23699bc0132fef7e68326bc23c8202b62edf2665bff0da9dbf5a32a352b42c3f

Sharing

Copy URL Twitter E-mail

General

Target

23699bc0132fef7e68326bc23c8202b62edf2665bff0da9dbf5a32a352b42c3f
Size

461KB
MD5

1f84365ea0029e6a08eec9626c6d4f9c
SHA1

2b5ae7e3680ced36a2c7befabcc2de0cc6bd4f26
SHA256

23699bc0132fef7e68326bc23c8202b62edf2665bff0da9dbf5a32a352b42c3f
SHA512

f74ec28072c64fbff184a3bc7794884b0e592137eadec92671d04eb3d6b81da4d65a6aabcb0d70beee4222812edb32693fb01cccd893c96e3b0c9f0b52986a9f
SSDEEP

6144:IS1W8MuLjWIlJ3P5Patwu5/Uik53PRM/fUsh4FWeddaeEHj4f8LyeofT6Rd+yoVO:SpI/3Bitwu1UhdP2z4FW6NJxuXy

Score

N/A

Malware Config

Signatures

Files

23699bc0132fef7e68326bc23c8202b62edf2665bff0da9dbf5a32a352b42c3f
.dll windows x86

c34bebbd0750baf2292b2f71ed600b53

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

TranslateMessage
ShowScrollBar
SetThreadDesktop
SetForegroundWindow
SendMessageA
ScrollWindowEx
PtInRect
PostMessageA
PeekMessageA
MessageBoxA
LoadIconA
IsWindow
GetWindowRect
FrameRect
FillRect
ExitWindowsEx
ExcludeUpdateRgn
EnumWindows
EnumThreadWindows
EnableWindow
DrawIcon
DispatchMessageA
BlockInput
CheckRadioButton
AdjustWindowRect

kernel32

lstrlenA
CloseHandle
ContinueDebugEvent
CopyFileA
CreateProcessA
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommConfig
GetCommState
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFullPathNameA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetSystemDirectoryA
GetTickCount
GetVersionExA
GetWindowsDirectoryA
Heap32First
LoadLibraryA
LoadModule
LocalFileTimeToFileTime
QueryPerformanceCounter
ReadFile
SetLastError
SetTapePosition
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
VirtualAlloc
VerSetConditionMask

advapi32

AddAuditAccessAceEx
ControlService
CryptGetUserKey
SystemFunction030
SystemFunction001
SetThreadToken
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
QueryServiceStatus
OpenServiceA
OpenProcessToken
NotifyBootConfigStatus
LsaGetSystemAccessAccount
LsaCreateTrustedDomain
LookupPrivilegeValueA
GetTokenInformation
GetSidLengthRequired
GetSidIdentifierAuthority
EqualSid
DestroyPrivateObjectSecurity
AllocateAndInitializeSid

msvcrt

__dllonexit
__getmainargs
__p___wargv
__CxxFrameHandler
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_onexit
_scalb
_setmbcp
_strnicmp
_strupr
exit
exp
getchar
sprintf
sqrt
strcspn
strncpy
strstr
_XcptFilter
_CIexp
__p__amblksiz

shell32

SHLoadInProc
SHGetFolderPathW

Exports

Exports

BytesWarning
GetSelf
Int_AsUnsignedLongMask
Int_Type
Node_Compile
UnicodeError
destroy_write_struct
get_pHYs
handle_as_unknown

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c34bebbd0750baf2292b2f71ed600b53

Headers

File Characteristics

Imports

user32

kernel32

advapi32

msvcrt

shell32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 214KB - Virtual size: 214KB

.data Size: 108KB - Virtual size: 109KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 214KB - Virtual size: 214KB

.data
Size: 108KB - Virtual size: 109KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 3KB