f91f69c530292b88661b8f472698fc27a819d45667b4a183aad600b2f1bfc639

Sharing

Copy URL Twitter E-mail

General

Target

f91f69c530292b88661b8f472698fc27a819d45667b4a183aad600b2f1bfc639
Size

1.1MB
MD5

65f48b5f662feb47f6b42dbfe4eb090e
SHA1

64a55160839c38a0bedf124f98dff17a89be9c3f
SHA256

f91f69c530292b88661b8f472698fc27a819d45667b4a183aad600b2f1bfc639
SHA512

70eb86e4ff2aef89a46010d24857c23023ae9b5512d9bdddcf87b98cba67ee2582d0810ef3467adad9465143d369f222f3f3d5cd4e843d05ef7d23967ae6ea34
SSDEEP

24576:bkigJwwUMYVg+oYejoKbxiR3zUp6RXRG4VvPq:1caO+oZjziR3zUpmXZPq

Score

N/A

Malware Config

Signatures

Files

f91f69c530292b88661b8f472698fc27a819d45667b4a183aad600b2f1bfc639
.dll windows x86

007de5ad3c5c24b17838097877e84577

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
GetClassNameA
FindWindowW
EnumWindows
FindWindowA
MessageBoxA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

advapi32

StartServiceA
CreateServiceA
OpenServiceA
ChangeServiceConfigA

kernel32

WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetConsoleMode
GetConsoleCP
HeapSize
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
TlsSetValue
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
CreateFileA
CloseHandle
lstrcpyA
ExitProcess
HeapAlloc
HeapFree
GetTickCount
GetProcessHeap
Sleep
GetModuleHandleA
VirtualProtect
GetCurrentDirectoryA
GetCurrentThreadId
VirtualQuery
WideCharToMultiByte
MultiByteToWideChar
lstrcmpiA
LoadLibraryA
GetModuleFileNameA
SetEvent
GetLastError
OpenEventA
GetFileSize
CreateMutexW
lstrcmpA
TlsGetValue
FreeLibrary
CreateProcessW
WriteFile
GetFileType
LoadLibraryW
CreateProcessA
ReadFile
GetSystemDirectoryA
CreateFileW
lstrcatA
GetACP
CreateDirectoryA
GetProcAddress
DisableThreadLibraryCalls
GetLocalTime
InterlockedExchangeAdd
CreateMutexA
TlsAlloc
TlsFree
QueryPerformanceFrequency
QueryPerformanceCounter
IsBadReadPtr
DeleteFileA
SetFilePointer
GetCommandLineA
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetOEMCP
IsValidCodePage
GetModuleHandleW
SetLastError
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
HeapDestroy
GetStdHandle
LCMapStringA
LCMapStringW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
SetHandleCount
SetStdHandle

winmm

timeGetTime

Exports

Exports

10
AnInitSet
WahCloseApcHelper
WahCloseHandleHelper
WahCloseNotificationHandleHelper
WahCloseSocketHandle
WahCloseThread
WahCompleteRequest
WahCreateHandleContextTable
WahCreateNotificationHandle
WahCreateSocketHandle
WahDestroyHandleContextTable
WahDisableNonIFSHandleSupport
WahEnableNonIFSHandleSupport
WahEnumerateHandleContexts
WahInsertHandleContext
WahNotifyAllProcesses
WahOpenApcHelper
WahOpenCurrentThread
WahOpenHandleHelper
WahOpenNotificationHandleHelper
WahQueueUserApc
WahReferenceContextByHandle
WahRemoveHandleContext
WahWaitForNotification

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.DS0
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

007de5ad3c5c24b17838097877e84577

Headers

DLL Characteristics

File Characteristics

Imports

user32

version

advapi32

kernel32

winmm

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 4KB - Virtual size: 14KB

.DS0 Size: 939KB - Virtual size: 938KB

.reloc Size: 4KB - Virtual size: 3KB

.rsrc Size: 52KB - Virtual size: 52KB

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 4KB - Virtual size: 14KB

.DS0
Size: 939KB - Virtual size: 938KB

.reloc
Size: 4KB - Virtual size: 3KB

.rsrc
Size: 52KB - Virtual size: 52KB