatchChange
gfxCreateGfxFactoriesList
gfxCreateZoneFactoriesList
gfxDestroyDeviceInterfaceList
gfxEnumerateGfxs
gfxModifyGfx
gfxOpenGfx
gfxRemoveGfx
joy32Message
joyConfigChanged
joyGetDevCapsA
joyGetDevCapsW
joyGetNumDevs
joyGetPos
joyGetPosEx
joyGetThreshold
joyReleaseCapture
joySetCapture
joySetThreshold
mci32Message
mciDriverNotify
mciDriverYield
mciExecute
mciFreeCommandResource
mciGetCreatorTask
mciGetDeviceIDA
mciGetDeviceIDFromElementIDA
mciGetDeviceIDFromElementIDW
mciGetDeviceIDW
mciGetDriverData
mciGetErrorStringA
mciGetErrorStringW
mciGetYieldProc
mciLoadCommandResource
mciSendCommandA
mciSendCommandW
mciSendStringA
mciSendStringW
mciSetDriverData
mciSetYieldProc
mid32Message
midiConnect
midiDisconnect
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetDevCapsW
midiInGetErrorTextA
midiInGetErrorTextW
midiInGetID
midiInGetNumDevs
midiInMessage
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutCacheDrumPatches
midiOutCachePatches
midiOutClose
midiOutGetDevCapsA
midiOutGetDevCapsW
midiOutGetErrorTextA
midiOutGetErrorTextW
midiOutGetID
midiOutGetNumDevs
midiOutGetVolume
midiOutLongMsg
midiOutMessage
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutSetVolume
midiOutShortMsg
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamPosition
midiStreamProperty
midiStreamRestart
midiStreamStop
mixerClose
mixerGetControlDetailsA
mixerGetControlDetailsW
mixerGetDevCapsA
mixerGetDevCapsW
mixerGetID
mixerGetLineControlsA
mixerGetLineControlsW
mixerGetLineInfoA
mixerGetLineInfoW
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
mmTaskCreate
mmTaskSignal
mmTaskYield
mmioAdvance
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioGetInfo
mmioInstallIOProcA
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRead
mmioRenameA
mmioRenameW
mmioSeek
mmioSendMessage
mmioSetBuffer
mmioSetInfo
mmioStringToFOURCCA
mmioStringToFOURCCW
mmioWrite
mmsystemGetVersion
mod32Message
mxd32Message
sndPlaySoundA
sndPlaySoundW
tid32Message
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetSystemTime
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
waveInGetErrorTextW
waveInGetID
waveInGetNumDevs
waveInGetPosition
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextA
waveOutGetErrorTextW
waveOutGetID
waveOutGetNumDevs
waveOutGetPitch
waveOutGetPlaybackRate
waveOutGetPosition
waveOutGetVolume
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutSetPitch
waveOutSetPlaybackRate
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite
wid32Message
winmmDbgOut
winmmSetDebugLevel
wod32Message

Sections

.text
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

15d0285df727f3bc7dea26870f1b127c

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ntdll

rpcrt4

user32

Exports

Exports

Sections

.text Size: 123KB - Virtual size: 123KB

.data Size: 5KB - Virtual size: 7KB

.rsrc Size: 24KB - Virtual size: 23KB

.reloc Size: 38KB - Virtual size: 38KB

.text
Size: 123KB - Virtual size: 123KB

.data
Size: 5KB - Virtual size: 7KB

.rsrc
Size: 24KB - Virtual size: 23KB

.reloc
Size: 38KB - Virtual size: 38KB