a25946233f83827b78cc7aea237e18094c991a8a8d1a6dec73ca1777b237ff65

Sharing

Copy URL Twitter E-mail

General

Target

a25946233f83827b78cc7aea237e18094c991a8a8d1a6dec73ca1777b237ff65
Size

429KB
MD5

53b7c5cf625374e37a5bff40bb0e0ea6
SHA1

0efffeb4f7b03af240cf9c4b97c2e950af7322b1
SHA256

a25946233f83827b78cc7aea237e18094c991a8a8d1a6dec73ca1777b237ff65
SHA512

283cc066f81ff774c888b7e31091e76d0b513928db540156e6fda755e5a0736e3df4af07385efbcdf7adbf41ca552458448a16357bdb8c8f0c3e6412d2588193
SSDEEP

6144:ELlnG+PV0/smvQlVaNAeJgb/64zpBghD2vzOph6jyxRUcscy7GJ4zc/fG:ELwR/suQlMUfzpBghD2vQA0Ocy04O

Score

N/A

Malware Config

Signatures

Files

a25946233f83827b78cc7aea237e18094c991a8a8d1a6dec73ca1777b237ff65
.dll windows x86

bdcf00d8600aa197695f4cec81789ba1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

EndDeferWindowPos
EndDialog
EnumWindows
FillRect
EnableWindow
GetClientRect
GetCursor
GetDC
GetDesktopWindow
EnableMenuItem
DrawTextW
DispatchMessageW
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DeferWindowPos
CreateWindowExW
CreatePopupMenu
CreateDialogParamW
CopyImage
CharUpperW
CharUpperBuffW
CharNextW
BeginDeferWindowPos
GetClassNameW
SetForegroundWindow
GetDlgItem
GetLastActivePopup
GetMessageW
GetMonitorInfoW
GetParent
GetPropW
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
IntersectRect
InvalidateRect
IsDlgButtonChecked
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromRect
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageW
PostMessageW
PostThreadMessageW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseDC
RemovePropW
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
AllowSetForegroundWindow
SetPropW
SetWinEventHook
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
UnhookWinEvent
UnregisterClassA
UnregisterDeviceNotification

ntdll

RtlUnwind
_vsnprintf
_vsnwprintf
_wcsicmp
bsearch
ceil
wcsrchr
wcsstr
wcstoul
towupper
_CIlog
iswspace
memcpy
memmove
memset
qsort

setupapi

SetupDiOpenDevRegKey
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInterfaceW
SetupDiCreateDeviceInfoList

rpcrt4

CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
CStdStubBuffer_Disconnect
IUnknown_AddRef_Proxy
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
IUnknown_QueryInterface_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleFree
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy

kernel32

FreeLibrary
FreeLibraryAndExitThread
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
FormatMessageW
FlushInstructionCache
FindResourceW
FindResourceExW
FindClose
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateMutexW
CreateFileMappingW
CreateEventW
CopyFileExW
CompareStringW
CompareFileTime
CloseHandle
FindNextFileW
CreateDirectoryW
lstrlenW
lstrcmpiW
WriteFile
WaitForMultipleObjects
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateProcess
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OutputDebugStringA
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GetVolumeInformationW
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetLocalTime
GetLastError
GetFileSize
GetFileAttributesW
GetEnvironmentVariableW
GetDriveTypeW

gdi32

Rectangle
RealizePalette
GetStockObject
GetObjectW
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHalftonePalette
CreateDIBSection
BitBlt
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetBrushOrgEx
CreateCompatibleDC
SetStretchBltMode
SetTextColor
StretchBlt

ole32

StringFromGUID2
ReleaseStgMedium
PropVariantClear
HWND_UserUnmarshal
HWND_UserSize
HWND_UserMarshal
HWND_UserFree
HICON_UserUnmarshal
HICON_UserSize
HICON_UserMarshal
HICON_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserSize
HBITMAP_UserMarshal
HBITMAP_UserFree
CreateBindCtx
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoAllowSetForegroundWindow
CLSIDFromString
PropVariantCopy

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

msvcrt

_lock
_initterm
_errno
_onexit
__dllonexit
_XcptFilter
_CxxThrowException
_CIexp
_unlock
calloc
free
malloc
_amsg_exit
realloc

oleaut32

BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserUnmarshal
LoadTypeLi
RegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
VarBstrCmp
VarUI4FromStr
VariantClear
VariantInit
VariantTimeToSystemTime

shlwapi

PathAddBackslashW
PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathIsDirectoryW
PathMatchSpecW
PathParseIconLocationW
PathRemoveExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
SHStrDupW
StrCSpnW
StrCmpNIW
StrCmpW
StrRetToBufW
StrStrW
PathAppendW

winmm

PlaySoundW

advapi32

TraceEvent
GetTraceEnableLevel
GetTraceLoggerHandle
InitializeAcl
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
UnregisterTraceGuids
GetTraceEnableFlags
RegisterTraceGuidsW
RegSetValueExW

shell32

ShellExecuteExW
SHGetSpecialFolderPathW
SHGetFileInfoW
SHGetDesktopFolder
SHChangeNotify
SHBrowseForFolderW
SHBindToParent
DragQueryFileW
CommandLineToArgvW
SHGetPathFromIDListW

Exports

Exports

HasAttr
IsSubclass
ReplaceErrors
_Concat
_setsig
set_IHDR
set_pCAL

Sections

.text
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdcf00d8600aa197695f4cec81789ba1

Headers

File Characteristics

Imports

user32

ntdll

setupapi

rpcrt4

kernel32

gdi32

ole32

version

msvcrt

oleaut32

shlwapi

winmm

advapi32

shell32

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 68KB

.rdata Size: 266KB - Virtual size: 265KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 69KB - Virtual size: 68KB

.rdata
Size: 266KB - Virtual size: 265KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 3KB - Virtual size: 3KB