09ca11a898019146fe1f98056f6bd3e2bfd93ee1473e97684f19f711baf00a89

Sharing

Copy URL Twitter E-mail

General

Target

09ca11a898019146fe1f98056f6bd3e2bfd93ee1473e97684f19f711baf00a89
Size

109KB
MD5

3f1b607a072370e9199eafd18f02a605
SHA1

1b8f5654a7c0ab4b304cd8c020e1097774036711
SHA256

09ca11a898019146fe1f98056f6bd3e2bfd93ee1473e97684f19f711baf00a89
SHA512

6c4f2d36f83c52efb7321ae15db475c6b746e350f000cee46ca2a64158db49f36786cbb22c98df65fb1e234c26a83fabf699cf938bfee76ae6aa0ea9003bbf09
SSDEEP

1536:9o86+DMl2o5jdRxONy09MMP0iqdgwUkTjkMVhRWHM9rQtg7cu:9BMIo/X6x9Mqq+wUyjkMVhQJtgF

Score

N/A

Malware Config

Signatures

Files

09ca11a898019146fe1f98056f6bd3e2bfd93ee1473e97684f19f711baf00a89
.dll windows x86

16bd4eb46f672b6fd24ae642fd21fbd1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetModuleFileNameA
IsBadReadPtr
RtlUnwind
HeapValidate
SetStdHandle
SetFilePointer
LCMapStringW
LCMapStringA
IsBadCodePtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
MultiByteToWideChar
FreeEnvironmentStringsA
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetFileType
SetHandleCount
VirtualAlloc
GetCurrentProcess
TerminateProcess
ExitProcess
VirtualFree
HeapCreate
HeapDestroy
MulDiv
GetProcAddress
GetCommandLineA
HeapFree
GetLastError
LoadLibraryA
OutputDebugStringA
InterlockedIncrement
WriteFile
GetStdHandle
CloseHandle
FlushFileBuffers
IsBadWritePtr
HeapAlloc
InterlockedDecrement
GetVersion
RaiseException
DebugBreak

user32

SetRect
SetFocus
PtInRect
ReleaseDC
GetDC
CopyRect
UpdateWindow
SetWindowPos
ShowWindow
IsWindow
SendMessageA
CreateWindowExA
DestroyWindow
GetWindowTextA
GetWindowTextLengthA
SetTimer
LoadCursorA
SetWindowLongA
RemovePropA
KillTimer
DestroyCursor
InvalidateRgn
GetClientRect
GetPropA
DefWindowProcA
SetCursor
SetCapture
GetUpdateRgn
CallWindowProcA
CopyImage
SetPropA
SetWindowTextA
GetCapture
ReleaseCapture

gdi32

SelectClipRgn
DeleteObject
SaveDC
Arc
GetStockObject
PolyBezier
CreateRectRgn
CreatePen
CreateFontIndirectA
GetTextMetricsA
BeginPath
EndPath
PathToRegion
GetRgnBox
Ellipse
Rectangle
SelectObject
SetBkMode
SetROP2
SelectPalette
RealizePalette
MoveToEx
LineTo
RestoreDC

Exports

Exports

DllMain
L_ContainerCreate
L_ContainerEditObject
L_ContainerEnableUpdate
L_ContainerFree
L_ContainerGetCallback
L_ContainerGetMetrics
L_ContainerGetObjectCursor
L_ContainerGetObjectType
L_ContainerGetOffset
L_ContainerGetOwner
L_ContainerGetScalar
L_ContainerInit
L_ContainerIsEnabled
L_ContainerIsOwnerDraw
L_ContainerIsValid
L_ContainerReset
L_ContainerSetAutomationCallback
L_ContainerSetCallback
L_ContainerSetEnabled
L_ContainerSetMetrics
L_ContainerSetObjectCursor
L_ContainerSetObjectType
L_ContainerSetOffset
L_ContainerSetOwner
L_ContainerSetOwnerDraw
L_ContainerSetScalar
L_ContainerToScreen
L_ContainerUpdate
L_ScreenToContainer

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16bd4eb46f672b6fd24ae642fd21fbd1

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 81KB - Virtual size: 81KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 11KB - Virtual size: 17KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 81KB - Virtual size: 81KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 11KB - Virtual size: 17KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 4KB - Virtual size: 4KB