1ab196bd322d8154a16d24ccf062e3e879a025fca70228b8a9596ecb0742d946

Sharing

Copy URL Twitter E-mail

General

Target

1ab196bd322d8154a16d24ccf062e3e879a025fca70228b8a9596ecb0742d946
Size

842KB
MD5

073bb33fb3c5c52e9d38d31ec3f67830
SHA1

580c29bdf414d02bdfcd5e1eff49a464ca915785
SHA256

1ab196bd322d8154a16d24ccf062e3e879a025fca70228b8a9596ecb0742d946
SHA512

225ac74581cbc738e9b43f3d070bf124090782eb92e7020c2dd812fa1898c261f59122c756c1e366d50d6f2ae4ddb5d2c12cd72955f561bfb6d3d1c22ca28789
SSDEEP

24576:gYsrnSZDr44nnFqSFTYgKgtfm1c9aSWIjR+75FKuKn:gYsrnSh84nnF/TYJCeKeIjR+9FKuK

Score

N/A

Malware Config

Signatures

Files

1ab196bd322d8154a16d24ccf062e3e879a025fca70228b8a9596ecb0742d946
.dll windows x86

ad1ad8fb86ae8d8845bbd16dcc7b509a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GlobalHandle
FreeEnvironmentStringsA
UnlockFile
SetEndOfFile
MulDiv
lstrcmpA
WriteFile
InterlockedDecrement
GlobalUnlock
SetUnhandledExceptionFilter
GetCommandLineA
FlushFileBuffers
TlsGetValue
ReadFile
GetACP
SetErrorMode
CloseHandle
RtlUnwind
GetLocaleInfoA
GetConsoleOutputCP
GetFileTime
TerminateProcess
VirtualAlloc
LCMapStringA
GetStdHandle
LeaveCriticalSection
GlobalFree
HeapDestroy
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
FreeResource
QueryPerformanceCounter
GetSystemInfo
GetVersionExA
FileTimeToSystemTime
TlsAlloc
CreateFileA
DeleteCriticalSection
SetStdHandle
GetEnvironmentStrings
GetThreadLocale
FindClose
ConvertDefaultLocale
Sleep
HeapReAlloc
HeapCreate
HeapSize
HeapFree
InitializeCriticalSection
SetEnvironmentVariableA
GetModuleHandleA
LockFile
WriteConsoleA
FileTimeToLocalFileTime
DuplicateHandle
GetCurrentProcessId
UnhandledExceptionFilter
InterlockedExchange
TlsSetValue
InterlockedIncrement
SystemTimeToFileTime
IsDebuggerPresent
GlobalLock
SetHandleCount
LoadResource
HeapAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
LockResource
GetSystemDirectoryA
VirtualFree
GlobalDeleteAtom
GetConsoleCP
GlobalReAlloc
LocalReAlloc
SetFileTime
FreeLibrary
GetStartupInfoA
GetCurrentThread
TlsFree
LocalFileTimeToFileTime
GetWindowsDirectoryA
GetStringTypeA
GlobalFlags
RaiseException
GlobalAlloc
GetConsoleMode
GetVersion
EnumResourceLanguagesW
SizeofResource
VirtualQuery
SetLastError
GetFileType
EnterCriticalSection
CompareStringA
GetFileSize
SetFilePointer
lstrcpyA
LocalFree
GetCurrentThreadId
LocalAlloc
LoadLibraryA
GetProcAddress
GetLastError
lstrcatA
lstrlenA
ExitProcess

