3d3f81cade5742295b3df3e0bf6f819711a4c4dabf5c05c6ce585179fcbd077e

Sharing

Copy URL Twitter E-mail

General

Target

3d3f81cade5742295b3df3e0bf6f819711a4c4dabf5c05c6ce585179fcbd077e
Size

426KB
MD5

757f205e8cc1927da744973b238368e0
SHA1

c0ba6547d025dec99c2689a2a565eb2fe7f02e0f
SHA256

3d3f81cade5742295b3df3e0bf6f819711a4c4dabf5c05c6ce585179fcbd077e
SHA512

2e6e45152aea2b7bba064f12b3d98d2cc725ad0d3ec21835ceac0caeeba5c3ebf6c5381a72fc8ddd39713aa53d64982b253d07bbcc245a8cd4e9fb22397de88c
SSDEEP

12288:nnYqx2kGOGzBrcYIOAXx5Q3SMz4O0JvGpZz:nnYqh54rcfOoEiC+YZ

Score

N/A

Malware Config

Signatures

Files

3d3f81cade5742295b3df3e0bf6f819711a4c4dabf5c05c6ce585179fcbd077e
.dll windows x86

e64b73df2cf139c7ddfd225f999ba430

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_AddRef
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
NdrOleFree
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect

shlwapi

PathMatchSpecW
PathParseIconLocationW
PathRemoveExtensionW
PathRemoveFileSpecW
PathRenameExtensionW
SHStrDupW
StrCSpnW
StrCmpNIW
StrCmpW
StrRetToBufW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathAppendW
PathAddBackslashW
StrStrW

advapi32

GetTraceEnableLevel
GetTraceLoggerHandle
InitializeAcl
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
RegisterTraceGuidsW
TraceEvent
UnregisterTraceGuids
GetTraceEnableFlags

kernel32

SetUnhandledExceptionFilter
SizeofResource
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
WriteFile
lstrcmpiW
lstrlenW
WaitForMultipleObjects
CloseHandle
CompareFileTime
CompareStringW
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetLogicalDriveStringsW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GetVolumeInformationW
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingW
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadLocale

winmm

PlaySoundW

user32

PeekMessageW
PostMessageW
PostThreadMessageW
RegisterDeviceNotificationW
RegisterWindowMessageW
ReleaseDC
RemovePropW
SendDlgItemMessageW
SendMessageW
SetCursor
SetDlgItemTextW
SetFocus
OffsetRect
SetPropW
SetWinEventHook
SetWindowLongW
SetWindowPos
SetWindowTextW
GetLastActivePopup
SystemParametersInfoW
TranslateMessage
UnhookWinEvent
UnregisterClassA
UnregisterDeviceNotification
MsgWaitForMultipleObjects
MoveWindow
MonitorFromRect
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadCursorW
IsWindowVisible
IsWindowEnabled
IsWindow
IsDlgButtonChecked
InvalidateRect
IntersectRect
GetWindowTextW
GetWindowTextLengthW
GetWindowRect
GetWindowLongW
GetWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSysColor
GetPropW
GetParent
GetMonitorInfoW
SetForegroundWindow
GetMessageW
AllowSetForegroundWindow
BeginDeferWindowPos
CharNextW
CharUpperBuffW
CharUpperW
CopyImage
CreateDialogParamW
CreatePopupMenu
CreateWindowExW
DeferWindowPos
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EnumWindows
FillRect
GetClassNameW
GetClientRect
GetCursor
GetDC
GetDesktopWindow
GetDlgItem
ShowWindow

msvcrt

bsearch
calloc
ceil
free
iswspace
malloc
memcpy
memmove
memset
qsort
realloc
towupper
wcsrchr
wcsstr
wcstoul
_wcsicmp
_vsnwprintf
_vsnprintf
_unlock
_onexit
_lock
_initterm
_errno
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIexp
_CIlog

gdi32

SetBkColor
SetBkMode
SetBrushOrgEx
SelectPalette
SetTextColor
StretchBlt
SelectObject
SaveDC
RestoreDC
Rectangle
BitBlt
RealizePalette
GetStockObject
GetObjectW
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHalftonePalette
CreateDIBSection
CreateCompatibleDC
SetStretchBltMode

oleaut32

LPSAFEARRAY_UserUnmarshal
LoadTypeLi
RegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
VarBstrCmp
VarUI4FromStr
VariantClear
VariantInit
VariantTimeToSystemTime
BSTR_UserMarshal
BSTR_UserSize
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal
BSTR_UserFree

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

shell32

SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetDesktopFolder
SHChangeNotify
SHBrowseForFolderW
SHBindToParent
DragQueryFileW
CommandLineToArgvW
ShellExecuteExW

ole32

CoMarshalInterThreadInterfaceInStream
CoRegisterClassObject
CoRevokeClassObject
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoUninitialize
CreateBindCtx
HBITMAP_UserFree
HBITMAP_UserMarshal
HBITMAP_UserSize
HBITMAP_UserUnmarshal
HICON_UserFree
HICON_UserMarshal
HICON_UserSize
HICON_UserUnmarshal
HWND_UserFree
HWND_UserMarshal
HWND_UserSize
HWND_UserUnmarshal
PropVariantClear
PropVariantCopy
ReleaseStgMedium
StringFromGUID2
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoAllowSetForegroundWindow
CLSIDFromString
CoInitializeEx

setupapi

SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW

Exports

Exports

ExtendInittab
Fetch
FromReadWriteObject
InPlaceXor
OverflowError

Sections

.text
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 253KB - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e64b73df2cf139c7ddfd225f999ba430

Headers

File Characteristics

Imports

rpcrt4

shlwapi

advapi32

kernel32

winmm

user32

msvcrt

gdi32

oleaut32

version

shell32

ole32

setupapi

Exports

Exports

Sections

.text Size: 70KB - Virtual size: 69KB

.rdata Size: 253KB - Virtual size: 253KB

.data Size: 70KB - Virtual size: 71KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 70KB - Virtual size: 69KB

.rdata
Size: 253KB - Virtual size: 253KB

.data
Size: 70KB - Virtual size: 71KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 4KB - Virtual size: 3KB