aaee50b9f81bae8fda1a5cb9357f545b223192775a174f97bea47f1065d974d2

Sharing

Copy URL

Twitter E-mail

General

Target

aaee50b9f81bae8fda1a5cb9357f545b223192775a174f97bea47f1065d974d2
Size

116KB
MD5

a50488e150f48598bd516bfd38b34228
SHA1

842565427bd6aa7c2b4780d9bd429446d92c9091
SHA256

aaee50b9f81bae8fda1a5cb9357f545b223192775a174f97bea47f1065d974d2
SHA512

ef0b61b6f1bf53d880dfbe68df9c98196753d1101510deadac12d11291748c369200f8ef409d496f68e17febbd382e21faa5016bcb390c87b9d069f002eff006
SSDEEP

3072:xu3Zc6F5UQSvFwftpYglDcKjCCZaODOn:xu3Z5rU5vFItFlDV3a

Score

N/A

Malware Config

Signatures

Files

aaee50b9f81bae8fda1a5cb9357f545b223192775a174f97bea47f1065d974d2
.dll windows x86

6f23f0bcef3c864c6f20455900e601d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAccessAllowedAce
AllocateAndInitializeSid
CloseServiceHandle
ControlService
CryptDuplicateHash
ElfOldestRecord
EnumDependentServicesW
FreeSid
GetLengthSid
GetOldestEventLogRecord
InitializeAcl
InitializeSecurityDescriptor
LookupAccountNameW
MakeSelfRelativeSD
NotifyChangeEventLog
ObjectDeleteAuditAlarmW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SetEntriesInAclW
SetFileSecurityW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner

gdi32

OffsetWindowOrgEx

kernel32

GetCommandLineA
CreateDirectoryW
DeleteFileW
EnterCriticalSection
FillConsoleOutputCharacterA
FreeLibrary
GetComputerNameW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetFileAttributesW
GetLastError
GetLocalTime
GetProcAddress
GlobalAlloc
GlobalCompact
GlobalFree
HeapUnlock
LeaveCriticalSection
LoadLibraryExW
LocalAlloc
LocalFree
OutputDebugStringW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEvent
SetPriorityClass
SetProcessShutdownParameters
Sleep
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
LoadResource
FindResourceA
VirtualAlloc
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetCurrentThreadId
GetVersionExA
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
FatalAppExitA
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize

ole32

CoUninitialize
CoInitializeEx
CoInitialize
CoGetClassObject
OleLoadFromStream

oleaut32

VarI4FromR8
VarI1FromR8

rpcrt4

I_RpcFreeBuffer
NdrSimpleTypeUnmarshall
RpcServerUnregisterIf

user32

GetLastInputInfo
DdeKeepStringHandle
DdeAbandonTransaction
GetMenuItemCount
LoadStringW
MessageBoxIndirectA
MessageBoxW
SetCursor
SetScrollPos

Exports

Exports

zlrjlvhnuyd

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f23f0bcef3c864c6f20455900e601d4

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

oleaut32

rpcrt4

user32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 8KB - Virtual size: 4KB