11a776e6691bb95365e1485946d714634c8dda1bbf6d3e4a9e8b6e12ea33af15

Sharing

Copy URL Twitter E-mail

General

Target

11a776e6691bb95365e1485946d714634c8dda1bbf6d3e4a9e8b6e12ea33af15
Size

838KB
MD5

fc2bf74603c4f77dcff2ce05dcfa44e0
SHA1

00786552a9ba648ef990f3a583590a9b931ac691
SHA256

11a776e6691bb95365e1485946d714634c8dda1bbf6d3e4a9e8b6e12ea33af15
SHA512

bec82c0a40b881f9a4769b7ecb7ab50c41785a2b1a4359dfd20880f96bee14d81f4dfff1200c0918b4a9938e6ed9e2503aa4f2d5c3d19a35af3690208a19d9e1
SSDEEP

12288:2Zf4CEP3wHpxtzlVowa0MFe16LLJu3e6FFyKY2AkwxH7+BJkHkTQRQ8cq2J:sbEPgHDVDaU6/IZYLzl6oJR9c

Score

N/A

Malware Config

Signatures

Files

11a776e6691bb95365e1485946d714634c8dda1bbf6d3e4a9e8b6e12ea33af15
.dll windows x86

3b92e59a3eee71fd923e8f684e26ddb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
DeleteCriticalSection
GetOEMCP
GlobalUnlock
QueryPerformanceCounter
GetVersionExA
LocalFree
DuplicateHandle
GetConsoleCP
HeapDestroy
FileTimeToSystemTime
LocalAlloc
ReadFile
TlsSetValue
SetHandleCount
SetEndOfFile
CompareStringA
InitializeCriticalSection
lstrcmpA
EnterCriticalSection
FlushFileBuffers
GetSystemInfo
GetStringTypeA
SetUnhandledExceptionFilter
UnlockFile
TlsFree
LocalFileTimeToFileTime
GetVersion
VirtualAlloc
GlobalDeleteAtom
GetEnvironmentStrings
TlsAlloc
GetCommandLineW
RtlUnwind
GetACP
GetLastError
GetProcessHeap
GetStdHandle
TerminateProcess
GetCurrentThreadId
GlobalHandle
GetCommandLineA
GetThreadLocale
FreeLibrary
lstrlenA
Sleep
VirtualFree
LocalReAlloc
HeapFree
GetSystemTimeAsFileTime
GlobalLock
FreeEnvironmentStringsA
SetFilePointer
VirtualQuery
GetFileSize
InterlockedExchange
GetFileType
SetEnvironmentVariableA
LeaveCriticalSection
HeapAlloc
LockFile
SizeofResource
GlobalFlags
GetCurrentProcessId
UnhandledExceptionFilter
GetConsoleOutputCP
CloseHandle
SetStdHandle
LoadResource
GetTimeZoneInformation
LCMapStringA
GetModuleHandleA
HeapSize
WriteFile
ConvertDefaultLocale
GlobalReAlloc
GlobalFree
SystemTimeToFileTime
FreeResource
InterlockedDecrement
IsDebuggerPresent
EnumResourceLanguagesW
MulDiv
GetSystemDirectoryA
FileTimeToLocalFileTime
GetWindowsDirectoryA
SetFileTime
CreateFileA
GetModuleFileNameA
HeapCreate
RaiseException
GetLocaleInfoA
FindClose
SetLastError
HeapReAlloc
LoadLibraryA
GetStartupInfoA
GetFileTime
SetErrorMode
InterlockedIncrement
GlobalAlloc
LockResource
GetCurrentThread
VirtualProtect
LoadLibraryExA
AddAtomA
WriteConsoleA
GetProcAddress
SetConsoleCP
FreeConsole
ReadConsoleInputA
GetTickCount
WriteConsoleInputA
AllocConsole
TlsGetValue
ExitProcess

