3427133decdb3dd0093a9a1d5e9e7a14d9ba5f77eee8280a8b304af187e19c56

Sharing

Copy URL Twitter E-mail

General

Target

3427133decdb3dd0093a9a1d5e9e7a14d9ba5f77eee8280a8b304af187e19c56
Size

849KB
MD5

3f9421fcb3e503391725305895d16890
SHA1

a5da3cfc6c3bd904a279570e0f0605b4ddb1ed7f
SHA256

3427133decdb3dd0093a9a1d5e9e7a14d9ba5f77eee8280a8b304af187e19c56
SHA512

6a9a4f943165a4e593668039838d194e405f9085892cfd0e4211ac25b158d20639d6091b3e0d04da2e3ec6493fe1f2f63daee0adb302851e9fdd9b12eb3f74c9
SSDEEP

12288:0x8h0RZ46/GKjUwjDmeri44kH2aGCDZRmPpTt3pyPcJyHvpBgcl1IjBQZaweI0wX:0eh0RZqUjDmerB4BFCFsPpTlGsB35GX

Score

N/A

Malware Config

Signatures

Files

3427133decdb3dd0093a9a1d5e9e7a14d9ba5f77eee8280a8b304af187e19c56
.dll windows x86

16d14cca1cb3190efd48de69ba2982c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SetFilePointer
GetCommandLineA
MulDiv
GetProcessHeap
UnhandledExceptionFilter
GetCommandLineW
GetCurrentThread
GetStdHandle
GetEnvironmentStrings
ReadFile
GetCurrentThreadId
GlobalLock
SetLastError
HeapReAlloc
LoadResource
InterlockedIncrement
SetStdHandle
LCMapStringA
SetUnhandledExceptionFilter
GetStartupInfoA
GlobalFree
GlobalReAlloc
GetVersion
FreeLibrary
GetConsoleCP
SetEnvironmentVariableA
FindClose
LocalFileTimeToFileTime
GlobalUnlock
RaiseException
GlobalHandle
DeleteCriticalSection
GetCurrentProcessId
GlobalDeleteAtom
FlushFileBuffers
GetModuleFileNameA
GetSystemDirectoryA
TlsFree
LockFile
SetHandleCount
WriteFile
LocalReAlloc
CloseHandle
FreeEnvironmentStringsA
GetStringTypeA
InterlockedDecrement
GetVersionExA
GetTimeZoneInformation
FreeResource
UnlockFile
VirtualQuery
GetFileSize
lstrlenA
CompareStringA
HeapSize
FileTimeToSystemTime
ExitProcess
DuplicateHandle
GetWindowsDirectoryA
GetFileType
lstrcmpA
HeapAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
RtlUnwind
VirtualFree
GetConsoleMode
GetLastError
TerminateProcess
SizeofResource
SystemTimeToFileTime
SetFileTime
GetConsoleOutputCP
ConvertDefaultLocale
HeapFree
InterlockedExchange
CreateFileA
GlobalFlags
GetFileTime
EnterCriticalSection
LockResource
GetSystemInfo
LeaveCriticalSection
GetLocaleInfoA
Sleep
TlsGetValue
EnumResourceLanguagesW
SetEndOfFile
GetACP
GetThreadLocale
InitializeCriticalSection
QueryPerformanceCounter
FileTimeToLocalFileTime
TlsSetValue
HeapCreate
SetErrorMode
TlsAlloc
HeapDestroy
VirtualProtect
LocalFree
GetModuleHandleA
GetOEMCP
FindAtomA
AddAtomA
LocalAlloc
WriteConsoleA
LoadLibraryA
GetProcAddress
ReadConsoleInputA
GlobalAlloc
GetTickCount

