3d133f9af21fc68c826ed639a9eda09dfedf638c481d55f52094ea19e57fd05b

Sharing

Copy URL

Twitter E-mail

General

Target

3d133f9af21fc68c826ed639a9eda09dfedf638c481d55f52094ea19e57fd05b
Size

304KB
MD5

17a04c41706590f54cae4aea62c2b1e1
SHA1

adddd6857697cc6741282dc45e137c1d647e8cfe
SHA256

3d133f9af21fc68c826ed639a9eda09dfedf638c481d55f52094ea19e57fd05b
SHA512

3989614668ba12c4cb83eecb9c606ca7ac4a17f5ece9627ef94390ea8f65a36dff49949f54c6244dd3c33b2920ae5ee19645b787f16bb1a29736fbdb38711163
SSDEEP

6144:8wugkL/1/Kdlq0Db53CtOuM0gK/h/4Cr6YzTYzrPV2Ku:07En68QR3M2Ku

Score

N/A

Malware Config

Signatures

Files

3d133f9af21fc68c826ed639a9eda09dfedf638c481d55f52094ea19e57fd05b
.dll windows x86

4a2c8ea7860b8715b1b1f4250b5fc929

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsWindow
CallWindowProcA
CharNextA
CreateAcceleratorTableA
CreateWindowExA
DefWindowProcA
DestroyAcceleratorTable
DestroyWindow
DialogBoxIndirectParamA
EnableWindow
EndDialog
EndPaint
FillRect
wsprintfA
UnregisterClassA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetWindowContextHelpId
SetFocus
SetCursor
SetCapture
SendMessageA
ReleaseDC
ReleaseCapture
RegisterWindowMessageA
RegisterClassExA
RedrawWindow
PtInRect
MessageBoxA
MapDialogRect
LoadStringA
LoadCursorA
BeginPaint
IsChild
InvalidateRgn
InvalidateRect
GetWindowTextLengthA
GetWindowTextA
GetWindowRect
GetWindowLongA
GetWindow
GetSysColor
GetParent
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassInfoExA
GetActiveWindow

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CreateStreamOnHGlobal
OleInitialize
OleLockRunning
OleUninitialize
StringFromGUID2

gdi32

SetViewportOrgEx
SetTextColor
SetGraphicsMode
SetBkMode
SelectObject
SaveDC
RestoreDC
ModifyWorldTransform
GetStockObject
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
DPtoLP
CreateSolidBrush
CreateFontIndirectA
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetWindowOrgEx

advapi32

RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA

ddraw

DirectDrawEnumerateA
DSoundHelp

oleaut32

VariantInit
VariantClear
VarUI4FromStr
SysStringLen
SysStringByteLen
SysFreeString
SysAllocStringLen
SysAllocString
LoadRegTypeLi
LoadTypeLi
OleCreateFontIndirect

kernel32

InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GlobalUnlock
GlobalLock
GlobalHandle
GlobalFree
lstrlenA
GetVersionExA
GetTickCount
GetThreadLocale
lstrlenW
InterlockedIncrement
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FlushInstructionCache
FindResourceA
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
IsDBCSLeadByte
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
SetLastError
SizeofResource
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
lstrcmpA
lstrcmpiA
GetProcessPriorityBoost
lstrcpynA
GetSystemTimeAsFileTime
GlobalAlloc
DeleteCriticalSection

comctl32

ord17

shell32

SheSetCurDrive
SHGetSpecialFolderLocation
SHGetInstanceExplorer
SHGetDiskFreeSpaceA
SHExtractIconsW
SHAppBarMessage
SHAddToRecentDocs
DragFinish
CommandLineToArgvW

Exports

Exports

CompileShaderFromResourceA
CreateMeshFVF
GetLoadInfoCallbackData
LoadBitmapW
SavePRTCompBufferToFileW
UVAtlasPack
mpegSplitSeekByteTS

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a2c8ea7860b8715b1b1f4250b5fc929

Headers

DLL Characteristics

File Characteristics

Imports

user32

ole32

gdi32

advapi32

ddraw

oleaut32

kernel32

comctl32

shell32

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 152KB - Virtual size: 151KB

.data Size: 39KB - Virtual size: 39KB

.rsrc Size: 48KB - Virtual size: 48KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 152KB - Virtual size: 151KB

.data
Size: 39KB - Virtual size: 39KB

.rsrc
Size: 48KB - Virtual size: 48KB

.reloc
Size: 4KB - Virtual size: 3KB