3f17ddee2b4dcd19eaf2e43e4d6ab6b4dd156d58d77ffcc1371372b79c4a0dc5

Sharing

Copy URL

Twitter E-mail

General

Target

3f17ddee2b4dcd19eaf2e43e4d6ab6b4dd156d58d77ffcc1371372b79c4a0dc5
Size

238KB
MD5

3031ce11931708ff22f49570bbd2f990
SHA1

acb20899b2c16cddd22b8ef6b5ab556915a9dac1
SHA256

3f17ddee2b4dcd19eaf2e43e4d6ab6b4dd156d58d77ffcc1371372b79c4a0dc5
SHA512

bce8a9ceefc55a614566058f45be0f4c0c4cf8b162b700e1607b4b7aeab5d72c731b6fe670d2d1381520cb1e3f7e97f17620bb96e9246f59b7eeb0aa59cf5f01
SSDEEP

6144:HbtS3PGvBqR2l6BTN9JBpNlEHUkY66Azc:HZuPEB0a6BtBpEY6Nzc

Score

N/A

Malware Config

Signatures

Files

3f17ddee2b4dcd19eaf2e43e4d6ab6b4dd156d58d77ffcc1371372b79c4a0dc5
.dll windows x86

e32e125d57a484b54aa6d2d3aed847ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsA
StrCmpIW
PathFileExistsW

kernel32

CreateFileW
CreateFileMappingW
WriteFile
MapViewOfFile
CloseHandle
GlobalFree
SetFilePointer
SetEndOfFile
GetFileSize
SetLastError
lstrcmpiA
GetLastError
WideCharToMultiByte
MultiByteToWideChar
UnmapViewOfFile
SetUnhandledExceptionFilter
CreateFileA
LoadLibraryA
GetLocaleInfoW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetModuleFileNameA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
ExitProcess
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleHandleA
IsDebuggerPresent
GetCPInfo
HeapFree
HeapAlloc
GetCurrentThreadId
GetCommandLineA
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeW
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetStringTypeA
HeapCreate
HeapDestroy
VirtualFree
VirtualAlloc
HeapReAlloc

advapi32

RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA

shell32

ShellExecuteW

ole32

CLSIDFromProgID
CoCreateInstance
CoUninitialize
CoInitialize

oleaut32

SysAllocString
VariantInit
VariantClear

winhttp

WinHttpSetOption
WinHttpOpenRequest
WinHttpConnect
WinHttpAddRequestHeaders
WinHttpSetTimeouts
WinHttpOpen
WinHttpCloseHandle
WinHttpSendRequest
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpWriteData
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpReadData
WinHttpCrackUrl

Exports

Exports

AppendCustomizeInfoA
AppendCustomizeInfoW
CustomizeNameEnumeratorA
CustomizeNameEnumeratorW
CustomizeUpdateProcessA
CustomizeUpdateProcessW
DecryptCustomizeXMLFileA
DecryptCustomizeXMLFileW
DecryptString
EncryptCustomizeXMLFileA
EncryptCustomizeXMLFileW
EncryptString
EnumerateCustomizeNameA
EnumerateCustomizeNameW
InnoInstallProcessAllA
InnoUnInstallProcessAllA
IsCustomizeLangInfoExistsA
IsCustomizeLangInfoExistsW
LoadCustomizeXMLFileA
LoadCustomizeXMLFileW
PopFileFromReserved
PopFileFromReservedW
ProcessDRCustomizeA
ProcessDRCustomizeW
PushFileToReserved
PushFileToReservedW
ReadCustomizeBoolInfoA
ReadCustomizeBoolInfoW
ReadCustomizeInfoA
ReadCustomizeInfoW
ReleaseCustomizeNameEnumerator
RemoveCustomizeInfoA
RemoveCustomizeInfoW
SaveCustomizeXMLFileA
SaveCustomizeXMLFileW
WSOpenURLA
WSOpenURLW
WriteCustomizeInfoA
WriteCustomizeInfoW

Sections

.text
Size: 139KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e32e125d57a484b54aa6d2d3aed847ac

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

advapi32

shell32

ole32

oleaut32

winhttp

Exports

Exports

Sections

.text Size: 139KB - Virtual size: 139KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 10KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 139KB - Virtual size: 139KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 10KB

.rmnet
Size: 56KB - Virtual size: 60KB