d58d4b440684aa80ed2093d56ab7878d6f35c3a57de119e53186848f5eb72548

Sharing

Copy URL Twitter E-mail

General

Target

d58d4b440684aa80ed2093d56ab7878d6f35c3a57de119e53186848f5eb72548
Size

4.6MB
MD5

5cf7ac68f1bbf3d8430ad0f89cc5555f
SHA1

3ccb334da565c11407bbb43b596fab0ce69b0a22
SHA256

d58d4b440684aa80ed2093d56ab7878d6f35c3a57de119e53186848f5eb72548
SHA512

4719db6cbbe7e7af1160d987d9c833d45db22321cbb190654fc6a632b9914ea6e00ea8800ccb1c44afaf0f617149648e2dc360be8384f3090851504c55df4a12
SSDEEP

49152:aB+R2qZeJidB6f791YjDQ9KxXcFTAnKU2G:dwieX79fDmMG

Score

N/A

Malware Config

Signatures

Files

d58d4b440684aa80ed2093d56ab7878d6f35c3a57de119e53186848f5eb72548
.dll windows x86

8f9ab07c1e64326629edafe0486fcbe4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlCaptureStackBackTrace
IsBadReadPtr
GetModuleHandleA
LoadLibraryA
GetVersionExA
GetModuleHandleW
GetVersionExW
GetTickCount
MulDiv
IsBadWritePtr
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentProcess
HeapFree
HeapAlloc
HeapDestroy
HeapCreate
FlushInstructionCache
FindFirstFileW
GetFullPathNameW
EnumResourceNamesW
EnumResourceTypesW
FindResourceW
FindClose
SizeofResource
LoadResource
SetLastError
LockResource
FreeResource
GetFileAttributesW
MultiByteToWideChar
SetEndOfFile
CreateFileW
FlushFileBuffers
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
HeapQueryInformation
HeapSize
HeapReAlloc
GetLastError
DecodePointer
SetStdHandle
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileAttributesExW
MoveFileExW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStringTypeW
GetACP
SetConsoleCtrlHandler
WriteFile
ExitProcess
GetSystemInfo
HeapValidate
ResumeThread
ExitThread
ReadFile
WriteConsoleW
GetFileType
GetStdHandle
GetModuleHandleExW
GetModuleFileNameA
RtlUnwind
WaitForMultipleObjectsEx
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
SetProcessAffinityMask
VirtualFree
VirtualProtect
VirtualAlloc
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
EncodePointer
OutputDebugStringW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
WideCharToMultiByte
OutputDebugStringA
GetLocalTime
GetCurrentThreadId
FreeLibrary
GetCurrentProcessId
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
CreateDirectoryW
lstrcpyW
TerminateProcess
OpenProcess
Sleep
InterlockedIncrement
SetCurrentDirectoryW
GetModuleFileNameW
LoadLibraryW
CreateEventW
CloseHandle
WaitForSingleObject
SetEvent
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
VirtualQuery
GetProcessHeap
InitializeSListHead
RaiseException
GetStartupInfoW
IsDebuggerPresent
ResetEvent
IsProcessorFeaturePresent
lstrlenA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GlobalUnlock
GlobalLock
GlobalAlloc
LocalFree
FormatMessageW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
QueryPerformanceFrequency
CreateThread
GetProcAddress
GetTimeZoneInformation
InterlockedDecrement
QueryPerformanceCounter
TryEnterCriticalSection
GetNativeSystemInfo
GetExitCodeThread
GetCurrentThread
WaitForSingleObjectEx
DuplicateHandle

