745deddee8f07bd0af23864999ff5b774b40f8499a0a0f47077ffadf44c8874d

Sharing

Copy URL Twitter E-mail

General

Target

745deddee8f07bd0af23864999ff5b774b40f8499a0a0f47077ffadf44c8874d
Size

84KB
MD5

b7e12dc721cbdf0cabb25cbd718eb69c
SHA1

0bf44cda4f116ac0ac8d0c93db4d800418b32ad3
SHA256

745deddee8f07bd0af23864999ff5b774b40f8499a0a0f47077ffadf44c8874d
SHA512

d8fe678a6cc72c3f78cbc2dcd9777fa1cb2edf7e87a887c09aab0fcd3c8c0e125a7aedd0510da8611c6d9a4dd82c5916e8a6e6b74cd991f6c06d3bbcf878adc0
SSDEEP

1536:EuJxOScJe32rA+vptr0l1wQSGPlLYyjp7cxQGHeGz/90t:tave32rA+htr0kzWp7cxDeGz/ut

Score

N/A

Malware Config

Signatures

Files

745deddee8f07bd0af23864999ff5b774b40f8499a0a0f47077ffadf44c8874d
.dll windows x86

a6595059049116d341a07db79e801ef9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
HeapReAlloc
WriteFileEx
OpenEventA
ExitProcess
DosDateTimeToFileTime
GetSystemWow64DirectoryW
FindFirstVolumeMountPointW
GetDateFormatW
FindResourceW
LocalFileTimeToFileTime
GetSystemTimeAdjustment
FindNextVolumeMountPointW
LCMapStringW
LocalHandle
SetFileAttributesA
GetConsoleOutputCP
GetTapeParameters
SetFilePointerEx
QueryPerformanceFrequency
GetShortPathNameW
WaitNamedPipeA
SetEnvironmentVariableW
GetNumberFormatW
TerminateProcess
GetSystemPowerStatus
UnlockFile
GetTempFileNameW
ClearCommError
GetComputerNameW
SetInformationJobObject
GetOverlappedResult
DuplicateHandle
SetStdHandle
GetLargestConsoleWindowSize
OpenSemaphoreA
SetCurrentDirectoryA
SetConsoleTitleA
FindAtomW
QueueUserAPC
WriteConsoleA
GetFileAttributesExA
HeapWalk
GetCommState
OpenFileMappingA
GetCommTimeouts
VirtualQueryEx
GetProcessAffinityMask
InterlockedExchange
CreateFileMappingA
GetModuleFileNameA
CloseHandle
LocalFree
CreateFileA
GetProcessHeap
GetSystemTimeAsFileTime
CreateMutexA
GetProcAddress
GetComputerNameA
GetCommandLineA
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
lstrlenA
WriteFile
MapViewOfFile
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
CreateDirectoryA
SetEndOfFile

ole32

CoGetClassObject
CoGetObjectContext
StgOpenStorageEx
CoTaskMemRealloc
CoAddRefServerProcess
CoCreateInstanceEx
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

user32

ChildWindowFromPointEx
InvalidateRect
ReuseDDElParam
ChildWindowFromPoint
FindWindowW
SetDlgItemInt
MapDialogRect
PostThreadMessageA
SendMessageTimeoutA
SetWindowLongA
LoadIconW
UnregisterClassW
SetPropA
IsMenu
DefDlgProcA
GetWindow
DrawAnimatedRects
WaitForInputIdle
SetSysColors
BroadcastSystemMessageW
CharLowerA
MessageBoxExA
GetDlgItemInt
FreeDDElParam
TranslateAcceleratorW
CloseDesktop
EnumThreadWindows
CheckDlgButton
OpenInputDesktop
CreateMenu
GetUserObjectInformationA
GetWindowTextLengthW
InSendMessage
CharToOemA
DestroyCursor
SetProcessWindowStation
GetClassNameA
SetWindowsHookExA
TranslateMessage
GetParent
CreateWindowExA
GetWindowThreadProcessId
PostQuitMessage
DispatchMessageA
RegisterWindowMessageA
RegisterClassExA

oleaut32

SysAllocStringLen

shlwapi

PathFindExtensionA
PathCommonPrefixW
PathFileExistsW
PathParseIconLocationW
PathRemoveBackslashW
PathFindNextComponentW
SHDeleteKeyW
StrTrimW
PathAppendW
UrlUnescapeW
UrlIsW
StrChrIW

shell32

DragQueryFileW
ExtractIconW
SHSetLocalizedName
ExtractIconExA

gdi32

ScaleViewportExtEx
SetArcDirection
SetDIBits
CopyEnhMetaFileA
GetTextMetricsA
SetICMMode
BeginPath
DeleteObject
PaintRgn
InvertRgn
GetRandomRgn
CreateRectRgnIndirect
OffsetWindowOrgEx
SetSystemPaletteUse
SetTextJustification
DeleteEnhMetaFile
PtInRegion
GetPixelFormat
SetWindowExtEx
GetTextExtentPointW
GetCharABCWidthsW
StartPage
Chord
ModifyWorldTransform
GetTextFaceA
CopyMetaFileW
UnrealizeObject
SelectObject
AbortDoc
EnumFontFamiliesExW
AnimatePalette

Exports

Exports

AgereMapNetM

Sections

.text
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6595059049116d341a07db79e801ef9

Headers

File Characteristics

Imports

kernel32

ole32

user32

oleaut32

shlwapi

shell32

gdi32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 57KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 60KB - Virtual size: 57KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 2KB