9daba2619ec01f16e47763044bfc27b2fd7c7b90c787a346807a9f7e3cbf95d9

Sharing

Copy URL Twitter E-mail

General

Target

9daba2619ec01f16e47763044bfc27b2fd7c7b90c787a346807a9f7e3cbf95d9
Size

1.5MB
MD5

023da4da32a309712facd90bc74e6629
SHA1

07b9b54a7b0f31edf6b9bf7117df88328fd7e225
SHA256

9daba2619ec01f16e47763044bfc27b2fd7c7b90c787a346807a9f7e3cbf95d9
SHA512

a0810818b05624e10f229db654f66738e4dcc1260d2631e1a393b6543353ee5f3117411f4be5a68761f400d80f1a964709d68a7d7258ce678ce8e647d0abdbc7
SSDEEP

24576:ZC0rWIIBdnyAswkDQmJe+siGW6kM5cQoad/FHJw1:ZRIBJ1SXTGnkZQoad/FHJw

Score

N/A

Malware Config

Signatures

Files

9daba2619ec01f16e47763044bfc27b2fd7c7b90c787a346807a9f7e3cbf95d9
.dll windows x86

9722e9317b4e5cd624f8edab4de7a7a3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

SHDeleteKeyW

advapi32

RevertToSelf
FreeSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExA
RegQueryValueExA
RegEnumKeyW
RegFlushKey
RegEnumKeyExW
RegEnumValueW
RegisterEventSourceW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegDeleteValueW
RegCreateKeyW
RegSetKeySecurity
DeregisterEventSource
ReportEventW
ImpersonateSelf
OpenThreadToken
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck

user32

WinHelpW
GetSysColorBrush
RegisterClassExW
TrackPopupMenu
DestroyIcon
CreatePopupMenu
CheckMenuRadioItem
InsertMenuW
CheckMenuItem
GetSysColor
InsertMenuItemW
CharPrevW
IsWindowVisible
EqualRect
IsIconic
GetWindowPlacement
MapVirtualKeyW
LockSetForegroundWindow
SendInput
FindWindowExW
IntersectRect
GetAsyncKeyState
GetClassInfoW
GetWindowTextW
DrawIconEx
DrawTextExW
GetWindow
CopyRect
InvalidateRgn
GetClassLongW
GetCursor
SetClassLongW
ValidateRect
GetKeyState
ClipCursor
ReleaseCapture
SetCapture
InflateRect
ShowCursor
SendDlgItemMessageW
CheckDlgButton
SetDlgItemInt
GetWindowDC
GetDlgItemInt
FillRect
SetForegroundWindow
MapWindowPoints
IsDialogMessageW
IsRectEmpty
InSendMessage
RegisterHotKey
UnregisterHotKey
PeekMessageW
SetCursor
PostThreadMessageW
FindWindowW
EnumWindows
GetForegroundWindow
MessageBoxW
WaitForInputIdle
RegisterWindowMessageW
BroadcastSystemMessageW
InvalidateRect
IsZoomed
GetWindowModuleFileNameW
IsWindow
SendMessageTimeoutW
GetWindowThreadProcessId
IsDlgButtonChecked
DestroyWindow
PostQuitMessage
CharLowerW
LoadCursorW
UnregisterClassW
RegisterClassW
CreateWindowExW
GetMessageW
TranslateMessage
DispatchMessageW
DefWindowProcW
LoadIconW
DialogBoxParamW
LoadImageW
GetDC
SystemParametersInfoW
DrawTextW
ReleaseDC
GetParent
GetWindowRect
GetCursorPos
EnumDisplaySettingsW
GetDlgItemTextW
SetWindowPos
SetWindowTextW
MoveWindow
ShowWindow
SetFocus
SendMessageW
LoadStringW
wsprintfW
SetDlgItemTextW
SetTimer
GetWindowLongW
SetWindowLongW
BeginPaint
GetClientRect
EndPaint
ExitWindowsEx
GetClassNameW
UpdateWindow
CharNextW
RealGetWindowClassW
GetAncestor
GetDesktopWindow
GetActiveWindow
CascadeWindows
WindowFromPoint
GetMouseMovePointsEx
CreateDialogParamW
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
CharUpperW
wvsprintfW
ChangeDisplaySettingsW
ClientToScreen
EnumChildWindows
ScreenToClient
ShowWindowAsync
SetSystemCursor
CopyIcon
SetWindowPlacement
UnionRect
DeleteMenu
IsMenu
GetGUIThreadInfo
FrameRect
SetCursorPos
GetSystemMenu
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
EnumThreadWindows
BringWindowToTop
SetActiveWindow
AttachThreadInput
GetTopWindow
AllowSetForegroundWindow
DrawEdge
GetMenuStringW
GetMenuItemInfoW
GetMenuItemCount
EnableMenuItem
DestroyMenu
RemoveMenu
CloseClipboard
SetClipboardData
RegisterClipboardFormatW
OpenClipboard
GetMenuItemID
GetMenuState
TrackPopupMenuEx
GetMenuItemRect
DestroyCursor
LoadBitmapW
GetWindowInfo
AdjustWindowRect
EmptyClipboard
SubtractRect
GetIconInfo
GetCursorInfo
IsWindowEnabled
RealChildWindowFromPoint
GetUpdateRect
DrawMenuBar
SetMenuItemInfoW
GetSubMenu
GetMenu
SetMenu
LoadMenuW
SetRectEmpty
DrawFocusRect
GetDialogBaseUnits
OffsetRect
EndMenu
SetWindowLongA
GetWindowLongA
IsWindowUnicode
CallWindowProcW
DrawStateW
EndDialog
PtInRect
GetDlgCtrlID
RedrawWindow
KillTimer
GetDlgItem
EnableWindow
PostMessageW
AppendMenuW
GetSystemMetrics

