2d10bf1dbab6851bec393a23650dbd7d44f7c25e8c8abd880d9363d7b6fc89ee

Sharing

Copy URL Twitter E-mail

General

Target

2d10bf1dbab6851bec393a23650dbd7d44f7c25e8c8abd880d9363d7b6fc89ee
Size

418KB
MD5

b3e7d0d48ba0e593f9c9b951157ebc50
SHA1

d3dc9d07cd9c745496fbea4beffee37108f0548d
SHA256

2d10bf1dbab6851bec393a23650dbd7d44f7c25e8c8abd880d9363d7b6fc89ee
SHA512

f687bd69d3965b306b0aba834fa993a6c71fde220d132abd2a63f93f39c91751806068e4d7a6111f7816cc01a7ef8df051f3111d57697a3d6aa963573234c909
SSDEEP

6144:/c0+lXgzGzZrkWj5c9cBfpEVby82CnsxtnxHLMAdqZluenk5RUPoGR0fQxrf+h:oJFjVw1pOHLMibik56PxCN

Score

N/A

Malware Config

Signatures

Files

2d10bf1dbab6851bec393a23650dbd7d44f7c25e8c8abd880d9363d7b6fc89ee
.dll windows x86

823db647e23248a90fc3c3a352bacada

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkColor
CreateSolidBrush

shlwapi

PathCompactPathExW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

advapi32

LookupPrivilegeValueW
StartServiceW
SetTokenInformation
SetSecurityDescriptorSacl
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
CloseServiceHandle
ControlService
CreateProcessAsUserW
DuplicateTokenEx
FreeSid
GetUserNameW
InitializeSecurityDescriptor
OpenProcessToken
OpenSCManagerW
OpenServiceW
QueryServiceStatusEx
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW

wininet

HttpAddRequestHeadersA
HttpOpenRequestW
HttpQueryInfoW
HttpSendRequestW
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetQueryDataAvailable
InternetQueryOptionW
InternetReadFile
InternetSetOptionW
InternetSetStatusCallbackW

kernel32

WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitNamedPipeW
WaitForSingleObject
WaitForMultipleObjects
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateThread
TerminateProcess
SystemTimeToFileTime
SetUnhandledExceptionFilter
AllocConsole
CancelIo
CloseHandle
CompareStringA
CompareStringW
CopyFileW
CreateEventA
CreateEventW
CreateFileA
CreateMutexW
CreateProcessW
CreateThread
CreateToolhelp32Snapshot
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
EnterCriticalSection
EnumSystemLocalesA
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatA
GetDateFormatW
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetLongPathNameW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetStringTypeA
GetStringTypeExW
GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalFree
MoveFileExW
MoveFileW
MultiByteToWideChar
OpenEventA
OpenMutexW
OpenProcess
OutputDebugStringW
Process32FirstW
Process32NextW
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
ResetEvent
RtlUnwind
SearchPathW
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle

rpcrt4

UuidCreate
UuidFromStringW
UuidToStringW
RpcStringFreeW

user32

SetActiveWindow
SendMessageW
PostMessageW
SetTimer
SetDlgItemTextW
SetWindowPos
SetWindowTextW
ShowWindow
wsprintfW
SetForegroundWindow
BringWindowToTop
CopyRect
CreateDialogParamW
CreateWindowExW
DestroyWindow
DialogBoxParamW
EnableWindow
EndDialog
ExitWindowsEx
OffsetRect
GetDesktopWindow
GetDlgItem
GetDlgItemTextW
GetParent
GetSystemMetrics
GetWindowRect
IsWindow
KillTimer
LoadImageW
LoadStringW
MessageBoxW
GetClientRect

shell32

SHGetFolderPathW
ShellExecuteExW
ShellExecuteW
CommandLineToArgvW
SHCreateDirectoryExW

ole32

CoUninitialize
CoInitializeEx

Exports

Exports

FromObject
FromString
ReadObjectFromFile
SimpleParseFile
State_Delete
StringFlags
String_Fini

Sections

.text
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 249KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

823db647e23248a90fc3c3a352bacada

Headers

File Characteristics

Imports

gdi32

shlwapi

version

advapi32

wininet

kernel32

rpcrt4

user32

shell32

ole32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 64KB

.rdata Size: 249KB - Virtual size: 248KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 29KB - Virtual size: 29KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 64KB

.rdata
Size: 249KB - Virtual size: 248KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 29KB - Virtual size: 29KB

.reloc
Size: 4KB - Virtual size: 3KB