2435508944f3b66d060d12bf9a41fb8721af553b84c9b53e31c2008daf0cc988

Sharing

Copy URL

Twitter E-mail

General

Target

2435508944f3b66d060d12bf9a41fb8721af553b84c9b53e31c2008daf0cc988
Size

763KB
MD5

d5a01e812ecec2ec265784eace378d68
SHA1

bc195bf2b2790a2761a97c65fba056891378c3d3
SHA256

2435508944f3b66d060d12bf9a41fb8721af553b84c9b53e31c2008daf0cc988
SHA512

2e945e83fefb302f8dfb5896a1433618be8b01072845daaa3804384655854c19c3c49a59c2ba6a25aae239c50da667ba04d933355d8d0ea454a97de3a18ea868
SSDEEP

12288:IdP0lUmNIvvhscM75sH5SBT20ed9N/5iiQQdxGjQ/gXi7kVwoGONANbmmnvKXR3e:IdclUmNIvvhscMtsKT20edr5iiQQdxGg

Score

N/A

Malware Config

Signatures

Files

2435508944f3b66d060d12bf9a41fb8721af553b84c9b53e31c2008daf0cc988
.dll windows x86

eee80db291ee2d3f4715575539b4e781

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_unlock
memset
__dllonexit
_lock
_onexit
_stricmp
_vsnwprintf
_wcsnicmp
towlower
_wgetenv
wcsrchr
_wcsicmp
wcschr
_CIexp
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
free
malloc
memmove
_CIlog

kernel32

GetTickCount
QueryPerformanceCounter
Sleep
DelayLoadFailureHook
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
DebugBreak
GetCurrentThread
TerminateThread
TerminateProcess
IsDebuggerPresent
ExitProcess
GetCurrentProcess
GetModuleHandleW
GetProcessHeap
HeapReAlloc
HeapAlloc
HeapFree
MulDiv
IsProcessorFeaturePresent
InterlockedExchange
SleepEx
GetVersionExW
MapViewOfFileEx
GetSystemInfo
UnmapViewOfFile
GlobalAlloc
RaiseException
lstrlenW
WideCharToMultiByte
WriteFile
SetEndOfFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
InterlockedCompareExchange
LoadLibraryA
InterlockedIncrement
InterlockedDecrement
GetFileType
CreateFileW
LocalAlloc
GetCurrentThreadId
LocalFree
CloseHandle
SetLastError
GetModuleFileNameW
FindFirstFileW
GetLastError
FindClose
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
lstrcmpiW
lstrcmpW
SetFilePointer
GetFileSize
GetFileInformationByHandle
ReadFile
RtlCaptureStackBackTrace

user32

GetIconInfo
SetRect
EqualRect
IsRectEmpty
IntersectRect
GetGuiResources

gdi32

CreateDIBSection
SetDIBits
CreateCompatibleDC
GetPaletteEntries
DeleteObject
GetDIBits
GetObjectW
DeleteDC

ole32

PropVariantCopy
CoLockObjectExternal
CoTaskMemFree
StringFromGUID2
GetHGlobalFromStream
CreateStreamOnHGlobal
CLSIDFromString
PropVariantClear
CoCreateInstance
CLIPFORMAT_UserSize
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserFree
CLIPFORMAT_UserUnmarshal
HBITMAP_UserSize
HICON_UserFree
HICON_UserSize
HPALETTE_UserSize
HPALETTE_UserUnmarshal
HPALETTE_UserFree
HBITMAP_UserFree
HICON_UserUnmarshal
HBITMAP_UserMarshal
HICON_UserMarshal
HBITMAP_UserUnmarshal
HPALETTE_UserMarshal
CoTaskMemAlloc

ntdll

DbgPrintEx
DbgPrompt
DbgBreakPoint
NtQuerySystemInformation
RtlSetBits
RtlInitializeBitMap

advapi32

RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumValueW

rpcrt4

CStdStubBuffer_Invoke
CStdStubBuffer_Connect
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_Disconnect
NdrOleFree
NdrOleAllocate
NdrStubCall2
CStdStubBuffer_QueryInterface
NdrStubForwardingFunction
CStdStubBuffer_AddRef
CStdStubBuffer_IsIIDSupported
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllGetClassObject

