28607657e3722d599d1f63a577a0643a0ea69ba9aad7a8f80c51b5a0c08aba13

Sharing

Copy URL Twitter E-mail

General

Target

28607657e3722d599d1f63a577a0643a0ea69ba9aad7a8f80c51b5a0c08aba13
Size

435KB
MD5

c301ede28cd110e419061f8bb881c300
SHA1

7698a72a6c8e9088e53773543c9334f513c4f590
SHA256

28607657e3722d599d1f63a577a0643a0ea69ba9aad7a8f80c51b5a0c08aba13
SHA512

be16716964ff8f9efd15325dcc11075868407288dd162dedf9ec9a5583db893d5e1df045379fdbabeef750c38d3aa15dcf85bc2f71886b07f153778f91f23c26
SSDEEP

6144:xpynj+SJONzxWWWBbbST3z3PGCtBaHh7Tu5+UzjO/13LnW0zePgcy0dzDt:xwj+SQzxWlXST3zbuHhvv7JnW05D0dP

Score

N/A

Malware Config

Signatures

Files

28607657e3722d599d1f63a577a0643a0ea69ba9aad7a8f80c51b5a0c08aba13
.dll windows x86

2641af45a32c2f3e3e49944c10717a10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetBkColor
SetBkMode
SetBrushOrgEx
SelectPalette
SetTextColor
StretchBlt
SelectObject
SaveDC
RestoreDC
Rectangle
RealizePalette
GetStockObject
GetObjectW
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHalftonePalette
CreateDIBSection
CreateCompatibleDC
SetStretchBltMode
BitBlt

ntdll

wcstoul
wcsstr
wcsrchr
towupper
qsort
memset
memmove
memcpy
iswspace
ceil
bsearch
_wcsicmp
_vsnwprintf
_vsnprintf
RtlUnwind
_CIlog

setupapi

SetupDiOpenDeviceInterfaceW
SetupDiOpenDevRegKey
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList

oleaut32

LPSAFEARRAY_UserUnmarshal
VariantTimeToSystemTime
VariantInit
VariantClear
VarUI4FromStr
VarBstrCmp
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize

shlwapi

PathFindFileNameW
StrStrW
StrRetToBufW
StrCmpW
StrCmpNIW
StrCSpnW
SHStrDupW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW
PathAddBackslashW
PathAppendW
PathFileExistsW
PathIsDirectoryW
PathMatchSpecW
PathFindExtensionW
PathParseIconLocationW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

winmm

PlaySoundW

msvcrt

_onexit
_lock
_initterm
free
malloc
_unlock
_errno
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIexp
realloc
calloc

user32

CharUpperW
CopyImage
CreateDialogParamW
CreatePopupMenu
CreateWindowExW
DeferWindowPos
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EnumWindows
FillRect
GetClassNameW
GetClientRect
GetCursor
CharUpperBuffW
GetDesktopWindow
GetDlgItem
CharNextW
GetMessageW
GetMonitorInfoW
GetParent
GetPropW
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
IntersectRect
InvalidateRect
IsDlgButtonChecked
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromRect
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageW
PostMessageW
PostThreadMessageW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseDC
RemovePropW
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetPropW
SetWinEventHook
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
UnhookWinEvent
UnregisterClassA
UnregisterDeviceNotification
BeginDeferWindowPos
AllowSetForegroundWindow
GetDC
GetLastActivePopup

advapi32

GetTraceEnableFlags
UnregisterTraceGuids
TraceEvent
RegisterTraceGuidsW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
InitializeAcl
GetTraceLoggerHandle
GetTraceEnableLevel

shell32

CommandLineToArgvW
DragQueryFileW
SHBindToParent
SHBrowseForFolderW
SHChangeNotify
ShellExecuteExW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetDesktopFolder

kernel32

GetLocalTime
CloseHandle
CompareFileTime
lstrlenW
lstrcmpiW
WriteFile
WaitForMultipleObjects
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateProcess
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OutputDebugStringA
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
CompareStringW
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetLongPathNameW
GetLogicalDriveStringsW
GetVolumeInformationW
GetLastError
GetFileSize
GetFileAttributesW
GetEnvironmentVariableW
GetDriveTypeW
GetDateFormatW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCommandLineA
FreeLibraryAndExitThread
FreeLibrary
FormatMessageW
FlushInstructionCache
FindResourceW
FindResourceExW
FindNextFileW
FindClose
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitProcess
EnterCriticalSection
DisableThreadLibraryCalls
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateMutexW
CreateFileMappingW
CreateEventW
CreateDirectoryW
CopyFileExW

ole32

HICON_UserSize
HICON_UserUnmarshal
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
PropVariantClear
PropVariantCopy
ReleaseStgMedium
StringFromGUID2
HICON_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserSize
HBITMAP_UserMarshal
HBITMAP_UserFree
CreateBindCtx
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoAllowSetForegroundWindow
CLSIDFromString
HICON_UserMarshal

rpcrt4

NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Connect
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerQueryInterface
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrOleAllocate
NdrOleFree
CStdStubBuffer_CountRefs

Exports

Exports

IncrementalDecoder
Number_Power
ReadLastObjectFromFile
SoftSpace
ValueError
get_interlace_type
set_flush
set_sig_bytes

Sections

.text
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2641af45a32c2f3e3e49944c10717a10

Headers

File Characteristics

Imports

gdi32

ntdll

setupapi

oleaut32

shlwapi

version

winmm

msvcrt

user32

advapi32

shell32

kernel32

ole32

rpcrt4

Exports

Exports

Sections

.text Size: 75KB - Virtual size: 75KB

.rdata Size: 256KB - Virtual size: 256KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 75KB - Virtual size: 75KB

.rdata
Size: 256KB - Virtual size: 256KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 4KB - Virtual size: 4KB