user32

SetParent
DestroyWindow
BringWindowToTop
GetMenuState
InflateRect
GetWindowPlacement
ScreenToClient
CopyRect
GetTopWindow
TrackPopupMenu
GetWindowRect
SetWindowContextHelpId
GetKeyState
GetWindowRgn
GetMenuCheckMarkDimensions
SetWindowPos
SetScrollPos
SetScrollRange
DeferWindowPos
LockWindowUpdate
UpdateWindow
DestroyIcon
IntersectRect
FillRect
GetLastActivePopup
SetWindowRgn
SetActiveWindow
OffsetRect
GetSysColorBrush
BeginDeferWindowPos
UnhookWindowsHookEx
CheckMenuItem
SetMenu
ClientToScreen
SendDlgItemMessageA
KillTimer
GetFocus
DeleteMenu
CreatePopupMenu
CallNextHookEx
PtInRect
GetSystemMetrics
ValidateRect
GetWindowThreadProcessId
GetMessagePos
IsRectEmpty
GetDlgCtrlID
GetScrollRange
DestroyMenu
InvalidateRect
ShowWindow
EnableMenuItem
InvalidateRgn
GetWindow
SetTimer
GetNextDlgTabItem
GetMessageTime
IsZoomed
GetWindowDC
GetClientRect
BeginPaint
RedrawWindow
ReuseDDElParam
AdjustWindowRectEx
EndDeferWindowPos
GetMenu
GetDC
IsIconic
SetCapture
UnregisterClassA
GetDesktopWindow
GetMenuItemCount
GetSysColor
GetMenuItemID
IsWindow
MessageBeep
GetScrollInfo
WindowFromPoint
MapWindowPoints
MapDialogRect
SetRect
GetActiveWindow
ShowOwnedPopups
IsChild
SetForegroundWindow
GetSystemMenu
GetSubMenu
ScrollWindow
GetDCEx
ReleaseDC
GetCapture
DrawIcon
GetCursorPos
GetParent
SetCursor
ReleaseCapture
GetScrollPos
EqualRect
SetRectEmpty
GetDlgItem
EndPaint
GetNextDlgGroupItem
UnpackDDElParam
SystemParametersInfoA
PostQuitMessage
SetFocus
ShowScrollBar
GetForegroundWindow
MoveWindow
IsWindowVisible
SetScrollInfo
TranslateMessage
IsWindowEnabled
SetMenuItemBitmaps
GetKeyboardType
EndDialog

gdi32

ScaleWindowExtEx
GetBkColor
RestoreDC
SetBkMode
SetBkColor
SaveDC
CreateCompatibleBitmap
GetClipBox
GetStockObject
IntersectClipRect
DeleteDC
SetMapMode
CreateSolidBrush
GetTextColor
DeleteObject
SelectObject
GetDeviceCaps
OffsetRgn
GetWindowExtEx
ExtSelectClipRgn
ExcludeClipRect
CreateBitmap
CreateEllipticRgn
BitBlt
CreateCompatibleDC
CreateRectRgn
PatBlt
SetWindowExtEx
StretchDIBits
RectVisible
SetViewportOrgEx
Ellipse
SetViewportExtEx
CreateRectRgnIndirect
SelectClipRgn
ScaleViewportExtEx
GetMapMode
CreatePatternBrush
GetPixel
Escape
DPtoLP
PtVisible
OffsetViewportOrgEx
SetRectRgn
CombineRgn
GetRgnBox
SetTextColor

advapi32

RegCloseKey
SetFileSecurityW

shell32

DragFinish

ole32

CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
CreateStreamOnHGlobal
CLSIDFromString
CreateILockBytesOnHGlobal
CoCreateInstance
CLSIDFromProgID
OleUninitialize
OleFlushClipboard
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
StgOpenStorageOnILockBytes

oleaut32

VariantTimeToSystemTime
SysStringLen
SafeArrayDestroy
VariantCopy
VariantClear
OleLoadPicture
VariantChangeType
SysAllocStringLen
OleCreateFontIndirect
VariantInit
SysAllocString
SysFreeString
SystemTimeToVariantTime

comctl32

ImageList_LoadImageW

shlwapi

PathIsUNCW
PathRemoveExtensionW
PathFindExtensionW
PathStripToRootW
PathFileExistsW
PathFindFileNameW

wldap32

ord201

userenv

UnloadUserProfile

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16d14cca1cb3190efd48de69ba2982c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

userenv

Sections

.text Size: 474KB - Virtual size: 473KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 343KB - Virtual size: 362KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 474KB - Virtual size: 473KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 343KB - Virtual size: 362KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 3KB - Virtual size: 3KB