aaaabe293fd0336c1cfae5d192e7ae31470800858090f692fc760362a03642dd

Sharing

Copy URL Twitter E-mail

General

Target

aaaabe293fd0336c1cfae5d192e7ae31470800858090f692fc760362a03642dd
Size

96KB
MD5

962b4c7038604ef1f346578ceff99c44
SHA1

d2922a61914f6e8249ba8fadef14d298255f0546
SHA256

aaaabe293fd0336c1cfae5d192e7ae31470800858090f692fc760362a03642dd
SHA512

83b8f6ee42c0e1e887dbb5f1c969c82740593582e1c30ed6b79dffa2ac01c8f7dd3d483929dfc00d15654744b661ababc01eea77a298e4f342929197fe60f481
SSDEEP

1536:pGekprYyxwb3HpgWTzXnKmZSOleiN4TYxRcWOT57YQoJWCG:keQxwLpgSX6OlKFYQo4CG

Score

N/A

Malware Config

Signatures

Files

aaaabe293fd0336c1cfae5d192e7ae31470800858090f692fc760362a03642dd
.dll windows x86

8c07c4bf7172f3ce15561211ff191f81

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
GetTempPathA
lstrcmpiA
lstrcpynA
lstrlenA
SetFilePointer
ReadFile
GetFileSize
GlobalFree
GlobalAlloc
MultiByteToWideChar
CloseHandle
LoadLibraryA
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
lstrcpyA
IsBadWritePtr
SetEndOfFile
GetLastError
GetModuleFileNameA
LoadLibraryW
GetProcAddress
FreeLibrary
GetVersionExA
GetUserDefaultLangID
lstrlenW
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
ExitProcess
WideCharToMultiByte
TerminateProcess
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
WriteFile
LeaveCriticalSection
VirtualAlloc
GetFileType
SetHandleCount
GetStdHandle
GetStartupInfoA

user32

DialogBoxParamA
GetSystemMetrics
MessageBoxA
EndDialog
SetCursor
LoadCursorA
ShowWindow
CallWindowProcA
SetWindowTextA
GetClassNameA
SetWindowLongA
wsprintfA
MoveWindow
PtInRect
SendDlgItemMessageA
SetWindowPos
GetClientRect
GetDlgItem
GetWindowRect
SendMessageA
GetWindowLongA
GetCursorPos

gdi32

CreateFontIndirectA
SelectObject
GetStockObject
SetTextColor
SetBkMode

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc

oleaut32

SysFreeString
SysAllocString

Exports

Exports

Dll_SmartRead_Close
Dll_SmartRead_Initial
Dll_SmartRead_OpenXSRFile
Dll_SmartRead_PauseXSRFile
Dll_SmartRead_ReadXSRFile
Dll_SmartRead_SetDialog
Dll_SmartRead_Speak
Dll_SmartRead_SpeakToWave
Dll_SmartRead_Stop
Dll_SmartRead_StopXSRFile
Dll_SmartRead_Version
SmartRead_Close
SmartRead_Initial
SmartRead_OpenXSRFile
SmartRead_PauseXSRFile
SmartRead_ReadXSRFile
SmartRead_SetDialog
SmartRead_Speak
SmartRead_SpeakToWave
SmartRead_Stop
SmartRead_StopXSRFile
SmartRead_Version

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8c07c4bf7172f3ce15561211ff191f81

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 8KB - Virtual size: 5KB