4c284c42999d24c055bb550a72f69e58d3238e73d08fec7d91c935685bddc22e

Sharing

Copy URL Twitter E-mail

General

Target

4c284c42999d24c055bb550a72f69e58d3238e73d08fec7d91c935685bddc22e
Size

176KB
MD5

23de0aa7a6c30208b4c80861bcb2fbe8
SHA1

4013f1935970c387b1a0d3d590ff08c2740c8924
SHA256

4c284c42999d24c055bb550a72f69e58d3238e73d08fec7d91c935685bddc22e
SHA512

fe136c0526cbae7cf71e1bc7c75fadf15688934249c922384d79a9f2a397a33fbf0320e6072f340346dbf7a18d4c6c57a0015e5971da630de924a4e542e423e7
SSDEEP

3072:YDyno3GBHW4OyWDq2sxVx1kp4j7jDcveuIXvVAbSqUX3Ed:aynMBSVG4j7jDLuIiA0d

Score

N/A

Malware Config

Signatures

Files

4c284c42999d24c055bb550a72f69e58d3238e73d08fec7d91c935685bddc22e
.dll windows x86

a98e826a2eaf31a3c09883e798447f36

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
GetProcAddress
GetModuleHandleW
CloseHandle
ReadFile
GetFileSize
InterlockedIncrement
InterlockedDecrement
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
GetLocalTime
lstrcmpiW
GlobalUnlock
GlobalLock
GlobalSize
SetUnhandledExceptionFilter
lstrlenW
lstrcatW
lstrcpyW
InitializeCriticalSection
DisableThreadLibraryCalls
lstrlenA
MultiByteToWideChar
WaitForSingleObject
CreateThread
CreateDirectoryW
GetPrivateProfileIntW
GetModuleFileNameW
WriteFile
SetFilePointer
FreeLibrary
LoadLibraryW
DeviceIoControl
GetSystemInfo
GetVersionExW
FindNextFileW
FindFirstFileW
lstrcpynW
IsBadWritePtr
SetEvent
IsBadReadPtr
lstrcpyA
lstrcpynA
WriteConsoleW
CreateFileA
Sleep
SetStdHandle
GetConsoleMode
GetConsoleCP
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
SetEndOfFile
GetStartupInfoW
GetFileType
SetHandleCount
GetStringTypeW
IsProcessorFeaturePresent
GetStdHandle
ExitProcess
HeapCreate
LCMapStringW
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetCommandLineA
DeleteFileA
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
RtlUnwind
GetProcessHeap
HeapSize
HeapReAlloc
FlushFileBuffers
GetTickCount
RaiseException
HeapDestroy
HeapAlloc
HeapFree

user32

GetDC
ReleaseDC
FindWindowW
PrintWindow
GetSystemMetrics
wsprintfA
GetWindowDC
GetWindowRect

gdi32

CreateCompatibleDC
GetDeviceCaps
DeleteObject
CreateCompatibleBitmap
SelectObject
BitBlt
DeleteDC

advapi32

RegOpenKeyExW
RegCloseKey

shell32

SHGetSpecialFolderPathW

ole32

GetHGlobalFromStream
CreateStreamOnHGlobal
CoTaskMemFree
CoUninitialize
CoCreateInstance
CoInitialize
CoCreateGuid

oleaut32

SafeArrayGetUBound
SafeArrayCreateVector
VariantInit
SysAllocStringLen
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetLBound
VariantClear
SysAllocString

shlwapi

PathFileExistsW
StrStrIW

urlmon

URLDownloadToFileW
FindMimeFromData

dbghelp

MiniDumpWriteDump

gdiplus

GdipCreateBitmapFromHBITMAP
GdipCloneImage
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromStream
GdipSaveImageToStream
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusStartup

iphlpapi

GetAdaptersInfo

Exports

Exports

uu_AsyncRecognizeByCodeTypeAndPathA
uu_CloseAsyncRecognizeHandle
uu_GetAsyncRecognizeResultA
uu_SysCallOneParam
uu_UploadFileA
uu_UploadFileW
uu_UploadScreen
uu_easyRecognizeBytesA
uu_easyRecognizeBytesW
uu_easyRecognizeFileA
uu_easyRecognizeFileW
uu_easyRecognizeScreenA
uu_easyRecognizeScreenW
uu_easyRecognizeUrlA
uu_easyRecognizeUrlW
uu_easyRecognizeWndByHWndAndPosA
uu_easyRecognizeWndByHWndAndPosW
uu_easyRecognizeWndByTitleAndPosA
uu_easyRecognizeWndByTitleAndPosW
uu_getResultA
uu_getResultW
uu_getScoreA
uu_getScoreW
uu_loginA
uu_loginW
uu_payA
uu_payW
uu_recognizeByCodeTypeAndBytesA
uu_recognizeByCodeTypeAndBytesW
uu_recognizeByCodeTypeAndPathA
uu_recognizeByCodeTypeAndPathW
uu_recognizeByCodeTypeAndUrlA
uu_recognizeByCodeTypeAndUrlW
uu_recognizeScreenByCodeTypeA
uu_recognizeScreenByCodeTypeW
uu_recognizeWndByHWndAndPosA
uu_recognizeWndByHWndAndPosW
uu_recognizeWndByTitleAndPosA
uu_recognizeWndByTitleAndPosW
uu_reguserA
uu_reguserW
uu_reportError
uu_setSoftInfoA
uu_setSoftInfoW
uu_setTimeOut

Sections

.text
Size: 130KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a98e826a2eaf31a3c09883e798447f36

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

urlmon

dbghelp

gdiplus

iphlpapi

Exports

Exports

Sections

.text Size: 130KB - Virtual size: 129KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 10KB - Virtual size: 9KB

.text
Size: 130KB - Virtual size: 129KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 10KB - Virtual size: 9KB