Exports

Exports

DllGetClassObject
IEnumString_Next_WIC_Proxy
IEnumString_Reset_WIC_Proxy
IPropertyBag2_Write_Proxy
IWICBitmapClipper_Initialize_Proxy
IWICBitmapCodecInfo_DoesSupportAnimation_Proxy
IWICBitmapCodecInfo_DoesSupportLossless_Proxy
IWICBitmapCodecInfo_DoesSupportMultiframe_Proxy
IWICBitmapCodecInfo_GetContainerFormat_Proxy
IWICBitmapCodecInfo_GetDeviceManufacturer_Proxy
IWICBitmapCodecInfo_GetDeviceModels_Proxy
IWICBitmapCodecInfo_GetFileExtensions_Proxy
IWICBitmapCodecInfo_GetMimeTypes_Proxy
IWICBitmapDecoder_CopyPalette_Proxy
IWICBitmapDecoder_GetColorContexts_Proxy
IWICBitmapDecoder_GetDecoderInfo_Proxy
IWICBitmapDecoder_GetFrameCount_Proxy
IWICBitmapDecoder_GetFrame_Proxy
IWICBitmapDecoder_GetMetadataQueryReader_Proxy
IWICBitmapDecoder_GetPreview_Proxy
IWICBitmapDecoder_GetThumbnail_Proxy
IWICBitmapEncoder_Commit_Proxy
IWICBitmapEncoder_CreateNewFrame_Proxy
IWICBitmapEncoder_GetEncoderInfo_Proxy
IWICBitmapEncoder_GetMetadataQueryWriter_Proxy
IWICBitmapEncoder_Initialize_Proxy
IWICBitmapEncoder_SetPalette_Proxy
IWICBitmapEncoder_SetThumbnail_Proxy
IWICBitmapFlipRotator_Initialize_Proxy
IWICBitmapFrameDecode_GetColorContexts_Proxy
IWICBitmapFrameDecode_GetMetadataQueryReader_Proxy
IWICBitmapFrameDecode_GetThumbnail_Proxy
IWICBitmapFrameEncode_Commit_Proxy
IWICBitmapFrameEncode_GetMetadataQueryWriter_Proxy
IWICBitmapFrameEncode_Initialize_Proxy
IWICBitmapFrameEncode_SetColorContexts_Proxy
IWICBitmapFrameEncode_SetResolution_Proxy
IWICBitmapFrameEncode_SetSize_Proxy
IWICBitmapFrameEncode_SetThumbnail_Proxy
IWICBitmapFrameEncode_WriteSource_Proxy
IWICBitmapLock_GetDataPointer_STA_Proxy
IWICBitmapLock_GetStride_Proxy
IWICBitmapScaler_Initialize_Proxy
IWICBitmapSource_CopyPalette_Proxy
IWICBitmapSource_CopyPixels_Proxy
IWICBitmapSource_GetPixelFormat_Proxy
IWICBitmapSource_GetResolution_Proxy
IWICBitmapSource_GetSize_Proxy
IWICBitmap_Lock_Proxy
IWICBitmap_SetPalette_Proxy
IWICBitmap_SetResolution_Proxy
IWICColorContext_InitializeFromMemory_Proxy
IWICComponentFactory_CreateMetadataWriterFromReader_Proxy
IWICComponentFactory_CreateQueryWriterFromBlockWriter_Proxy
IWICComponentInfo_GetAuthor_Proxy
IWICComponentInfo_GetCLSID_Proxy
IWICComponentInfo_GetFriendlyName_Proxy
IWICComponentInfo_GetSpecVersion_Proxy
IWICComponentInfo_GetVersion_Proxy
IWICFastMetadataEncoder_Commit_Proxy
IWICFastMetadataEncoder_GetMetadataQueryWriter_Proxy
IWICFormatConverter_Initialize_Proxy
IWICImagingFactory_CreateBitmapClipper_Proxy
IWICImagingFactory_CreateBitmapFlipRotator_Proxy
IWICImagingFactory_CreateBitmapFromHBITMAP_Proxy
