ae0821da2b4765b782d4dafb336acd3d8d85381a7be9be1dcabb3ab9ebf2b749

General

Target

ae0821da2b4765b782d4dafb336acd3d8d85381a7be9be1dcabb3ab9ebf2b749
Size

136KB
MD5

afe0399ed93329d8ba2b44f79ed9b5d6
SHA1

3c95fb1ad010f4deaa580e1cecb3d9098d4ba7a1
SHA256

ae0821da2b4765b782d4dafb336acd3d8d85381a7be9be1dcabb3ab9ebf2b749
SHA512

a3926599906e06ea3084638b6c78fd5b664a78469e9b5d38f62f241772c32f4c24f851262679646dc6e68fbbb9214ba4207ba5248837a09a910816fe13ff0c44
SSDEEP

1536:C9u097l9+Hh0Zq6QpTzc9Hwy1Ld2VzM/U0iAaFo19Fl181JlSuR+AlaUqXrGX8vc:CRf+cq6Q4Hxj2aI78RA3sGX8vW9

Score

N/A

Malware Config

Signatures

Files

ae0821da2b4765b782d4dafb336acd3d8d85381a7be9be1dcabb3ab9ebf2b749
.dll windows x86

106b582679031ccf97c18632672ffee2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetNumberFormatW
GetPrivateProfileIntW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTimeFormatW
DisableThreadLibraryCalls
ReadFile
lstrcmpA
RemoveDirectoryA
DeleteFileW
SetFilePointer
lstrlenA
CloseHandle
WriteFile
lstrlenW
CreateFileW
GetTempPathW
Sleep
GetVersionExW
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
lstrcpyW
RaiseException
HeapFree
HeapAlloc
HeapReAlloc
FlushInstructionCache
GetCurrentProcess
WideCharToMultiByte
WaitForSingleObject
lstrcpynW
GetCurrentThread
SetEndOfFile
GetConsoleTitleA

user32

ShowOwnedPopups
IsWindowEnabled
AdjustWindowRect
EndDialog

advapi32

OpenSCManagerW
QueryServiceStatus
QueryServiceConfigW
EnumDependentServicesW
GetUserNameW
RegOpenKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegQueryValueExW
RegCreateKeyExW
RegSetValueExW
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumKeyExW
ChangeServiceConfigW
RegEnumValueW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
StartServiceW
UnlockServiceDatabase
OpenThreadToken
InitiateSystemShutdownExW

Exports

Exports

BrokenValueAreBoth
InEmpty
IsNewlineNameAnd

Sections

.text
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

106b582679031ccf97c18632672ffee2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 120KB - Virtual size: 116KB

.data Size: 4KB - Virtual size: 104KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 874B

.text
Size: 120KB - Virtual size: 116KB

.data
Size: 4KB - Virtual size: 104KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 874B