user32

UnregisterClassW
RegisterClassExW
CreateWindowExW
MessageBoxW
MonitorFromRect
GetWindowRect
GetDlgItem
GetActiveWindow
GetClientRect
MapWindowPoints
LoadCursorW
DefWindowProcW
DestroyCursor
LoadImageW
CreateIconFromResource
LoadBitmapW
ReleaseDC
GetDC
SetForegroundWindow
GetForegroundWindow
SetWindowPos
DestroyWindow
AttachThreadInput
GetWindowThreadProcessId
EnumWindows
SendMessageW
CallWindowProcW
IsWindowVisible
FindWindowW
ShowWindow
SetActiveWindow
GetWindowLongW
MsgWaitForMultipleObjects
SetMenuContextHelpId
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
DeleteMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
CheckMenuItem
DestroyMenu
CreatePopupMenu
IsMenu
UpdateLayeredWindow
MapVirtualKeyA
CharLowerBuffW
SystemParametersInfoA
DrawTextW
GetWindowPlacement
GetSystemMetrics
GetSysColor
EnableMenuItem
ClientToScreen
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadIconW
GetIconInfo
OffsetRect
CharNextW
GetDesktopWindow
DrawIconEx
IsWindowEnabled
EnableWindow
GetKeyState
GetFocus
PtInRect
EqualRect
SetRect
SetCursor
DestroyIcon
GetClassNameW
IsRectEmpty
UnionRect
IntersectRect
InflateRect
CopyRect
ScreenToClient
SetCaretPos
HideCaret
GetCaretBlinkTime
CreateCaret
GetCursorPos
SetWindowTextW
InvalidateRect
EndPaint
BeginPaint
UpdateWindow
KillTimer
SetTimer
ReleaseCapture
SetCapture
GetCapture
SetFocus
IsZoomed
IsIconic
SetLayeredWindowAttributes
AnimateWindow
PostQuitMessage
PostMessageW
TrackMouseEvent
GetMonitorInfoW
MonitorFromWindow
GetWindow
GetParent
SetWindowLongW
FillRect
InvertRect
IsWindow

gdi32

CreatePen
GetCurrentObject
Polyline
ExtCreatePen
SetViewportOrgEx
CreateCompatibleBitmap
StretchBlt
GetDCOrgEx
GetObjectW
SetBkMode
Rectangle
GetStockObject
GetClipBox
CreateSolidBrush
CreateFontIndirectW
SetGraphicsMode
SelectObject
DeleteDC
CreateCompatibleDC
CreateBitmap
CreateRoundRectRgn
EnumFontsW
DeleteObject
BitBlt
GetDeviceCaps
CreateDIBSection
Arc
CombineRgn
CreateEllipticRgnIndirect
GetViewportOrgEx
CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
Ellipse
ExcludeClipRect
GetClipRgn
GetRgnBox
GetTextColor
GetTextExtentPoint32W
IntersectClipRect
OffsetRgn
Pie
PtInRegion
RectInRegion
RestoreDC
RoundRect
SaveDC
ExtSelectClipRgn
SetRectRgn
SetROP2
SetTextColor
GetWorldTransform
SetWorldTransform

shell32

SHGetPathFromIDListW
ShellExecuteExW
SHBrowseForFolderW
ShellExecuteW

ole32

OleUninitialize
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CreateStreamOnHGlobal
OleInitialize
CreateBindCtx

oleaut32

GetErrorInfo
VariantInit
VariantClear
VariantChangeType
SysFreeString
CreateErrorInfo
SysAllocString
SetErrorInfo

shlwapi

StrToIntExW
PathFileExistsW
PathIsRootW
PathRemoveFileSpecW
PathRemoveBackslashW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

imm32

ImmGetContext
ImmReleaseContext
ImmAssociateContext

msimg32

AlphaBlend
GradientFill

gdiplus

GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipDrawImageRectI
GdipGraphicsClear
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipSaveImageToFile
GdipDisposeImage
GdipCloneImage

Exports

Exports

CheckAppStart
GetCreateIcon
GetInstallPath
SetInstallDate
SetIsInstalled
SetSetupInstallPath
SetupInit
SetupUninit
SetupWaitCompleted
SetupWaitUserAction
UninstallComplete
UpdateProgress

Sections

.textbss
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 721KB - Virtual size: 720KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 59KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 725KB - Virtual size: 724KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8f9ab07c1e64326629edafe0486fcbe4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

shlwapi

version

imm32

msimg32

gdiplus

Exports

Exports

Sections

.textbss Size: - Virtual size: 1.4MB

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 721KB - Virtual size: 720KB

.data Size: 59KB - Virtual size: 145KB

.idata Size: 13KB - Virtual size: 12KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 725KB - Virtual size: 724KB

.reloc Size: 130KB - Virtual size: 129KB

.textbss
Size: - Virtual size: 1.4MB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 721KB - Virtual size: 720KB

.data
Size: 59KB - Virtual size: 145KB

.idata
Size: 13KB - Virtual size: 12KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 725KB - Virtual size: 724KB

.reloc
Size: 130KB - Virtual size: 129KB