dbb684eca07873cc24c86e042d34ed4d7e57034e8224af8efaa514f3a4849422

General

Target

dbb684eca07873cc24c86e042d34ed4d7e57034e8224af8efaa514f3a4849422
Size

136KB
MD5

82b975fe7c7f91715783ddb553c1ff94
SHA1

84487c28b4a99c2a4927f292aa92edeaa5f26a67
SHA256

dbb684eca07873cc24c86e042d34ed4d7e57034e8224af8efaa514f3a4849422
SHA512

698e30e7fa2d3607ac40eb53c141d1edb17d53743f9ea13119e4a812983e701304dac6f5670d06afe5ce7c5200b55cac54bd8f8d2ee1955255cbb5c2b3f1adec
SSDEEP

3072:CRf+3O37vr+maHmCHv020AQZALiwne6EQYO8W9:sfgO3ubyAQZAmwns

Score

N/A

Malware Config

Signatures

Files

dbb684eca07873cc24c86e042d34ed4d7e57034e8224af8efaa514f3a4849422
.dll windows x86

106b582679031ccf97c18632672ffee2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetNumberFormatW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeFormatW
DisableThreadLibraryCalls
ReadFile
lstrcmpA
RemoveDirectoryA
DeleteFileW
SetFilePointer
lstrlenA
CloseHandle
WriteFile
lstrlenW
CreateFileW
GetTempPathW
Sleep
GetVersionExW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
lstrcpyW
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
FlushInstructionCache
GetCurrentProcess
WideCharToMultiByte
WaitForSingleObject
lstrcpynW
GetCurrentThread
SetEndOfFile
GetConsoleTitleA

user32

ShowOwnedPopups
IsWindowEnabled
AdjustWindowRect
EndDialog

advapi32

OpenSCManagerW
QueryServiceStatus
QueryServiceConfigW
EnumDependentServicesW
GetUserNameW
RegOpenKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyExW
ChangeServiceConfigW
RegEnumValueW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
StartServiceW
UnlockServiceDatabase
OpenThreadToken
InitiateSystemShutdownExW

Exports

Exports

BrokenValueAreBoth
InEmpty
IsNewlineNameAnd

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

106b582679031ccf97c18632672ffee2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 120KB - Virtual size: 116KB

.data Size: 4KB - Virtual size: 104KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 874B

.text
Size: 120KB - Virtual size: 116KB

.data
Size: 4KB - Virtual size: 104KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 874B