828daf06cb90002452cd9abd35d33f410c5a3101b184675305282142b204ea01

Sharing

Copy URL Twitter E-mail

General

Target

828daf06cb90002452cd9abd35d33f410c5a3101b184675305282142b204ea01
Size

193KB
MD5

0fec330afe6481f5a8f992f4845bd176
SHA1

8c85ab9113043fb2f202e4a718e441c65cb8d887
SHA256

828daf06cb90002452cd9abd35d33f410c5a3101b184675305282142b204ea01
SHA512

a3fca1fee6bf6fc4a20793f6ad90d5d89e784488b861f0cddbb02a767daaf1d42883393cdfff067009c48a7b3152ac295c30850e35ea8ce5380c65433c907e32
SSDEEP

3072:DbMTfH9LO69e/HhfulRpEUX6FmmSy24AkiE22LURAKlMPwASPrZ6Ng4gNNTRfELJ:os69iBCD6IPIAWARdswASPVdz81bWZB

Score

N/A

Malware Config

Signatures

Files

828daf06cb90002452cd9abd35d33f410c5a3101b184675305282142b204ea01
.dll windows x86

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoInitialize
CoCreateInstance

advapi32

RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
LsaNtStatusToWinError
NotifyBootConfigStatus
RegCloseKey
RegEnumValueW
RegOpenCurrentUser

user32

SetTimer
PostQuitMessage
GetMessageW

setupapi

SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiGetSelectedDriverW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiDeleteDeviceInfo
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Free_Log_Conf_Ex
CM_Add_Empty_Log_Conf_Ex
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupGetFieldCount
SetupGetStringFieldW
SetupUninstallOEMInfW
SetupDiOpenClassRegKey

oleaut32

SysFreeString
VariantInit
VariantClear
VariantChangeType
VarCyMul
SysStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy

kernel32

_llseek
GetLocaleInfoA
WriteFileEx
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitForSingleObject
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SystemTimeToTzSpecificLocalTime
Sleep
SizeofResource
SignalObjectAndWait
SetStdHandle
SetProcessShutdownParameters
SetFilePointer
SetCurrentDirectoryW
RtlUnwind
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
OpenProcess
MoveFileW
Module32FirstW
MapViewOfFile
LocalFree
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringA
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteFileW
DeviceIoControl
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FindNextFileW
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeThread
GetFileAttributesW
GetFileSizeEx
GetFileType
GetLastError
IsValidLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GlobalHandle
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent

shlwapi

PathFindFileNameW

rpcrt4

RpcMgmtStopServerListening
RpcMgmtWaitServerListen
NdrServerCall2
RpcAsyncRegisterInfo
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcServerRegisterIfEx

shell32

SHFreeNameMappings
SHCreateDirectoryExW
SHAddToRecentDocs
SHGetDesktopFolder

Exports

Exports

GetLogInfo
HrEtreamSeekBegin
HrWetDirtyFlagImpl
MShutDown
OpenDatabase
strtrimW

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 382B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

user32

setupapi

oleaut32

kernel32

shlwapi

rpcrt4

shell32

Exports

Exports

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 112KB - Virtual size: 112KB

.data Size: 19KB - Virtual size: 19KB

.rsrc Size: 512B - Virtual size: 382B

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 112KB - Virtual size: 112KB

.data
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 512B - Virtual size: 382B