9f809eebc2146149347f5d623016efcde5a408341a9473c0e3ddd3b835ae6708

Sharing

Copy URL Twitter E-mail

General

Target

9f809eebc2146149347f5d623016efcde5a408341a9473c0e3ddd3b835ae6708
Size

128KB
MD5

3b8b7f5ed6f70b922ada6686d72229a0
SHA1

5c43ea97bbe989d27457100a11f2680773954f44
SHA256

9f809eebc2146149347f5d623016efcde5a408341a9473c0e3ddd3b835ae6708
SHA512

e6a5cc4c3274323a0eddea81ce718a520fb5404fc72d46c0857add197ac7d64367971b7576890a30a1ce2dc44c0eeced33e259285355a6019e66fc73e948c79f
SSDEEP

3072:kk2eX5l+TFNqTniXxQd5A1wufpkKIcSPNWva5:5DX2FIzV5OiKIcSPNCU

Score

N/A

Malware Config

Signatures

Files

9f809eebc2146149347f5d623016efcde5a408341a9473c0e3ddd3b835ae6708
.dll windows x86

00bef51566910c2698d6f736076b845b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Heap32ListNext
WriteConsoleOutputA
SetCalendarInfoW
GlobalFree
InitializeCriticalSectionAndSpinCount
GetVersionExA
OpenFileMappingW
FlushViewOfFile
GetConsoleFontSize
GetProfileSectionA
GetDriveTypeW
GlobalDeleteAtom
SetCommState
GetConsoleTitleA
WritePrivateProfileSectionA
CreateNamedPipeW
VDMConsoleOperation
GetFileAttributesExW
EndUpdateResourceW
Beep
CloseHandle
VerLanguageNameW
DebugActiveProcess
GetSystemTime
lstrcpyW
UTRegister
GetCommProperties
GetConsoleAliasesA
GetSystemTimeAdjustment
ScrollConsoleScreenBufferA
OpenProfileUserMapping
GetConsoleInputExeNameW
UnlockFileEx
SetConsoleTitleA
IsProcessorFeaturePresent
GlobalFindAtomA
ReadDirectoryChangesW
GetCommMask
SetConsoleWindowInfo
WriteProfileSectionA
lstrcmpW
SetDefaultCommConfigW
_hwrite
FillConsoleOutputAttribute
EnumTimeFormatsW
AssignProcessToJobObject
TryEnterCriticalSection
IsValidLocale
FatalAppExitA
BuildCommDCBAndTimeoutsW
EnumSystemLocalesA
GetEnvironmentStringsW
lstrcmpiA
FreeLibrary
AreFileApisANSI
CreateMailslotA
SetConsoleTextAttribute
GlobalUnWire
GetCalendarInfoA
GetStartupInfoA
CompareFileTime
CreateConsoleScreenBuffer
GetFileAttributesW
GetCalendarInfoW
GetCurrentConsoleFont
CancelWaitableTimer
GetModuleHandleA
ExpandEnvironmentStringsW
EnumDateFormatsExA
SetFileApisToANSI
EnumDateFormatsExW
_lclose
SystemTimeToTzSpecificLocalTime
PrepareTape
SetPriorityClass
GlobalGetAtomNameA
OpenJobObjectA
InvalidateConsoleDIBits
SetFileTime
GetVolumePathNameA
LocalFileTimeToFileTime
GetConsoleCommandHistoryA
LocalSize
GetLogicalDriveStringsW
WaitForSingleObject
ReadConsoleInputExA
ReadConsoleOutputCharacterA
GetCurrentThreadId
WaitForMultipleObjectsEx
RegisterWowBaseHandlers
InterlockedIncrement
SetTimerQueueTimer
WritePrivateProfileStringW
SetTapeParameters
DeleteFiber
RegisterWaitForInputIdle
SetConsoleMaximumWindowSize
BuildCommDCBW
EnterCriticalSection
VDMOperationStarted
SetLastError
HeapValidate
GetLocalTime
OpenJobObjectW
SetSystemTimeAdjustment
SetMailslotInfo
SetProcessWorkingSetSize
QueryInformationJobObject
GetHandleInformation
MapViewOfFileEx
CommConfigDialogW
BeginUpdateResourceW
DeleteTimerQueue
LoadLibraryA
GetProcAddress
VirtualAlloc
GetVersion

