a523c8a8570b5f44019b83e2215afdf2dc2d23e779fcacc25b5c71d9c0b64b7f

Sharing

Copy URL Twitter E-mail

General

Target

a523c8a8570b5f44019b83e2215afdf2dc2d23e779fcacc25b5c71d9c0b64b7f
Size

158KB
MD5

604d72b6bc2d21f539ea812b29f2d877
SHA1

9f123ed265e9eb2b0521f3d9a10db9916bacd67b
SHA256

a523c8a8570b5f44019b83e2215afdf2dc2d23e779fcacc25b5c71d9c0b64b7f
SHA512

d895996e6cc10f6974975dc54d76ced8f6e5313f02ea7798f3ed1a7b855c22cc1d2756457e5ffe0bb0fc5ec826b4aeb2d5a5397b8fc735f24dfca7187e8358c9
SSDEEP

3072:NB52KQQkqoV5psY8sDvwORlDuXzsi2lokxPDkQp3c13F3QjSJDo9Sd:TQAkHEqvw+gXI/lokhDkQp3gF3QWs9S

Score

N/A

Malware Config

Signatures

Files

a523c8a8570b5f44019b83e2215afdf2dc2d23e779fcacc25b5c71d9c0b64b7f
.dll windows x86

8358b810ecdf3e97ff2b4181f5066ec1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiSetDeviceRegistryPropertyW
CM_Get_Child
CM_Get_Depth
CM_Get_DevNode_Registry_PropertyW
CM_Get_Device_IDA
CM_Get_Device_ID_Size
CM_Get_First_Log_Conf
CM_Get_Parent
CM_Get_Sibling
CM_Locate_DevNodeA
CM_Move_DevNode_Ex
CM_Request_Device_EjectW
CM_Set_HW_Prof
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoList
SetupDiDeleteDeviceInterfaceData
SetupDiDestroyDeviceInfoList
SetupDiDestroyDriverInfoList
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
SetupDiEnumDriverInfoW
SetupDiGetClassDevsA
SetupDiGetDeviceInstallParamsW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupOpenFileQueue
SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
CM_Add_Res_Des
SetupDiSetDeviceInterfaceDefault
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoA

user32

MsgWaitForMultipleObjectsEx
PeekMessageA
UnregisterDeviceNotification
MessageBoxW
GetUpdateRect
CharUpperA

shell32

SHGetFolderPathW

ws2_32

WSAAccept
WSAAsyncGetServByPort
WSAGetLastError
__WSAFDIsSet
accept
bind
connect
getsockname
getsockopt
inet_addr
ioctlsocket
recv
select

ole32

CLSIDFromString
CoCreateInstance
CoCreateObjectInContext
CoInitialize
CoQueryProxyBlanket
CoSetProxyBlanket
CoUninitialize
HBRUSH_UserMarshal

kernel32

lstrlenW
lstrcmpiA
_lopen
_lcreat
WideCharToMultiByte
WaitForSingleObject
VirtualQuery
VirtualProtect
VirtualFreeEx
VirtualFree
VirtualAlloc
UnmapViewOfFile
TryEnterCriticalSection
TlsSetValue
TlsGetValue
TlsAlloc
TerminateThread
Sleep
SizeofResource
SignalObjectAndWait
SetUnhandledExceptionFilter
SetThreadPriorityBoost
SetLastError
SetFilePointer
SetEvent
Beep
CloseHandle
ConnectNamedPipe
CreateFileA
CreateFileMappingA
CreateNamedPipeW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
EraseTape
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeLibrary
GetACP
GetCommMask
GetComputerNameExW
GetConsoleFontSize
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetHandleInformation
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNamedPipeHandleStateA
GetOverlappedResult
GetProcAddress
GetShortPathNameW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVolumeInformationW
HeapDestroy
HeapUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryExW
LoadLibraryW
LocalAlloc
LocalFree
MapViewOfFile
Module32FirstW
MoveFileW
MultiByteToWideChar
OutputDebugStringA
OutputDebugStringW
ProcessIdToSessionId
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReadFileScatter
RemoveDirectoryW
ResetEvent
SetCommBreak
SetEndOfFile

advapi32

SystemFunction015
SystemFunction011
StartServiceCtrlDispatcherA
SetServiceStatus
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
SetEntriesInAclW
RevertToSelf
ReportEventW
RegisterEventSourceW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
OpenServiceW
OpenSCManagerW
MapGenericMask
LsaLookupSids
LsaGetQuotasForAccount
IsValidSid
InitializeSecurityDescriptor
ImpersonateSelf
ImpersonateNamedPipeClient
GetUserNameW
GetTokenInformation
GetNamedSecurityInfoW
GetFileSecurityW
GetExplicitEntriesFromAclW
FreeSid
FreeEncryptionCertificateHashList
EqualSid
DeregisterEventSource
DeleteService
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CreateServiceW
ConvertToAutoInheritPrivateObjectSecurity
CloseServiceHandle
AllocateAndInitializeSid
AccessCheck

Exports

Exports

BeginExternalBackup
CopyPixels
DupSession
HrCreatePhonebookEntry
HrLPSZCPToBSTR
HrStreamSeekSet

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1023B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8358b810ecdf3e97ff2b4181f5066ec1

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

user32

shell32

ws2_32

ole32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 8KB - Virtual size: 9KB

.rsrc Size: 1024B - Virtual size: 1023B

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 8KB - Virtual size: 9KB

.rsrc
Size: 1024B - Virtual size: 1023B