386a3f57929c6fbc96b153d328ca797879dea078f8a5b4603d7b33c0bc81674a

Sharing

Copy URL Twitter E-mail

General

Target

386a3f57929c6fbc96b153d328ca797879dea078f8a5b4603d7b33c0bc81674a
Size

332KB
MD5

089ec6d14227e864dbbe5215fad28d10
SHA1

555c9e9a5905a95e408c5fd01d384198b6d48a70
SHA256

386a3f57929c6fbc96b153d328ca797879dea078f8a5b4603d7b33c0bc81674a
SHA512

25c13e570f4d24fd13576e0f94a11cca808637a24d24a7a67381793b1479125fe5c64e848e3db61633466d395009e73b29c905c9ae17e1fc95de309d263e0886
SSDEEP

6144:Ob1jAyuG5tGIZITzsAxiB+rTfONk41FBZXMxzKn98xZn1cuZ:OpjAyuGnliTzX++uNpFwxttD

Score

N/A

Malware Config

Signatures

Files

386a3f57929c6fbc96b153d328ca797879dea078f8a5b4603d7b33c0bc81674a
.dll windows x86

a01f1bc1e214cf2448c74fd21b2aa97b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
CompareStringA
CompareStringW
FlushFileBuffers
GetVersionExA
GetProcAddress
LoadLibraryA
FreeLibrary
SetEnvironmentVariableA
CreateFileA
ReadFile
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualProtect
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
GetCurrentThread
WaitForSingleObject
OpenEventA
Sleep
RtlUnwind
GetCommandLineA
GetLastError
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
OutputDebugStringA
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
RaiseException
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSection
GetModuleHandleW
SetFilePointer
GetConsoleCP
GetConsoleMode
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
GetCurrentProcess

user32

ChangeDisplaySettingsExA
EnumDisplaySettingsA
ChangeDisplaySettingsA
MessageBoxA
RegisterDeviceNotificationA
UnregisterDeviceNotification
EnumDisplaySettingsExA
ExitWindowsEx
EnumDisplayDevicesA
wsprintfA

gdi32

CreateDCA
GetDeviceCaps
DeleteDC

advapi32

RegDeleteValueA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegEnumKeyExA
RegDeleteKeyA
OpenThreadToken
RevertToSelf
SetThreadToken
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

setupapi

SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdA
CM_Get_Parent
CM_Get_DevNode_Registry_PropertyA
SetupDiSetClassInstallParamsA
SetupDiCallClassInstaller
CM_Reenumerate_DevNode
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
CM_Get_Device_ID_ExA
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList

Exports

Exports

?oem_SetConfiguration@@YGKKHPAK@Z
GetCRTCCapabilities
GetCRTCConfiguration
GetConfiguration
GetDisplayDeviceCapability
GetDisplayDeviceMode
GetDisplayDeviceSwitchCapability
GetDisplayDriverName
GetExtendedDesktopStatus
GetLCDI2CBusData
GetLCDRefreshRate
GetLCDRefreshRateCapability
GetPowerState
GetScreenExpansionStatus
GetStaticPowerState
GetTVStandard
IsExternalDisplayConnected
PowerXpress_GetActiveGPU
PowerXpress_GetAutoSwitchConfig
PowerXpress_SetActiveGPU
PowerXpress_SetAutoSwitchConfig
SetCRTCConfiguration
SetConfiguration
SetDisplayDeviceMode
SetExtendedDesktopStatus
SetLCDI2CBusData
SetLCDRefreshRate
SetPowerState
SetScreenExpansionStatus
SetStaticPowerState
SetTVStandard

Sections

.text
Size: 224KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a01f1bc1e214cf2448c74fd21b2aa97b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

setupapi

Exports

Exports

Sections

.text Size: 224KB - Virtual size: 220KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 8KB - Virtual size: 15KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 224KB - Virtual size: 220KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 8KB - Virtual size: 15KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB

.rmnet
Size: 60KB - Virtual size: 60KB