IWICImagingFactory_CreateBitmapFromHICON_Proxy
IWICImagingFactory_CreateBitmapFromMemory_Proxy
IWICImagingFactory_CreateBitmapFromSource_Proxy
IWICImagingFactory_CreateBitmapScaler_Proxy
IWICImagingFactory_CreateBitmap_Proxy
IWICImagingFactory_CreateComponentInfo_Proxy
IWICImagingFactory_CreateDecoderFromFileHandle_Proxy
IWICImagingFactory_CreateDecoderFromFilename_Proxy
IWICImagingFactory_CreateDecoderFromStream_Proxy
IWICImagingFactory_CreateEncoder_Proxy
IWICImagingFactory_CreateFastMetadataEncoderFromDecoder_Proxy
IWICImagingFactory_CreateFastMetadataEncoderFromFrameDecode_Proxy
IWICImagingFactory_CreateFormatConverter_Proxy
IWICImagingFactory_CreatePalette_Proxy
IWICImagingFactory_CreateQueryWriterFromReader_Proxy
IWICImagingFactory_CreateQueryWriter_Proxy
IWICImagingFactory_CreateStream_Proxy
IWICMetadataBlockReader_GetCount_Proxy
IWICMetadataBlockReader_GetReaderByIndex_Proxy
IWICMetadataQueryReader_GetContainerFormat_Proxy
IWICMetadataQueryReader_GetEnumerator_Proxy
IWICMetadataQueryReader_GetLocation_Proxy
IWICMetadataQueryReader_GetMetadataByName_Proxy
IWICMetadataQueryWriter_RemoveMetadataByName_Proxy
IWICMetadataQueryWriter_SetMetadataByName_Proxy
IWICPalette_GetColorCount_Proxy
IWICPalette_GetColors_Proxy
IWICPalette_GetType_Proxy
IWICPalette_HasAlpha_Proxy
IWICPalette_InitializeCustom_Proxy
IWICPalette_InitializeFromBitmap_Proxy
IWICPalette_InitializeFromPalette_Proxy
IWICPalette_InitializePredefined_Proxy
IWICPixelFormatInfo_GetBitsPerPixel_Proxy
IWICPixelFormatInfo_GetChannelCount_Proxy
IWICPixelFormatInfo_GetChannelMask_Proxy
IWICStream_InitializeFromIStream_Proxy
IWICStream_InitializeFromMemory_Proxy
WICConvertBitmapSource
WICCreateBitmapFromSection
WICCreateColorContext_Proxy
WICCreateImagingFactory_Proxy
WICGetMetadataContentSize
WICMapGuidToShortName
WICMapSchemaToName
WICMapShortNameToGuid
WICMatchMetadataContent
WICSerializeMetadataContent
WICSetEncoderFormat_Proxy

Sections

.text
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 931B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eee80db291ee2d3f4715575539b4e781

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

ole32

ntdll

advapi32

rpcrt4

Exports

Exports

Sections

.text Size: 648KB - Virtual size: 647KB

.orpc Size: 1024B - Virtual size: 931B

.data Size: 89KB - Virtual size: 96KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 22KB - Virtual size: 22KB

.text
Size: 648KB - Virtual size: 647KB

.orpc
Size: 1024B - Virtual size: 931B

.data
Size: 89KB - Virtual size: 96KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 22KB - Virtual size: 22KB