gdi32

ExtEscape
GetTextMetricsW
SetMapMode
MaskBlt
GetStretchBltMode
ExtFloodFill
RectInRegion
GetDIBits
SetBkColor
ExtTextOutW
GetDeviceCaps
CreateRectRgnIndirect
CreateDIBSection
FillPath
LineDDA
Arc
PtInRegion
CreateCompatibleBitmap
SetPixel
CreatePatternBrush
SetStretchBltMode
SetBrushOrgEx
StretchBlt
SetTextColor
TextOutW
GetTextExtentPoint32W
GetRgnBox
CreateDCW
CreateSolidBrush
BeginPath
EndPath
StrokeAndFillPath
PathToRegion
GetPixel
CreatePen
MoveToEx
LineTo
CreateRectRgn
OffsetRgn
CreateFontIndirectW
SelectObject
DeleteObject
CreateCompatibleDC
GetObjectW
BitBlt
DeleteDC
SetBkMode
GetStockObject
CreateBitmap

shell32

SHCreateDirectoryExW
SHGetFolderPathW
ExtractIconExW
SHGetSpecialFolderLocation
ShellExecuteW
ExtractIconW
SHGetDesktopFolder
SHAppBarMessage
SHChangeNotify
Shell_NotifyIconW
SHGetMalloc

psapi

GetModuleBaseNameW
EnumProcessModules
EnumProcesses
GetModuleFileNameExW

ole32

CoUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitialize

oleaut32

SysStringLen
SysFreeString
OleLoadPicture

comctl32

PropertySheetW

winmm

PlaySoundW

kernel32

ExitProcess
GetModuleHandleA
SetLastError
IsBadWritePtr
HeapReAlloc
VirtualAlloc
FatalAppExitA
VirtualFree
HeapCreate
SetHandleCount
GetVersionExA
GetCommandLineA
RtlUnwind
CopyFileW
MoveFileExW
FreeResource
GlobalGetAtomNameW
EnterCriticalSection
LeaveCriticalSection
GetSystemPowerStatus
GetStdHandle
WideCharToMultiByte
MultiByteToWideChar
SetThreadExecutionState
RequestWakeupLatency
GlobalDeleteAtom
GlobalAddAtomW
InterlockedExchange
OpenSemaphoreW
GetFileAttributesW
GetSystemWindowsDirectoryW
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetLocalTime
Beep
GetWindowsDirectoryW
FindNextFileW
GetFileSize
CreateFileW
WriteFile
SetFilePointer
ReadFile
SetFileAttributesW
lstrcmpiW
CreateDirectoryW
MulDiv
FindFirstFileW
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
VirtualProtect
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
LoadLibraryA
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
SetStdHandle
GetTimeZoneInformation
HeapSize
FlushFileBuffers
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
OutputDebugStringW
FindClose
GetUserDefaultLangID
OpenEventW
DeleteFileW
ResetEvent
SetEvent
ProcessIdToSessionId
TerminateThread
GlobalFindAtomW
OpenThread
GetTickCount
GetSystemDirectoryW
GetExitCodeProcess
TerminateProcess
InterlockedIncrement
CreateMutexW
CreateEventW
HeapDestroy
HeapAlloc
GetCommandLineW
lstrcatW
CreateFileMappingW
LocalAlloc
LocalFree
CloseHandle
MapViewOfFileEx
GetLastError
GetSystemInfo
UnmapViewOfFile
GetCurrentProcessId
FreeLibrary
LoadLibraryW
lstrcpynW
GetCurrentThreadId
ExitThread
lstrcpyW
lstrlenW
CreateThread
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
lstrcmpW
GetEnvironmentVariableW
CreateProcessW
GetVersionExW
GetCurrentProcess
Sleep
OpenProcess
WaitForSingleObject
DeleteCriticalSection
TlsFree
HeapFree
TlsGetValue
InterlockedDecrement
ReleaseMutex
SetThreadPriority
GetThreadPriority
GetCurrentThread
TlsSetValue
InterlockedExchangeAdd
GetProcessHeap
TlsAlloc
InitializeCriticalSection