user32

PtInRect
DestroyIcon
GetLastActivePopup
GetWindowRect
GetDC
GetWindow
InflateRect
IsWindow
ValidateRect
BeginDeferWindowPos
AdjustWindowRectEx
GetNextDlgTabItem
GetTopWindow
MessageBeep
SetCursor
SetRectEmpty
EnableMenuItem
GetScrollPos
SetActiveWindow
GetWindowRgn
GetWindowPlacement
EqualRect
LockWindowUpdate
CreatePopupMenu
GetForegroundWindow
WindowFromPoint
IsZoomed
UnpackDDElParam
GetWindowDC
GetScrollRange
SetParent
GetSystemMenu
TrackPopupMenu
ReleaseDC
GetMenuCheckMarkDimensions
GetParent
ScreenToClient
FillRect
GetMenuState
SetCapture
SetScrollInfo
DeferWindowPos
SetFocus
GetDlgItem
GetScrollInfo
SetMenu
UnregisterClassA
GetSystemMetrics
MapDialogRect
GetMenuItemCount
SendDlgItemMessageA
GetDCEx
InvalidateRect
GetMessageTime
SetTimer
KillTimer
CheckMenuItem
SetScrollRange
DestroyMenu
GetSysColor
TranslateMessage
GetCursorPos
PostQuitMessage
ShowOwnedPopups
ClientToScreen
UpdateWindow
SetWindowRgn
GetMessagePos
CopyRect
GetKeyState
IsWindowVisible
SetWindowContextHelpId
GetNextDlgGroupItem
DestroyWindow
SystemParametersInfoA
GetClientRect
BeginPaint
ReuseDDElParam
SetWindowPos
DrawIcon
DeleteMenu
IsChild
MapWindowPoints
ScrollWindow
IntersectRect
SetMenuItemBitmaps
GetMenu
GetSysColorBrush
GetWindowThreadProcessId
EndPaint
SetForegroundWindow
MoveWindow
ShowScrollBar
CharUpperA
IsWindowEnabled
GetMenuItemID
UnhookWindowsHookEx
GetDlgCtrlID
GetFocus
SetScrollPos
GetSubMenu
ShowWindow
ReleaseCapture
InvalidateRgn
BringWindowToTop
EndDialog
IsRectEmpty
EndDeferWindowPos
CallNextHookEx
IsIconic
RedrawWindow
OffsetRect
GetActiveWindow
GetDesktopWindow
GetCapture
SetRect

gdi32

StretchDIBits
PatBlt
DeleteDC
ScaleViewportExtEx
SetViewportExtEx
GetRgnBox
SetBkColor
GetDeviceCaps
GetMapMode
SetTextColor
ScaleWindowExtEx
CreateRectRgnIndirect
ExcludeClipRect
CombineRgn
IntersectClipRect
CreateEllipticRgn
CreateSolidBrush
CreateBitmap
DeleteObject
SetBkMode
Escape
SetViewportOrgEx
CreatePatternBrush
Ellipse
SelectClipRgn
SetRectRgn
CreateCompatibleBitmap
RestoreDC
GetStockObject
ExtSelectClipRgn
GetPixel
RectVisible
GetClipBox
SelectObject
SetMapMode
OffsetRgn
CreateCompatibleDC
GetBkColor
GetTextColor
OffsetViewportOrgEx
DPtoLP
GetWindowExtEx
SetWindowExtEx
SaveDC
BitBlt
CreateRectRgn
PtVisible

advapi32

SetFileSecurityW
RegCloseKey

ole32

CoGetClassObject
CoCreateInstance
OleUninitialize
CLSIDFromProgID
OleIsCurrentClipboard
CLSIDFromString
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleInitialize
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
OleFlushClipboard
CreateILockBytesOnHGlobal
CoRevokeClassObject

oleaut32

SysAllocString
SysFreeString
VariantInit
SysAllocStringLen
VariantTimeToSystemTime
OleCreateFontIndirect
OleLoadPicture
SafeArrayDestroy
VariantClear
VariantCopy
SysStringLen
VariantChangeType
SystemTimeToVariantTime

comctl32

ImageList_LoadImageW

shlwapi

PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW

Sections

.text
Size: 551KB - Virtual size: 550KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 259KB - Virtual size: 279KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ad1ad8fb86ae8d8845bbd16dcc7b509a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

comctl32

shlwapi

Sections

.text Size: 551KB - Virtual size: 550KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 259KB - Virtual size: 279KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 551KB - Virtual size: 550KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 259KB - Virtual size: 279KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 3KB - Virtual size: 3KB