e55d1c9ac48dd269a1d6c3037bbcc5613f1f2207c1ea55cabb036b130e2940ac

Sharing

Copy URL Twitter E-mail

General

Target

e55d1c9ac48dd269a1d6c3037bbcc5613f1f2207c1ea55cabb036b130e2940ac
Size

150KB
MD5

6fa7f3931500bbfa07176397ac0d15ef
SHA1

018096196db342c96d4d56c068ecdf37d0743241
SHA256

e55d1c9ac48dd269a1d6c3037bbcc5613f1f2207c1ea55cabb036b130e2940ac
SHA512

487183b496d46187675a07769fdcd05e2c2ba740aab36906c89cf1d603fe34dd8d11356dbd9b23f03f512012941ef9e8b02d90643a4fd98528c98f083997eb16
SSDEEP

3072:liPC6BdjTJvBm8IUNzu+M14k1MtcdWASLCns3CaZcxf:liPC6Bflnzu+81M0gC8C

Score

N/A

Malware Config

Signatures

Files

e55d1c9ac48dd269a1d6c3037bbcc5613f1f2207c1ea55cabb036b130e2940ac
.dll windows x86

1260f10b6ced27dfa04acfd93aa15389

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalLock
GlobalHandle
GlobalFree
GetTempFileNameA
SetLastError
GetFullPathNameA
GetCurrentDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetTempPathA
EnumSystemLocalesA
GetLocaleInfoA
MapViewOfFile
CreateFileMappingA
GetTickCount
LocalReAlloc
SearchPathA
GetSystemDirectoryA
GetVersionExA
RtlUnwind
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
SetCurrentDirectoryA
SetEnvironmentVariableA
GetCommandLineA
GetModuleHandleA
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
HeapFree
SetUnhandledExceptionFilter
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiA
FreeLibrary
HeapSize
HeapAlloc
HeapCreate
HeapDestroy
SetHandleCount
GetFileType
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteFile
IsBadReadPtr
IsBadWritePtr
IsBadCodePtr
GetStringTypeA
_lread
GetLocaleInfoW
FlushFileBuffers
SetStdHandle
SetFilePointer
LocalFree
LocalAlloc
IsDBCSLeadByte
GetUserDefaultLCID
_lopen
GetFileSize
_lwrite
_lcreat
GetLastError
_lclose
_llseek
GetWindowsDirectoryA
DeleteFileA
LCMapStringA
VirtualAlloc
VirtualFree
CloseHandle
ExitThread
WaitForSingleObject
Sleep
CreateSemaphoreA
CreateThread
ReleaseSemaphore
lstrlenA
MulDiv
LoadLibraryA
GetProcAddress
FormatMessageA
GetVolumeInformationA
OpenFile
FatalAppExitA
GetVersion
CompareStringA
LCMapStringW
HeapReAlloc
LeaveCriticalSection
GetStringTypeW

user32

GetClassNameA
GetDC
ReleaseDC
FrameRect
GetSystemMetrics
DestroyWindow
CreateWindowExA
SetRect
CallWindowProcA
GetParent
FindWindowA
IsWindowVisible
InvalidateRect
IsWindow
SetCursor
LoadStringA
MessageBoxA
CharLowerA
CharNextA
ScreenToClient
CharPrevA
SetWindowPos
ShowWindow
SendDlgItemMessageA
wsprintfA
SetFocus
GetDlgItem
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetWindowLongA
PostMessageA
EndDialog
SetWindowLongA
WinHelpA
GetDesktopWindow
GetWindowRect
SystemParametersInfoA
MoveWindow
DialogBoxParamA
SendMessageA
EnumChildWindows
BeginPaint
GetSysColor
GetClientRect
FillRect
EndPaint
CharUpperA
CreateDialogParamA
DefWindowProcA
LoadCursorA
RegisterClassA

gdi32

DeleteObject
GetObjectA
CreateFontIndirectA
GetDeviceCaps
SetMapMode
SelectObject
CreateCompatibleDC
CreateDCA
CreateICA
DeleteDC
SelectPalette
RealizePalette
CreatePen
BitBlt
CreateCompatibleBitmap
CreatePalette
GetDIBits
GetTextExtentPointA
StretchDIBits
CreateDIBSection
GetPaletteEntries
CreateHalftonePalette
GetTextFaceA
GetTextMetricsA
CreateSolidBrush

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegOpenKeyA
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

CreatePropertySheetPageA
PropertySheetA

Exports

Exports

BrowseButtonsState
CheckMacroSyntax
ConvertMacroError
ExpandMacro
FreeFilterDIB
GetLastMacroError
GetMacroExpansion
HashFromSz
HwDllMsg
InitializeMacroChecking
IsValidContextSz
LoadFilterImage

Sections

.text
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1260f10b6ced27dfa04acfd93aa15389

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comctl32

Exports

Exports

Sections

.text Size: 102KB - Virtual size: 102KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 17KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 102KB - Virtual size: 102KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 17KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 9KB - Virtual size: 9KB