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

DMAddDesktop
DMAssociate
DMEnumDesktopApplications
DMEnumDesktops
DMGetCurrentDesktop
DMGetCurrentMonitorDesktop
DMGetDefaultDesktop
DMGetSetting
DMRemoveDesktop
DMSetCurrentDesktop
DMSetCurrentMonitorDesktop
DMSetDefaultDesktop
DMSetSetting
DMStoreSettings
DMUpdateDesktopScreenshot
EnumNviewWindows
GetNViewCAPS
HKAdd
HKEnable
HKEnumActions
HKEnumCommands
HKEnumRotateKeys
HKExecute
HKExecuteAction
HKGetActionParamFlags
HKGetActionProperties
HKGetActionPropertiesEx
HKGetProperty
HKRemove
HKSetProperty
HKStore
KSSetting
NVApplyDisplaySettingsDC
NVApplyModeInfo
NVAutoStart
NVCheckDisplayStateDC
NVDebugEnumPersistentSettings
NVDebugEnumTemporalWindows
NVDebugHeapStatus
NVDesktopBrowser
NVDesktopSystray
NVDesktopToolbar
NVDetectDesktopManagers
NVDisplayFromWindow
NVGetAppAndClassFromHwnd
NVGetDirectory
NVGetDisplayInfoDC
NVGetDisplayMonitorInfo
NVGetGPUInformation
NVGetHwndSpanningRect
NVGetIEVersion
NVGetMonGridName
NVGetMonitorName
NVGetMonitorNameEx
NVGetNT4MultiViewInfo
NVGetNvidiaHDC
NVGetNviewRootKey
NVGetTotalDisplayDevices
NVGetVersionDisableValue
NVIsHookLoaded
NVIsTaskbarControlAvailable
NVIsValidTaskbarStretchMode
NVLoadDatabase
NVLoadHook
NVLoadHookAsync
NVLoadString
NVMessageBox
NVMessageBoxEx
NVMoveTaskbarToMonitor
NVMultiviewStatus
NVNotificationBox
NVOpenNViewRegKey
NVQueryDesktopContextMenu
NVQuickWindows
NVRegisterNotificationWindow
NVRemoteSessionWatchdog
NVResetToSingleMon
NVRotateSystrayInit
NVRunControlPanel
NVStartupExecute
NVStoreModeInfoInRegistry
NVTaskSwitcher
NVUnicode
NVUnregisterNotificationWindow
NVWaitForNViewLoad
NVWaitForNViewUnload
NVZoomSetting
NVZoomWindowRun
NVZoomWindowState
NViewGestureEnum
NViewGestureSetting
NViewGetDDIStatus
NViewGlobalSetting
NViewGridSetting
NViewLumaSetting
NViewPhysicsSetting
NViewShowMenu
NViewSysmenuSetting
NViewThrowSetting
NView_ConvertNVWDDIStructures
NView_ExtEscape
NView_GetDriverStructSize
NView_NVCSConvert
NView_NVWDDICheckRevLevel
NvGetTaskbarMenuItems
NvHandleOwnerDrawMessages
NvQueryMenuInit
NvTaskBarMenuCmd
PMCreate
PMCreateEx
PMDelete
PMEnum
PMEnumEx
PMEnumSchemes
PMGetCurrentProfile
PMGetVer
PMLoad
PMLoadEx
PMLoadPresentation
PMLoadScheme
PMLock
PMSave
PMSaveEx
PMUpdateFlags
WMAssociate
WMClearSetting
WMEnumPersistantApps
WMExceptionSetting
WMGetActiveAppSetting
WMGetActiveSetting
WMGetSetting
WMGetSettingHWND
WMGetWindowCaps
WMSetSetting
WMSetSettingHWND
WMStoreSettings
nViewCmd
nViewDisableHook
nViewInitialize
nViewLoadHook
nViewLoadNoHook
nViewUnload

Sections

.text
Size: 816KB - Virtual size: 812KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 452KB - Virtual size: 449KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9722e9317b4e5cd624f8edab4de7a7a3

Headers

File Characteristics

Imports

shlwapi

advapi32

user32

gdi32

shell32

psapi

ole32

oleaut32

comctl32

winmm

kernel32

version

Exports

Exports

Sections

.text Size: 816KB - Virtual size: 812KB

.rdata Size: 84KB - Virtual size: 82KB

.data Size: 16KB - Virtual size: 51KB

.idata Size: 72KB - Virtual size: 70KB

.rsrc Size: 452KB - Virtual size: 449KB

.reloc Size: 52KB - Virtual size: 49KB

.text
Size: 816KB - Virtual size: 812KB

.rdata
Size: 84KB - Virtual size: 82KB

.data
Size: 16KB - Virtual size: 51KB

.idata
Size: 72KB - Virtual size: 70KB

.rsrc
Size: 452KB - Virtual size: 449KB

.reloc
Size: 52KB - Virtual size: 49KB