d7b92b63a6f6cc90965b5004915dbcdaa33b9b2819d051f2493f1a198a607a52

Sharing

Copy URL Twitter E-mail

General

Target

d7b92b63a6f6cc90965b5004915dbcdaa33b9b2819d051f2493f1a198a607a52
Size

267KB
MD5

cd5f6fb58fffa9544d4e275bdd2e91a0
SHA1

f4ab8a0062770d0a0e629d61fd45021436a59ca4
SHA256

d7b92b63a6f6cc90965b5004915dbcdaa33b9b2819d051f2493f1a198a607a52
SHA512

162f4938e4f4881ca9aad253d493fc658f7bdc9b6e089cebf2345c2ddaf39f1185890f54dbe3068693c1b7ba41e433824fdf43fc0144e82d01ad05704a2917ac
SSDEEP

6144:ZFwCF+Z6G6/q3l67S84a1Ikuc2Wup+a7088GbZZbT19rH:ZG6o67SRNuugrGVZbPrH

Score

N/A

Malware Config

Signatures

Files

d7b92b63a6f6cc90965b5004915dbcdaa33b9b2819d051f2493f1a198a607a52
.dll windows x86

cf444bc1dabb4ac8ad8740c57e91188f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrConformantVaryingStructUnmarshall
NdrConformantStringUnmarshall
RpcBindingFromStringBindingA
UuidFromStringA

secur32

InitializeSecurityContextW
RevertSecurityContext
AcceptSecurityContext
ImportSecurityContextA

oleaut32

VarCyCmpR8
VarUI2FromR8
VarDateFromBool
VarUI1FromUI2

rasapi32

RasSetEapUserDataW
RasSetCredentialsA
RasRenameEntryA
RasGetAutodialAddressA

ole32

OleGetIconOfFile
StringFromIID
CoTaskMemFree
OleConvertIStorageToOLESTREAMEx

shell32

ExtractIconW
ord80
ord25
SHChangeNotify

imm32

ImmRequestMessageA
ImmConfigureIMEA
ImmAssociateContextEx
ImmGetCandidateListCountW

glu32

gluBeginPolygon
gluScaleImage
gluDeleteQuadric
gluLookAt

opengl32

glEnd
glVertex3i
glGenLists
glRasterPos4s

msvcrt

_exit
_time64
isxdigit
toupper
_mbctoupper

wininet

HttpSendRequestW
InternetSetOptionA
FtpFindFirstFileA

shlwapi

PathIsPrefixW
PathIsContentTypeA
StrCmpNIA
PathFindExtensionW
ChrCmpIA
PathIsUNCServerW

comctl32

ImageList_LoadImageW
PropertySheetA
ord6
ImageList_SetIconSize

kernel32

GetEnvironmentVariableW
GetSystemDefaultUILanguage
GetLastError
GetComputerNameExW
lstrcmpiW
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCPInfo

user32

ReleaseDC
GetDC

gdi32

ExtFloodFill
GetPixel
CreateCompatibleBitmap
SelectObject
DeleteObject
GetDIBColorTable
GetTextFaceA
OffsetRgn
SetEnhMetaFileBits
DeleteDC
SetPixel
CreateCompatibleDC

comdlg32

PrintDlgExA
GetOpenFileNameW
CommDlgExtendedError
ChooseFontA

advapi32

FlushTraceW
CryptEnumProvidersW
OpenTraceA
LsaSetInformationPolicy

Exports

Exports

AlgaIdolelmsi
AlpsbearwopssitsCaffrobsMoraBansGuffsuetNabeTogsfoy
EmesYutzZedsOafsBlahMindBortStyetonshillSpedFurlnix
FortAglyDaysPansCuifauldBelshobssledholeCardSwagwon
GermAddshaw
RodsChairashOkraHarkSpunGaeddullRuleteleLestruthSetsmas
ScadhapsSnipBuhlTunaBombKitsPraycwmsCurbSassFrogHornSawnwo
ShwaTeamFusePikaJossBrieThusAwry

Sections

.pdata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf444bc1dabb4ac8ad8740c57e91188f

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.pdata Size: - Virtual size: 512B

.pdata Size: - Virtual size: 512B

.pdata Size: - Virtual size: 512B

.rdata Size: 244KB - Virtual size: 243KB

.reloc Size: 22KB - Virtual size: 21KB

.pdata
Size: - Virtual size: 512B

.pdata
Size: - Virtual size: 512B

.pdata
Size: - Virtual size: 512B

.rdata
Size: 244KB - Virtual size: 243KB

.reloc
Size: 22KB - Virtual size: 21KB