51ddad9d5cacbbce4688074b6476e571db1b4159eb4710999a4af94475a133be

Sharing

Copy URL Twitter E-mail

General

Target

51ddad9d5cacbbce4688074b6476e571db1b4159eb4710999a4af94475a133be
Size

448KB
MD5

2bd1265ec7f7ace2aafc29356fc39780
SHA1

e0684988e0897fbdccb1388816b3b618397830de
SHA256

51ddad9d5cacbbce4688074b6476e571db1b4159eb4710999a4af94475a133be
SHA512

1ee738be8e360f8f43bdd3649d4ec5ed4b6c3c49ff30f3c02c4d73a8cb240abfd3c1beeaa49611e29b1fe083b27a912d95a3100f684fc185bb62cc9802d2521e
SSDEEP

12288:NjpTZytsHi4CIlwl6wPUi3uGRJn3IbrY:rCIlYjR

Score

N/A

Malware Config

Signatures

Files

51ddad9d5cacbbce4688074b6476e571db1b4159eb4710999a4af94475a133be
.dll windows x86

0e73cedb570a20902e804a2440868446

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindResourceA
SizeofResource
GetLastError
lstrlenA
lstrcpyA
GetModuleHandleA
GetProcAddress
GetVersionExA
RtlUnwind
TerminateProcess
MultiByteToWideChar
GetUserDefaultLangID
Sleep
SetStdHandle
WideCharToMultiByte
IsBadCodePtr
VirtualAlloc
lstrcpynA
CloseHandle
GetFileSize
GetFileTime
CreateFileA
GetFullPathNameA
FormatMessageA
LocalFree
OutputDebugStringA
GetFileAttributesA
lstrcmpiA
SetEndOfFile
WriteFile
SetFilePointer
FindClose
FindFirstFileA
FreeLibrary
LoadLibraryA
IsBadWritePtr
GetModuleFileNameA
FlushFileBuffers
SetUnhandledExceptionFilter
GetStringTypeW
GetACP
FindNextFileA
SetCurrentDirectoryA
GetCurrentDirectoryA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetCommandLineA
GetVersion
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
IsBadReadPtr
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
GetOEMCP
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetStringTypeA
GetCurrentProcess
HeapSize
ReadFile
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree

user32

EndDialog
wsprintfA
SetWindowPos
SetForegroundWindow
DialogBoxParamA
ShowWindow
GetDesktopWindow
IsWindow
MessageBoxA
CharNextA
UpdateWindow
GetParent
SendDlgItemMessageA
SetWindowTextA
DestroyWindow
CreateDialogParamA
CharUpperA
IsIconic
GetWindowRect
GetSystemMetrics
SendMessageA
GetDlgItemTextA
SetDlgItemTextA
GetWindowLongA
LoadStringA
CharLowerA
GetDlgItem
DestroyIcon
CheckDlgButton
IsDlgButtonChecked
SetWindowLongA

advapi32

RegCloseKey
RegEnumKeyA
RegCreateKeyA
RegSetValueExA
RegSetValueA
RegQueryValueA
RegOpenKeyA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA

shell32

ExtractIconExA
SHChangeNotify

comctl32

ImageList_Create
PropertySheetA
ImageList_ReplaceIcon

msi

ord73

shlwapi

SHDeleteKeyA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

comdlg32

GetFileTitleA

Exports

Exports

ShlInt_PerformAssociations
ShlInt_PerformAssociations_MSI
ShlInt_PerformAssociations_XML
ShlInt_PerformAssociations_XMLFile
ShlInt_RegisterAutoPlayHandler
ShlInt_UndoAllAssociations
ShlInt_UndoAllAssociations_MSI
ShlInt_UndoAllAssociations_XML
ShlInt_UndoAllAssociations_XMLFile
ShlInt_VerifyAssociations
ShlInt_VerifyAssociations_XML
ShlInt_VerifyAssociations_XMLFile

Sections

.text
Size: 140KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 232KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

0e73cedb570a20902e804a2440868446

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

comctl32

msi

shlwapi

version

comdlg32

Exports

Exports

Sections

.text Size: 140KB - Virtual size: 138KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 20KB - Virtual size: 23KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 20KB - Virtual size: 19KB

.rmnet Size: 232KB - Virtual size: 232KB

.text
Size: 140KB - Virtual size: 138KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 20KB - Virtual size: 23KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 20KB - Virtual size: 19KB

.rmnet
Size: 232KB - Virtual size: 232KB