gdi32

CombineRgn
ExcludeClipRect
PolyPolyline
GetCharWidthA
GetEnhMetaFileW
GetBitmapDimensionEx
SetTextAlign
RealizePalette
GetKerningPairsA
GetWorldTransform
GetOutlineTextMetricsW
EnumFontFamiliesA
WidenPath
SetMetaFileBitsEx
CreateColorSpaceW
SetMapperFlags
SetPixelFormat
EnumMetaFile
GetCharWidthFloatA
GdiGetPageHandle
CreateMetaFileW
GetDCPenColor
GetRelAbs
SetICMProfileW
SetDCPenColor
SelectObject
GetTextMetricsW
FixBrushOrgEx
CreateDCA
GetROP2
SelectBrushLocal
SetDeviceGammaRamp
ExtSelectClipRgn
GdiPlayEMF
SetColorSpace
GetTextCharsetInfo
CloseEnhMetaFile
GetCharWidthW
OffsetClipRgn
Polyline
SetBkMode
GetStockObject
GetFontAssocStatus
GetEnhMetaFilePaletteEntries
AddFontResourceA
DeviceCapabilitiesExW
AnimatePalette
CreateEnhMetaFileW
RestoreDC
SetWindowOrgEx
FlattenPath
SelectFontLocal
GdiDeleteSpoolFileHandle
FillPath
BeginPath
GetGraphicsMode
CreateDIBPatternBrush
PlayEnhMetaFile
GetTextExtentPoint32A
ScaleViewportExtEx
RemoveFontMemResourceEx
SetEnhMetaFileBits
EnumFontsW
SetWinMetaFileBits
GetPolyFillMode
CopyMetaFileW
SetTextColor
ResetDCW
SetDIBits
GetRgnBox
GetFontData
SetMiterLimit
DescribePixelFormat
PlgBlt
ResizePalette
SetColorAdjustment
SetLayout
SetStretchBltMode
GetSystemPaletteEntries
GetCharABCWidthsA
SetDIBColorTable
GetObjectA
GdiStartDocEMF
DeleteColorSpace
CreateSolidBrush
SetMapMode
CreateBitmapIndirect
CreateRectRgnIndirect
SetSystemPaletteUse
GdiPlayScript
GetMetaFileW
ExtTextOutA
CreateCompatibleBitmap
DeleteDC
GetKerningPairsW
GetMetaRgn
ColorCorrectPalette
RoundRect
CreateFontIndirectW
GdiStartPageEMF
SetDCBrushColor
EnumFontFamiliesExW
CloseMetaFile
CreateICA
GetColorAdjustment
GetGlyphIndicesA
CreateScalableFontResourceA
CreateCompatibleDC
PatBlt
SwapBuffers
ExtFloodFill

advapi32

I_ScSetServiceBitsW
GetAccessPermissionsForObjectW
GetSecurityDescriptorControl
FileEncryptionStatusA
SystemFunction004
EnumServicesStatusW
GetAce
CloseEventLog
LsaSetSecret
RegDeleteKeyW
GetSidSubAuthorityCount
GetCurrentHwProfileW
RegQueryInfoKeyW
CryptHashData
LookupPrivilegeValueA
ElfClearEventLogFileW
IsValidSecurityDescriptor
RegOpenKeyW
MapGenericMask
LookupAccountSidW
SystemFunction008
RegUnLoadKeyA
AllocateLocallyUniqueId
SetSecurityDescriptorOwner
RegCreateKeyExW
SystemFunction012
LsaQuerySecret
SetTokenInformation
LsaLookupNames
ControlService
SetPrivateObjectSecurityEx
OpenBackupEventLogW
OpenEventLogW
RegNotifyChangeKeyValue
CreateServiceA
CryptSignHashA
LsaQueryTrustedDomainInfoByName
GetFileSecurityA
DuplicateTokenEx
RegQueryMultipleValuesW
CryptAcquireContextA
RegOpenKeyExW
RegisterEventSourceA
LsaLookupSids

opengl32

glNormal3s
glMaterialiv
glScalef
glVertex2f
glTexCoord1dv
wglDescribePixelFormat
glRenderMode
glDisable
glGetTexEnvfv
glTexParameterf
glPopAttrib
glVertex3fv
glColor3b
glSelectBuffer
glLightModelf
glIsList
glPopClientAttrib
glDrawPixels
glPointSize
glMap2f
glTexCoord1iv
glMap1f
glAccum
glClearAccum
glFeedbackBuffer
glGetTexEnviv
glNormal3fv
glGetTexGendv
glClearIndex
wglUseFontOutlinesA
glVertex4iv
glPushName
glTexGeniv
glIndexsv
glTexCoord4iv
glTexCoord4dv
glVertex2sv
glTexGeni
glRasterPos3f
glEvalPoint1
glRects
glGetTexImage
glGetTexParameteriv
glPixelTransferi
glTexCoord1sv
glAlphaFunc
glPixelStorei
glRasterPos4dv
glInitNames
glPushClientAttrib
glRasterPos2fv
glClearStencil
glColor4i
glIndexub
GlmfBeginGlsBlock
glColor3uiv
glDrawArrays
glGetMapfv
wglCreateLayerContext
glColorMaterial
glColor4sv
glRasterPos2dv
glColor4d
glPixelMapusv
glMapGrid1d
glColor4uiv
glLineWidth
glArrayElement
glEvalCoord1fv
glLightiv
glVertexPointer
glVertex3dv
glLogicOp
glGetTexLevelParameteriv
glPassThrough
glColor3s
glFogiv
glPixelStoref
glClearColor
wglCreateContext
glColor3dv
glDepthFunc
wglDeleteContext
glTexCoord2dv
glNormal3sv
glDebugEntry
glTranslatef
wglMakeCurrent
glPushAttrib
glGetFloatv
glIndexf
glColor3ui
glEvalCoord2dv
glTexCoord4d
wglSwapBuffers
glRasterPos4f
glLighti
glRecti
glDeleteTextures
glTexGendv
glNormal3f
glTexCoord4s
glRasterPos2i
glEvalCoord2f
glCallList
glTexGenfv
glRasterPos4iv

