8c301460567c8cd1be6cfc5be7aa1869a8aa01bf74f3076f70656b39071a4202

Sharing

Copy URL Twitter E-mail

General

Target

8c301460567c8cd1be6cfc5be7aa1869a8aa01bf74f3076f70656b39071a4202
Size

136KB
MD5

0b716a780467b49382aaf36476887fb2
SHA1

2100613da61c86aab4c237e2a5eeeb8baf69468a
SHA256

8c301460567c8cd1be6cfc5be7aa1869a8aa01bf74f3076f70656b39071a4202
SHA512

3a389de3060865185bd5aa537ae0f354ee45a1d4334c9cc0c932caa4a67c861a9454aba85b3b395175e22677aec063d108b4c4e83244f7bec53430a5fd52615f
SSDEEP

3072:O4fmTLpy5cArMIp+8zA8d4dzL9OinnyPLZtD43Agq1RwYJ:O78lr28zApOiniFQK

Score

N/A

Malware Config

Signatures

Files

8c301460567c8cd1be6cfc5be7aa1869a8aa01bf74f3076f70656b39071a4202
.dll windows x86

31691d6fede4d7e8ff8856bf5709b702

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleCP
ExitProcess
SetThreadExecutionState
ReleaseMutex
ReadFile
RegisterWaitForInputIdle
GetOEMCP
SetConsoleTitleA
SetVolumeMountPointW
SetStdHandle
GetConsoleMode
FreeLibrary
Process32FirstW
SetCurrentDirectoryA
WriteFile
BackupSeek
GetProcessPriorityBoost
GetEnvironmentVariableA
GetVolumeInformationW
GetBinaryTypeA
FormatMessageA
FindNextChangeNotification
ConvertDefaultLocale
OpenFile
CreateMailslotW
SetConsoleMode
FreeLibraryAndExitThread
CreateNamedPipeA
SetConsoleTextAttribute
SetCurrentDirectoryW
EnumTimeFormatsW
VirtualQuery
MulDiv
SetCommState
CreateJobObjectW
SetConsoleMenuClose
GetDriveTypeW
DeleteAtom
GetLocalTime
SignalObjectAndWait
WaitCommEvent
GetLogicalDrives
SetConsoleActiveScreenBuffer
GetProcAddress
GetProfileSectionW
SetConsoleKeyShortcuts
EnumDateFormatsExA
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetLocaleInfoA
GetStringTypeExA
ReadConsoleInputExW
AllocConsole
LocalAlloc
GetPrivateProfileIntA
QueryDosDeviceW
FindNextVolumeMountPointW
GetNextVDMCommand
GetHandleInformation
OpenFileMappingA
FindAtomA
GetBinaryTypeW
UnhandledExceptionFilter
CloseProfileUserMapping
ExpungeConsoleCommandHistoryW
SetConsoleCtrlHandler
GlobalFix
GetNumberFormatW
GetCommProperties
CommConfigDialogA
PurgeComm
GetFullPathNameW
QueryDosDeviceA
GetUserDefaultLangID
SizeofResource
TryEnterCriticalSection
GetModuleHandleA
WriteConsoleInputW
SystemTimeToFileTime
ReadConsoleOutputW
SetVolumeLabelW
GetCPInfo
GetDiskFreeSpaceW
WaitForSingleObject
GetSystemTime
CancelWaitableTimer
FlushInstructionCache
GetProfileSectionA
_lcreat
WriteConsoleOutputCharacterA
HeapAlloc
GetLocaleInfoW
VirtualAlloc
GlobalUnlock
GetConsoleAliasExesA
GetThreadLocale
EscapeCommFunction
RtlMoveMemory
GetConsoleCommandHistoryW
WriteConsoleOutputW
SetVolumeLabelA
GetDevicePowerState
RegisterWaitForSingleObject
IsValidLocale
LoadLibraryA
GetVersion
ReadFileEx

