69749aab7e8c21ac687eadb1a9e1227f55accd371aa55ce842a678233fd0d323

Sharing

Copy URL

Twitter E-mail

General

Target

69749aab7e8c21ac687eadb1a9e1227f55accd371aa55ce842a678233fd0d323
Size

169KB
MD5

14b6cc90213457f1d247b8d06b16356d
SHA1

fc01769d8df09454a4fc69eb86a918cf76766d5c
SHA256

69749aab7e8c21ac687eadb1a9e1227f55accd371aa55ce842a678233fd0d323
SHA512

c00a1b6433d4fb1a1ab3832f14082ac2da922297c5a7e994b5bcbf49e300a67817722b066158d0d31d7bf65b24b6caacfcf28bb0d6a7c8c766eea5e1ad400021
SSDEEP

3072:YKFvCQCTF1JO/xccavJKKrVwunr+7kURkexZ2J9i31yQ8wgp319EGTFVIIRq:HCT1I/xqSxYM3i38MD1

Score

N/A

Malware Config

Signatures

Files

69749aab7e8c21ac687eadb1a9e1227f55accd371aa55ce842a678233fd0d323
.dll windows x86

95103a870d504aa9b3cda12a9379ad6d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupScanFileQueueW
SetupOpenFileQueue
SetupGetStringFieldW
CM_Disconnect_Machine
SetupGetInfSections
SetupGetFileQueueCount
SetupFindFirstLineW
SetupDiSetSelectedDriverW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiGetINFClassW
SetupDiGetDriverInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInfoListDetailW
SetupDiGetClassDevsExW
SetupDiGetClassDescriptionExW
SetupDiGetClassBitmapIndex
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidExW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDiBuildClassInfoList
SetupCopyOEMInfW
SetupCloseInfFile
SetupCloseFileQueue
CM_Run_Detection_Ex
CM_Reenumerate_DevNode_Ex
CM_Locate_DevNode_ExW
CM_Is_Version_Available
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Res_Des_Data_Ex
CM_Get_Next_Res_Des_Ex
CM_Get_First_Log_Conf_Ex
CM_Get_Device_ID_ExW
CM_Get_DevNode_Status_Ex
CM_Free_Res_Des_Handle
CM_Free_Log_Conf_Handle
CM_Dup_Range_List

ole32

CLSIDFromString

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueW
OpenSCManagerW
OpenServiceW
RegCloseKey
RegDeleteValueW
RegQueryValueExW
RegSetValueExW
CloseServiceHandle

ntdll

iswalpha
memset
towlower
towupper
wcschr
_wcsicmp
RtlUnwind

msvcrt

fputs
exit
_unlink
_safe_fprem
_initterm
_exit
_controlfp
_cexit
_adjust_fdiv
__wgetmainargs
__setusermatherr
__set_app_type
__p__winmajor
__p__fmode
__p__commode
__lc_handle
_XcptFilter
fputws

kernel32

GetLastError
GetModuleHandleA
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
InterlockedCompareExchange
InterlockedExchange
LoadLibraryW
LocalFree
GetFullPathNameW
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
lstrlenW
FindClose
FileTimeToSystemTime
GetFileAttributesW
GetDateFormatW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
FormatMessageW
FindNextFileW
QueryPerformanceCounter
CloseHandle
ExitProcess
FindFirstFileW

user32

CharPrevW
CharNextW
LoadStringW

shell32

SHGetDesktopFolder
ShellHookProc
SHGetFolderPathW
DragQueryFileAorW

Exports

Exports

GetDllMajorVersion
HrDecodeObject
HrStreamSeekSet
PSTFreeHandle
PSTGetData
UpdateRebarBandColors

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

95103a870d504aa9b3cda12a9379ad6d

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

ole32

advapi32

ntdll

msvcrt

kernel32

user32

shell32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 91KB - Virtual size: 90KB

.data Size: 9KB - Virtual size: 11KB

.rsrc Size: 12KB - Virtual size: 12KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 91KB - Virtual size: 90KB

.data
Size: 9KB - Virtual size: 11KB

.rsrc
Size: 12KB - Virtual size: 12KB