shell32

FindExecutableA
SHGetPathFromIDListW
StrStrA
SHGetSpecialFolderPathW
StrStrIA
CheckEscapesW
SHInvokePrinterCommandW
SHGetSpecialFolderLocation
ExtractAssociatedIconW
DragQueryFileW
ExtractAssociatedIconA
SheChangeDirA
StrCmpNIA
StrCmpNW
InternalExtractIconListW
SHChangeNotify
SHAddToRecentDocs
StrChrW
StrRStrIW
FreeIconList
StrRStrIA
StrChrIW
DuplicateIcon
SHAppBarMessage
SHInvokePrinterCommandA
SHLoadInProc
RegenerateUserEnvironment

shlwapi

PathStripPathA
PathCreateFromUrlA
SHRegGetBoolUSValueA
UrlCombineW
StrTrimW
SHRegEnumUSKeyA
PathRemoveFileSpecA
PathFindNextComponentA
UrlUnescapeA
PathSkipRootW
PathIsDirectoryW
PathRemoveBlanksA
SHDeleteKeyA
StrToIntW
PathRemoveFileSpecW
PathCreateFromUrlW
StrCmpIW
PathIsFileSpecA
StrIsIntlEqualW
PathRemoveBlanksW
UrlIsOpaqueA
PathIsUNCServerShareW
PathIsURLW
UrlCanonicalizeA
PathMakePrettyA
UrlCreateFromPathA
PathRemoveBackslashA
SHRegQueryUSValueA
PathGetArgsA
UrlApplySchemeW
UrlCompareW
SHCreateShellPalette
PathFindExtensionA
SHDeleteEmptyKeyA
PathRemoveExtensionW
PathIsDirectoryA
PathUnmakeSystemFolderW
UrlEscapeA
PathAddBackslashA
PathUnquoteSpacesW
ChrCmpIA
SHRegWriteUSValueW
PathAddExtensionA
PathGetCharTypeA
SHRegCreateUSKeyA
StrCSpnIW
PathFindFileNameA
PathCompactPathExW
PathMakeSystemFolderW
PathMatchSpecA
PathIsPrefixW
PathIsRootW
SHRegQueryUSValueW
UrlIsNoHistoryA
PathParseIconLocationW
PathIsUNCServerShareA
PathCompactPathA
PathStripToRootW
UrlGetLocationW
SHDeleteValueW
SHQueryValueExW
PathCombineA
SHRegDeleteUSValueW
SHOpenRegStreamA
StrDupW
PathGetCharTypeW
PathIsPrefixA
PathRenameExtensionA
PathCombineW
PathCommonPrefixW
SHRegDeleteUSValueA

version

GetFileVersionInfoSizeW
VerQueryValueA
VerFindFileW
VerInstallFileA
GetFileVersionInfoW
VerFindFileA
GetFileVersionInfoSizeA
VerQueryValueW
VerInstallFileW
GetFileVersionInfoA

msvcrt

_mbsdec
_mbsnbset
fwrite
rand
__crtCompareStringA
fwprintf
ispunct
_wfindnexti64
_ftol
_mbsnset
sprintf
_mbctokata
_wopen
ferror
fopen
iswcntrl
_mbslwr
iswalnum
_mbsspnp
setbuf
fread
_heapchk
fsetpos
_mbccpy
_wsearchenv
_access
wcscspn
feof
_mbsnbicoll
__p__wenviron
_execve
wcsncmp
__lc_codepage
_ismbbkalnum
__RTCastToVoid
__unDName
wcslen
_wspawnlp
_atoldbl
gmtime
_cscanf
__set_app_type
printf
fprintf
_winminor
tanh
_write
_wsystem
_ismbbkprint
_unlock
fclose
fputc
_wfreopen
_wtoi
exit
fscanf
_unlink
fwscanf
setvbuf
ftell
memset
_CIsinh
_wsopen
fputs
__argv
fseek

Exports

Exports

Achfco
Akyymtqymp
Bkxjntji
Dawhz
Ghbpmah
Gkph
Iyfhu
Pxuzds
Usgpmxozzn
Yxdqa
Zmkl

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

00bef51566910c2698d6f736076b845b

Headers

File Characteristics

Imports

kernel32

gdi32

advapi32

opengl32

shell32

shlwapi

version

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 52KB - Virtual size: 48KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 52KB - Virtual size: 48KB

.reloc
Size: 8KB - Virtual size: 7KB