General

Malware Config

Signatures

Files

• 6befab600e8a7e07b5fe9fa8124c82e6a9e87c22e30a7a283cabb22b0a937b00

  .dll windows x86

  980f2a9caca9199bf641af8afeb172ac

  
  

  Headers

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LINE_NUMS_STRIPPED

  IMAGE_FILE_LOCAL_SYMS_STRIPPED

  IMAGE_FILE_32BIT_MACHINE

  Imports

  advapi32

  RegCreateKeyA

  RegSetValueExA

  RegOpenKeyExA

  GetSidLengthRequired

  GetSidSubAuthority

  GetLengthSid

  InitializeAcl

  AddAccessAllowedAce

  InitializeSecurityDescriptor

  SetSecurityDescriptorDacl

  RegQueryValueExA

  RegEnumKeyA

  RegCloseKey

  RegOpenKeyA

  InitializeSid

  dciman32

  DCICreatePrimary

  DCIDestroy

  DCICloseProvider

  DCIEndAccess

  DCIOpenProvider

  DCIBeginAccess

  gdi32

  SetBkColor

  ExtTextOutA

  PatBlt

  GdiEntry10

  GdiEntry2

  GdiEntry4

  GetObjectType

  AnimatePalette

  SetPaletteEntries

  SetSystemPaletteUse

  CreateCompatibleBitmap

  GetDIBits

  CreateDIBSection

  StretchDIBits

  SelectObject

  GetSystemPaletteEntries

  SetDIBColorTable

  BitBlt

  GdiEntry7

  StretchBlt

  GdiEntry8

  RestoreDC

  DeleteDC

  SaveDC

  SelectPalette

  RealizePalette

  GdiEntry5

  GetDeviceCaps

  CreatePalette

  ResizePalette

  DeleteObject

  GdiEntry13

  GdiEntry6

  GetRgnBox

  GetRandomRgn

  CreateRectRgn

  GetStockObject

  GdiEntry11

  GetNearestColor

  CreateDCA

  GdiEntry3

  GdiEntry1

  GdiEntry12

  GetRegionData

  GdiEntry15

  GetDeviceGammaRamp

  GdiEntry14

  CreateCompatibleDC

  kernel32

  DeleteCriticalSection

  LocalReAlloc

  OutputDebugStringA

  GetTickCount

  GlobalAlloc

  GlobalLock

  GlobalUnlock

  GlobalFree

  lstrcmpA

  GetProfileIntA

  OpenMutexA

  InitializeCriticalSection

  CreateMutexA

  DisableThreadLibraryCalls

  GetCurrentProcess

  lstrcatA

  WideCharToMultiByte

  CreateFileA

  MultiByteToWideChar

  GetSystemDirectoryA

  lstrlenA

  ReadFile

  SetFilePointer

  GetModuleFileNameA

  VerifyVersionInfoA

  QueryPerformanceCounter

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  GetCurrentProcessId

  LocalAlloc

  LocalFree

  SetUnhandledExceptionFilter

  GetLastError

  GetSystemInfo

  IsBadWritePtr

  LeaveCriticalSection

  EnterCriticalSection

  CloseHandle

  ReleaseSemaphore

  WaitForSingleObject

  CreateSemaphoreA

  ReleaseMutex

  InterlockedExchange

  SetErrorMode

  FreeLibrary

  GetProcAddress

  LoadLibraryA

  lstrcmpiA

  GetCurrentThreadId

  IsBadReadPtr

  GetModuleHandleA

  IsBadCodePtr

  lstrcpyA

  lstrcpynA

  msvcrt

  qsort

  _ftol

  _adjust_fdiv

  malloc

  _initterm

  free

  memmove

  bsearch

  _strlwr

  wcsrchr

  atoi

  _except_handler3

  _stricmp

  floor

  ntdll

  VerSetConditionMask

  user32

  RedrawWindow

  ChangeDisplaySettingsExA

  EnumDisplayDevicesA

  wsprintfA

  GetClientRect

  ClientToScreen

  GetWindowThreadProcessId

  SetCursor

  KillTimer

  SendMessageA

  IsIconic

  CallWindowProcA

  GetAsyncKeyState

  GetKeyState

  SetFocus

  DefWindowProcA

  OpenClipboard

  EmptyClipboard

  SetClipboardData

  CloseClipboard

  OpenInputDesktop

  CloseDesktop

  GetLastActivePopup

  mouse_event

  SetForegroundWindow

  GetForegroundWindow

  ShowWindow

  IsZoomed

  SetTimer

  ClipCursor

  IsWindowVisible

  GetSystemMetrics

  IsRectEmpty

  GetMonitorInfoA

  LoadStringA

  GetWindowLongA

  DestroyWindow

  SetWindowLongA

  GetClassInfoA

  RegisterClassA

  CreateWindowExA

  SetWindowPos

  GetThreadDesktop

  GetUserObjectInformationA

  SystemParametersInfoA

  PostMessageA

  ChangeDisplaySettingsA

  CopyRect

  EnumDisplaySettingsA

  IsWindow

  ScreenToClient

  OffsetRect

  SetRect

  GetDC

  ReleaseDC

  IntersectRect

  EqualRect

  Exports

  Exports

  AcquireDDThreadLock

  CheckFullscreen

  CompleteCreateSysmemSurface

  D3DParseUnknownCommand

  DDGetAttachedSurfaceLcl

  DDInternalLock

  DDInternalUnlock

  DSoundHelp

  DirectDrawCreate

  DirectDrawCreateClipper

  DirectDrawCreateEx

  DirectDrawEnumerateA

  DirectDrawEnumerateExA

  DirectDrawEnumerateExW

  DirectDrawEnumerateW

  DllCanUnloadNow

  DllGetClassObject

  GetDDSurfaceLocal

  GetOLEThunkData

  GetSurfaceFromDC

  RegisterSpecialCase

  ReleaseDDThreadLock

  Sections

  .text

  Size: 247KB - Virtual size: 248KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 10KB - Virtual size: 28KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 1KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 12KB - Virtual size: 16KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ

  .prix

  Size: 3KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE