65285eed70f5a7bbec53d1227d1e89f4997e645e43b9baf8260c978887859c79

Sharing

Copy URL Twitter E-mail

General

Target

65285eed70f5a7bbec53d1227d1e89f4997e645e43b9baf8260c978887859c79
Size

458KB
MD5

a4880547524c9a26ca4b9ec4ba640af2
SHA1

8da665d766b33c577803f1db771f08a1ba39053b
SHA256

65285eed70f5a7bbec53d1227d1e89f4997e645e43b9baf8260c978887859c79
SHA512

a9fa48886312afa984ebf94363e0f9fa5e60fa5da7145acdbdf11d8864f0f6e131692c7939fdd2a79f0c9332942200738b34a367cf024e9603d581d15383bab4
SSDEEP

12288:nANDHM6+A0CxSwzBzRt0kcSdKpT9rWkfk2Fjc7NIu:AN6AtxFB1Cm25Wavj

Score

N/A

Malware Config

Signatures

Files

65285eed70f5a7bbec53d1227d1e89f4997e645e43b9baf8260c978887859c79
.dll windows x86

e64b73df2cf139c7ddfd225f999ba430

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleFree
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect

shlwapi

PathMatchSpecW
PathParseIconLocationW
PathRemoveExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
SHStrDupW
StrCSpnW
StrCmpNIW
StrCmpW
StrRetToBufW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathAppendW
PathAddBackslashW
StrStrW

advapi32

GetTraceEnableLevel
GetTraceLoggerHandle
InitializeAcl
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterTraceGuidsW
TraceEvent
UnregisterTraceGuids
GetTraceEnableFlags

kernel32

SetUnhandledExceptionFilter
SizeofResource
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WriteFile
lstrcmpiW
lstrlenW
WaitForMultipleObjects
CloseHandle
CompareFileTime
CompareStringW
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetLogicalDriveStringsW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GetVolumeInformationW
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingW
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadLocale

winmm

PlaySoundW

user32

PeekMessageW
PostMessageW
PostThreadMessageW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseDC
RemovePropW
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
OffsetRect
SetPropW
SetWinEventHook
SetWindowLongW
SetWindowPos
SetWindowTextW
GetLastActivePopup
SystemParametersInfoW
TranslateMessage
UnhookWinEvent
UnregisterClassA
UnregisterDeviceNotification
MsgWaitForMultipleObjects
MoveWindow
MonitorFromRect
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadCursorW
IsWindowVisible
IsWindowEnabled
IsWindow
IsDlgButtonChecked
InvalidateRect
IntersectRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetPropW
GetParent
GetMonitorInfoW
SetForegroundWindow
GetMessageW
AllowSetForegroundWindow
BeginDeferWindowPos
CharNextW
CharUpperBuffW
CharUpperW
CopyImage
CreateDialogParamW
CreatePopupMenu
CreateWindowExW
DeferWindowPos
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EnumWindows
FillRect
GetClassNameW
GetClientRect
GetCursor
GetDC
GetDesktopWindow
GetDlgItem
ShowWindow

msvcrt

bsearch
calloc
ceil
free
iswspace
malloc
memcpy
memmove
memset
qsort
realloc
towupper
wcsrchr
wcsstr
wcstoul
_wcsicmp
_vsnwprintf
_vsnprintf
_unlock
_onexit
_lock
_initterm
_errno
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIexp
_CIlog

gdi32

SetBkColor
SetBkMode
SetBrushOrgEx
SelectPalette
SetTextColor
StretchBlt
SelectObject
SaveDC
RestoreDC
Rectangle
BitBlt
RealizePalette
GetStockObject
GetObjectW
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHalftonePalette
CreateDIBSection
CreateCompatibleDC
SetStretchBltMode

oleaut32

LPSAFEARRAY_UserUnmarshal
LoadTypeLi
RegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
VarBstrCmp
VarUI4FromStr
VariantClear
VariantInit
VariantTimeToSystemTime
BSTR_UserMarshal
BSTR_UserSize
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal
BSTR_UserFree

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetDesktopFolder
SHChangeNotify
SHBrowseForFolderW
SHBindToParent
DragQueryFileW
CommandLineToArgvW
ShellExecuteExW

ole32

CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateBindCtx
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HICON_UserFree
HICON_UserMarshal
HICON_UserSize
HICON_UserUnmarshal
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
PropVariantClear
PropVariantCopy
ReleaseStgMedium
StringFromGUID2
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoAllowSetForegroundWindow
CLSIDFromString
CoInitializeEx

setupapi

SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW

Exports

Exports

GetBuffer
HasAttrString
Node_ListTree
OSError
ParseTuple
Realloc
_rowbytes_threshold

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e64b73df2cf139c7ddfd225f999ba430

Headers

File Characteristics

Imports

rpcrt4

shlwapi

advapi32

kernel32

winmm

user32

msvcrt

gdi32

oleaut32

version

shell32

ole32

setupapi

Exports

Exports

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 260KB - Virtual size: 259KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 260KB - Virtual size: 259KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 5KB - Virtual size: 4KB