5676fd6643ecf603ba47748b9c7d4c9a9811826fcce7dd2139bea14e35504494

Sharing

Copy URL Twitter E-mail

General

Target

5676fd6643ecf603ba47748b9c7d4c9a9811826fcce7dd2139bea14e35504494
Size

457KB
MD5

1364826a6d7efe91c17b8141f85555fc
SHA1

23f86e9d3e337b4cf40a72f94073351e8a07015c
SHA256

5676fd6643ecf603ba47748b9c7d4c9a9811826fcce7dd2139bea14e35504494
SHA512

3e4f63810afdaa70cd403e15e7aa1fd30d4ce1f33bafb5537d068266c66e463301b734cd177a7fe2b8159ca005b9a67e279934a4d96f412d2d1091205bbb1527
SSDEEP

12288:8emVb58uoXqTG5+GiRYq6OgspA6Lg6tdPmg:SVl8uoX75JiRMOgs9g+m

Score

N/A

Malware Config

Signatures

Files

5676fd6643ecf603ba47748b9c7d4c9a9811826fcce7dd2139bea14e35504494
.dll windows x86

94edcacea6b988baea6704f4fb31f411

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetShortPathNameW
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameW
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadResource
LocalAlloc
LocalReAlloc
LockResource
MoveFileExW
OutputDebugStringA
GetLocaleInfoA
RaiseException
ReadConsoleOutputW
RemoveDirectoryW
SearchPathW
SetCurrentDirectoryW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleOutputW
WriteConsoleW
WriteFile
_lwrite
lstrcmpW
lstrcmpiW
GetLastError
GetFullPathNameW
GetFileSize
GetFileAttributesW
GetExitCodeProcess
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentProcessId
GetCurrentDirectoryW
GetConsoleScreenBufferInfo
GetConsoleOutputCP
CloseHandle
GetConsoleMode
GetCommandLineW
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FreeConsole
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindClose
FillConsoleOutputCharacterW
ExitProcess
DeviceIoControl
DeleteTimerQueueTimer
CreateThread
CreateMutexW
CreateFileMappingW
CreateFileA
CreateEventW
CreateDirectoryW
CopyFileW
QueryPerformanceCounter

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

GetLengthSid
AllocateAndInitializeSid
CloseServiceHandle
ControlService
CryptSetProvParam
DeleteService
EqualSid
FreeSid
GetTokenInformation
StartServiceW
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegOpenUserClassesRoot
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
OpenProcessToken
LsaStorePrivateData
InitializeSecurityDescriptor
InitializeAcl
AddAccessAllowedAce

setupapi

SetupCloseInfFile
SetupCommitFileQueueW
SetupCopyOEMInfW
SetupDefaultQueueCallbackW
SetupDiBuildDriverInfoList
SetupDiClassNameFromGuidW
SetupDiCreateDeviceInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetActualSectionToInstallW
SetupDiGetClassDevsW
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiOpenClassRegKey
SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetSelectedDevice
SetupFindFirstLineW
SetupFindNextMatchLineW
SetupGetFieldCount
SetupGetIntField
SetupGetLineCountW
SetupGetStringFieldW
SetupGetTargetPathW
SetupInitDefaultQueueCallbackEx
SetupInstallFilesFromInfSectionW
SetupInstallFromInfSectionW
SetupInstallServicesFromInfSectionW
SetupOpenAppendInfFileW
SetupOpenFileQueue
SetupOpenInfFileW
SetupPromptReboot
SetupQueueCopyIndirectW
SetupQueueCopyW
SetupTermDefaultQueueCallback
SetupCloseFileQueue
CM_Setup_DevNode
CM_Query_And_Remove_SubTreeW
CM_Locate_DevNodeW
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
CM_Get_DevNode_Status
CMP_WaitNoPendingInstallEvents

gdi32

GetTextMetricsW
GetObjectW
GetDeviceCaps
EndDoc
DeleteObject
DeleteDC
CreateCompatibleDC
PolylineTo
SelectObject
SetLayout
StartDocW
CreateCompatibleBitmap

user32

AllowSetForegroundWindow
CallWindowProcW
CharLowerW
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DestroyCaret
DestroyIcon
DestroyWindow
DragObject
DrawTextExW
EndDialog
GetDC
GetDlgItem
GetIconInfo
GetParent
GetSysColor
GetSystemMetrics
GetUserObjectInformationW
GetWindowLongW
HiliteMenuItem
InvalidateRect
IsDlgButtonChecked
LoadBitmapW
LoadIconW
MessageBoxW
PostMessageW
RegisterClassExW
ReleaseDC
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetMenuDefaultItem
SetScrollRange
SetWindowLongW
SetWindowTextW
ShowWindow
SystemParametersInfoW
UnloadKeyboardLayout
UnregisterClassA

shell32

ShellExecuteExW
SHGetFolderPathW
CommandLineToArgvW

Exports

Exports

ExecCodeModuleEx
Filename
Iter_Next
Number_AsSsize_t
Parse
convert_from_struct_tm
get_text
get_user_width_max

Sections

.text
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

94edcacea6b988baea6704f4fb31f411

Headers

File Characteristics

Imports

kernel32

version

advapi32

setupapi

gdi32

user32

shell32

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 96KB

.rdata Size: 217KB - Virtual size: 217KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 96KB - Virtual size: 96KB

.rdata
Size: 217KB - Virtual size: 217KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 4KB