b245bdfc07eb0b27e7ac71d19a831cef30b221e429b6438ffa7e0fd8c672b5cd

Sharing

Copy URL Twitter E-mail

General

Target

b245bdfc07eb0b27e7ac71d19a831cef30b221e429b6438ffa7e0fd8c672b5cd
Size

153KB
MD5

c285974780726c61071a7afd5a0eed36
SHA1

81c3dd12366089cb20aa36017546230b13de3cb0
SHA256

b245bdfc07eb0b27e7ac71d19a831cef30b221e429b6438ffa7e0fd8c672b5cd
SHA512

4da4c706b0d202b71b553c45b87cf84599e444eeb50eeea6ae5bde82fac0cddeee85e5df8d2a3fb4d9dbe4906a09de0133ebe2def1831fdd22371ba14a034f39
SSDEEP

3072:1Di1bJ5GMiLVBT8BPxvTeiyyoldSfK3R/hNEHH:hz3TOJeiyyIR//a

Score

N/A

Malware Config

Signatures

Files

b245bdfc07eb0b27e7ac71d19a831cef30b221e429b6438ffa7e0fd8c672b5cd
.dll windows x86

932dd78c9b717adc4b0267f55b5c428d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcschr
memmove
wcsncmp
_wcsnicmp

user32

GetKeyboardLayout
MonitorFromRect
MonitorFromPoint
MonitorFromWindow
GetMonitorInfoW
GetSubMenu
TrackPopupMenu
GetMenu
CopyRect
PeekMessageW
InvalidateRect
UpdateWindow
RedrawWindow
CheckMenuItem
DestroyWindow
ToAscii
wsprintfW
CheckRadioButton
GetTabbedTextExtentW
GetDlgItemTextW
SetDlgItemTextW
CharLowerBuffW
SetFocus
SendDlgItemMessageW
GetParent
CallWindowProcW
IsCharUpperW
GetKeyboardState
keybd_event
LoadMenuW
DialogBoxParamW
EndDialog
GetDlgItem
EnableWindow
CheckDlgButton
MessageBoxW
GetKeyState
EnableMenuItem
SendMessageW
GetKeyboardLayoutList
DrawTextW
IsWindowVisible
DefWindowProcW
BeginPaint
EndPaint
GetClientRect
ReleaseCapture
SetCursor
GetCursorPos
PtInRect
SetCapture
GetWindowRect
LoadBitmapW
GetCaretPos
ScreenToClient
CreateWindowExW
SetWindowLongW
PostMessageW
ShowWindow
GetWindow
ClientToScreen
SetWindowPos
IntersectRect
GetWindowLongW
UnregisterClassW
DestroyIcon
LoadImageW
LoadCursorW
GetClassInfoExW
RegisterClassExW
LoadStringW
SystemParametersInfoW
GetSystemMetrics
GetDC
ReleaseDC
MessageBeep
DestroyMenu

advapi32

RegCreateKeyW
RegOpenKeyExW
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExW
RegQueryValueExW
RegSetValueExW
RegCloseKey
GetLengthSid
InitializeAcl
AddAccessAllowedAce
IsValidAcl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
IsValidSecurityDescriptor
GetSecurityDescriptorDacl
AllocateAndInitializeSid
IsValidSid
FreeSid

kernel32

GetFileSize
MulDiv
CreateFileMappingW
MapViewOfFile
GetCurrentProcess
OpenProcess
DuplicateHandle
WriteFile
lstrcpyW
lstrcmpW
FlushViewOfFile
GetCurrentProcessId
UnmapViewOfFile
SetEndOfFile
lstrlenW
GlobalAlloc
lstrcpynW
lstrcatW
GlobalFree
GlobalLock
GlobalUnlock
CreateFileW
OpenFileMappingW
LockResource
LoadResource
FindResourceW
GetSystemDefaultLangID
OpenFile
GetSystemDirectoryW
GetFileAttributesW
GetModuleFileNameW
GetWindowsDirectoryW
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
LoadLibraryA
WideCharToMultiByte
GetProcAddress
CreateDirectoryW
LocalFree
GetVersionExW
LocalAlloc
CloseHandle
ReadFile
SetFilePointer
LCMapStringW

gdi32

ExtTextOutW
GetTextExtentPointW
SelectObject
CreateFontIndirectW
CreateDCW
PatBlt
MoveToEx
LineTo
CreatePen
SetTextColor
SetBkColor
DeleteObject
CreateCompatibleDC
BitBlt
DeleteDC
GetStockObject
GetCurrentObject
GetObjectW
GetDeviceCaps

imm32

ImmLockIMCC
ImmGetStatusWindowPos
ImmUnlockIMC
ImmUnlockIMCC
ImmCreateSoftKeyboard
ImmShowSoftKeyboard
ImmDestroySoftKeyboard
ImmGenerateMessage
ImmSetOpenStatus
ImmReleaseContext
ImmGetContext
ImmLockIMC
ImmSetConversionStatus
ImmReSizeIMCC
ImmCreateIMCC
ImmDestroyIMCC
ImmGetConversionListW
ImmEscapeW
ImmSetStatusWindowPos

comdlg32

GetFileTitleW

shell32

SHGetSpecialFolderPathW

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

.text
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sgroup
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ShareDa
Size: 31KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.EXCode
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.upx_
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

932dd78c9b717adc4b0267f55b5c428d

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

kernel32

gdi32

imm32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 80KB - Virtual size: 80KB

.data Size: 1024B - Virtual size: 24KB

.sgroup Size: 10KB - Virtual size: 12KB

.ShareDa Size: 31KB - Virtual size: 32KB

.rsrc Size: 18KB - Virtual size: 20KB

.EXCode Size: 4KB - Virtual size: 4KB

.reloc Size: 7KB - Virtual size: 8KB

.upx_ Size: 1KB - Virtual size: 4KB

.text
Size: 80KB - Virtual size: 80KB

.data
Size: 1024B - Virtual size: 24KB

.sgroup
Size: 10KB - Virtual size: 12KB

.ShareDa
Size: 31KB - Virtual size: 32KB

.rsrc
Size: 18KB - Virtual size: 20KB

.EXCode
Size: 4KB - Virtual size: 4KB

.reloc
Size: 7KB - Virtual size: 8KB

.upx_
Size: 1KB - Virtual size: 4KB