1f418a63dbcc8fa1641dce27f35783345a669e74feaa27f4b924fd1e8492dfd5

Sharing

Copy URL Twitter E-mail

General

Target

1f418a63dbcc8fa1641dce27f35783345a669e74feaa27f4b924fd1e8492dfd5
Size

413KB
MD5

0a3a8fdf29fdb991b7acfd9b688b2b60
SHA1

bb10a80c15e54e46063edc7b0637a1244bae091a
SHA256

1f418a63dbcc8fa1641dce27f35783345a669e74feaa27f4b924fd1e8492dfd5
SHA512

b2670c0bb12de89eab4c88d98ebbe7d054762ac62223753326b5e7711670a43c9b554aa0e97520474005bff9f18f6d5965edfa18c05447b94115689fef811204
SSDEEP

12288:lHrI3OWwpaXdyCeWPPqn0e/Vs72lyJrP69pS6Srq74SKL:lVp3BdKL

Score

N/A

Malware Config

Signatures

Files

1f418a63dbcc8fa1641dce27f35783345a669e74feaa27f4b924fd1e8492dfd5
.dll windows x86

1a39fa9f1633023adcdc4e4503daa757

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Create
ImageList_AddMasked
ImageList_Destroy

kernel32

GetModuleFileNameW
WritePrivateProfileStringW
CreateFileW
WriteFile
CloseHandle
CreateDirectoryW
GetProcAddress
GetTickCount
MultiByteToWideChar
WideCharToMultiByte
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileStringW
lstrcatW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
lstrcpynW
lstrlenW
GlobalUnlock
GlobalLock
GlobalAlloc
OutputDebugStringW
GetLocalTime

user32

UpdateWindow
OffsetRect
SystemParametersInfoW
SetCursor
FlashWindow
GetForegroundWindow
GetFocus
IsChild
IsIconic
IsWindowVisible
ShowWindow
ClientToScreen
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetDesktopWindow
SetWindowPos
GetClientRect
SetWindowTextW
SetWindowLongW
GetWindowLongW
SetFocus
GetWindowRect
IsWindow
GetKeyState

gdi32

CreateFontW
GetObjectW
CreateFontIndirectW
SelectObject
DeleteDC
DeleteObject

advapi32

RegCloseKey
RegQueryValueW
RegOpenKeyExW

shell32

ShellExecuteW

msvcp100

?_Xinvalid_argument@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z

localization

?Localization_Constant_GetString@@YAHPB_W00PA_WI@Z
?Localization_Language_Get@@YAHPA_WI@Z

msvcr100

_onexit
_except_handler4_common
memset
_lock
_CxxThrowException
__CppXcptFilter
__CxxFrameHandler3
__dllonexit
_unlock
__clean_type_info_names_internal
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
memcpy
_crt_debugger_hook
??3@YAXPAX@Z
_localtime64
_time64
wcsstr
wcsncpy
??2@YAPAXI@Z
_purecall
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
memmove
_vsnwprintf
wcsrchr
_wtoi
_itow
_waccess
wcschr
_snwprintf
wcsncat
wcstok
_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit

Exports

Exports

CreateObject

Sections

.text
Size: 223KB - Virtual size: 223KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1a39fa9f1633023adcdc4e4503daa757

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

shell32

msvcp100

localization

msvcr100

Exports

Exports

Sections

.text Size: 223KB - Virtual size: 223KB

.rdata Size: 52KB - Virtual size: 51KB

.data Size: 10KB - Virtual size: 14KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 17KB - Virtual size: 17KB

.text Size: 108KB - Virtual size: 112KB

.text
Size: 223KB - Virtual size: 223KB

.rdata
Size: 52KB - Virtual size: 51KB

.data
Size: 10KB - Virtual size: 14KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 17KB - Virtual size: 17KB

.text
Size: 108KB - Virtual size: 112KB