advapi32

RegQueryValueExW
LsaQueryInformationPolicy
LsaLookupSids
CryptEnumProviderTypesW
CryptImportKey
LsaQuerySecurityObject
LsaEnumeratePrivileges
SetThreadToken
RegSetValueA
OpenServiceA
SetFileSecurityW
CryptSetProviderA
AddAce
TrusteeAccessToObjectA
ObjectDeleteAuditAlarmW
GetMultipleTrusteeOperationA
RegOverridePredefKey
RegEnumValueW
RegisterServiceCtrlHandlerA
SetEntriesInAccessListA
BuildSecurityDescriptorW
AdjustTokenPrivileges
ElfReadEventLogA
RegCreateKeyExW
LsaLookupNames
CryptGenRandom
SetTokenInformation
CreateServiceW
GetAclInformation
ClearEventLogW
ObjectPrivilegeAuditAlarmW
BuildImpersonateExplicitAccessWithNameW
ChangeServiceConfigA
SetUserFileEncryptionKey
LookupAccountSidA
RegDeleteKeyA
RegReplaceKeyW
GetFileSecurityW
RevertToSelf
SetSecurityDescriptorOwner
FileEncryptionStatusA
GetServiceDisplayNameW
GetCurrentHwProfileW
GetNamedSecurityInfoExA
IsTextUnicode
CryptEncrypt
ConvertToAutoInheritPrivateObjectSecurity
AddAccessAllowedAce
ChangeServiceConfig2A
ImpersonateNamedPipeClient
ElfReportEventA
AccessCheck
LookupAccountNameW
SetEntriesInAclW
BuildImpersonateTrusteeW
RegDeleteKeyW
PrivilegedServiceAuditAlarmA
ConvertStringSidToSidA
ObjectPrivilegeAuditAlarmA
GetOldestEventLogRecord
RegDeleteValueA
GetUserNameA
I_ScSetServiceBitsA
SystemFunction033
SystemFunction023
ElfChangeNotify
RegOpenKeyExA
LookupPrivilegeValueW
PrivilegeCheck
LsaSetSecret
LsaCreateSecret
LsaOpenAccount
RegQueryValueW
LsaRemoveAccountRights
AddAuditAccessAce
AddUsersToEncryptedFile
GetNumberOfEventLogRecords
CreateRestrictedToken
SystemFunction010
SystemFunction013
ImpersonateLoggedOnUser
RegReplaceKeyA
QueryServiceConfig2A
LookupSecurityDescriptorPartsA
ObjectOpenAuditAlarmA
GetEffectiveRightsFromAclA
SystemFunction014
BackupEventLogW
SystemFunction004
ConvertSecurityDescriptorToAccessW
CryptGetKeyParam
AccessCheckAndAuditAlarmW
GetSecurityInfoExA

opengl32

glStencilMask
glClearAccum
glIsEnabled
glColor4uiv
glColorMaterial
glLightModeliv
glEvalCoord1dv
glTexCoord4iv
glVertex2s
glColor4s
glGetError
glGetMaterialfv
glTexGeni
glIndexubv
glEvalCoord2dv
glTranslated
glAreTexturesResident
glColor3dv
glTexCoord2f
glRectdv
glTexCoord1d
glGetLightiv
glGetFloatv
glGetTexEnviv
glPrioritizeTextures
glGetTexImage
glTexCoord3d
glColor4b
glEdgeFlagv
glClearStencil
glListBase
glNormal3fv
glRasterPos4fv
glVertex4sv
wglDescribePixelFormat
glFinish
GlmfBeginGlsBlock
wglSwapLayerBuffers
glClear
glTexCoord3dv
glCopyTexImage2D
glTranslatef
wglGetCurrentDC
glRasterPos3sv
glFrontFace
glLoadIdentity
glRasterPos3iv
wglGetDefaultProcAddress
wglMakeCurrent
glGetDoublev
glColor4fv
glNormal3dv
glIndexMask
glPixelTransferi
glLineStipple
wglDeleteContext
glVertex4fv
glIndexdv
glDisable
glReadPixels
glColor4iv
glMultMatrixd
glTexGend
glColor4f
glTexParameterfv
glVertex2f
glEdgeFlagPointer
glEvalCoord2fv
glViewport
glTexCoord3sv
glTexCoord3i
glVertex4iv
glColor4d
wglCreateContext
glScaled
glRasterPos4iv
glTexCoord2i
glVertex2dv
glRasterPos4d
glPushClientAttrib
glGetTexEnvfv
glEvalCoord2d
glTexGenfv
glGetMapdv
glEvalMesh2
glMaterialf
glFogf
glMatrixMode
glVertex3dv
glColor3us
glTexCoord4f
glNormal3sv
glNormal3iv
glRasterPos3f
glTexCoord1i
glVertex2fv
glLineWidth
glFlush
glLightf
glPassThrough
glScalef
glColor4ub
glColor3f
glTexCoord1s
glCopyTexSubImage2D
glGetMaterialiv
glRasterPos4i
glPixelMapusv
glRasterPos2fv
glPushName

msvcrt

fputs
_mbsnbcoll
fwrite
_mbschr
fclose
_wtoi64
_wmkdir
_mbsrev
fprintf
_statusfp
printf
fread
isprint
_mbctype
strncpy
_cgets
_mbsnbcmp
_umask
_wutime
_mbsnccnt
_daylight
_unlink
_wperror
_lseek
fwprintf
_mbsspnp
getenv
_wputenv
_beginthread
_execle
_setmaxstdio
_ungetch
ftell
_pwctype
_getdllprocaddr
_adj_fprem1
_loaddll
cosh
sprintf
fseek
fgets
_ismbstrail
fopen
fsetpos
_splitpath
log10
_copysign
_ismbcprint
__iscsym
_futime
feof
_heapused
fputc
_kbhit
__unDNameEx
memset
ferror
qsort
_atoldbl
_mbslwr

Exports

Exports

Fyqcyfy
Gorrumzfvq
Hybixhfo
Lxnfkbqib
Mlvwzzp
Sotv
Vzoeacqg
Wcbmljo
Ydpmaf
Znuyfiyw

Sections

.text
Size: 56KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31691d6fede4d7e8ff8856bf5709b702

Headers

File Characteristics

Imports

kernel32

advapi32

opengl32

msvcrt

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 54KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 52KB - Virtual size: 50KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 56KB - Virtual size: 54KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 52KB - Virtual size: 50KB

.reloc
Size: 12KB - Virtual size: 8KB