user32

UnhookWindowsHookEx
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetWindowRect
IsChild
InflateRect
GetFocus
GetScrollInfo
SetCursor
SetScrollRange
DestroyMenu
SetWindowRgn
ReuseDDElParam
EnableMenuItem
IsWindowEnabled
ShowScrollBar
PtInRect
EndDeferWindowPos
IsWindowVisible
TranslateMessage
SetRect
IsIconic
GetNextDlgGroupItem
GetWindowDC
EndPaint
EqualRect
BeginDeferWindowPos
GetSysColorBrush
GetWindowThreadProcessId
GetCapture
SetMenuItemBitmaps
SetWindowContextHelpId
GetMenuState
GetParent
ReleaseDC
GetActiveWindow
ScrollWindow
GetDesktopWindow
CreatePopupMenu
SetMenu
IsZoomed
ScreenToClient
MapDialogRect
PostQuitMessage
GetTopWindow
SetWindowPos
InvalidateRect
IntersectRect
GetSystemMetrics
SetScrollPos
GetCursorPos
GetMessageTime
ReleaseCapture
UpdateWindow
GetMenuItemCount
SetFocus
GetForegroundWindow
GetMenuItemID
GetClientRect
GetKeyState
IsRectEmpty
ShowOwnedPopups
GetScrollPos
GetWindowRgn
ClientToScreen
GetNextDlgTabItem
SystemParametersInfoA
InvalidateRgn
SendDlgItemMessageA
LockWindowUpdate
DrawIcon
GetMenu
GetScrollRange
GetDCEx
SetParent
IsWindow
BeginPaint
DestroyIcon
WindowFromPoint
GetDlgItem
RedrawWindow
MoveWindow
UnpackDDElParam
EndDialog
ShowWindow
CopyRect
GetSubMenu
GetMessagePos
UnregisterClassA
BringWindowToTop
GetWindow
TrackPopupMenu
ValidateRect
CheckMenuItem
GetDC
OffsetRect
GetSystemMenu
SetCapture
CallNextHookEx
SetActiveWindow
SetScrollInfo
GetWindowPlacement
GetMenuCheckMarkDimensions
GetDlgCtrlID
MessageBeep
DeferWindowPos
DestroyWindow
GetLastActivePopup
FillRect
SetTimer
DeleteMenu
SetRectEmpty
KillTimer
SetForegroundWindow

gdi32

GetWindowExtEx
Ellipse
OffsetViewportOrgEx
SelectClipRgn
CombineRgn
DeleteDC
ExtSelectClipRgn
StretchDIBits
CreateRectRgnIndirect
DeleteObject
BitBlt
SetBkColor
SetBkMode
GetMapMode
SelectObject
ExcludeClipRect
CreateEllipticRgn
SaveDC
GetBkColor
ScaleWindowExtEx
Escape
IntersectClipRect
PtVisible
PatBlt
LPtoDP
CreateRectRgn
GetStockObject
GetClipBox
GetPixel
SetMapMode
RectVisible
CreatePatternBrush
GetRgnBox
GetTextColor
SetTextColor
DPtoLP
SetViewportOrgEx
RestoreDC
CreateCompatibleDC
ScaleViewportExtEx
CreateSolidBrush
CreateBitmap
SetWindowExtEx
CreateCompatibleBitmap
GetDeviceCaps
OffsetRgn
SetViewportExtEx
SetRectRgn

advapi32

RegCloseKey
GetFileSecurityW
SetFileSecurityW

shell32

DragAcceptFiles
DragFinish

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoCreateInstance
CoGetClassObject
OleInitialize
OleIsCurrentClipboard
CoTaskMemFree
OleFlushClipboard
CLSIDFromString
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleUninitialize
CoTaskMemAlloc
CoUninitialize
CLSIDFromProgID

oleaut32

VariantCopy
OleLoadPicture
SysAllocStringLen
VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
SystemTimeToVariantTime
VariantClear
SysStringLen
VariantChangeType
VariantInit
SysFreeString

comctl32

ImageList_LoadImageW

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveExtensionW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

userenv

UnloadUserProfile

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b92e59a3eee71fd923e8f684e26ddb8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

userenv

Sections

.text Size: 478KB - Virtual size: 477KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 262KB - Virtual size: 285KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 478KB - Virtual size: 477KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 262KB - Virtual size: 285KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 3KB - Virtual size: 3KB