7d26e36bf7cda9ea2352e80a004b1b7ef4305b9631d68a5390cdbd8c5f26874f

Sharing

Copy URL Twitter E-mail

General

Target

7d26e36bf7cda9ea2352e80a004b1b7ef4305b9631d68a5390cdbd8c5f26874f
Size

149KB
MD5

7eee8475627f99134e4709b48b6c4c39
SHA1

1408e56169d96853ceba2d9c3871e5afa06d0462
SHA256

7d26e36bf7cda9ea2352e80a004b1b7ef4305b9631d68a5390cdbd8c5f26874f
SHA512

73355440bdad682ee79cccb65d7e785ff6a468d7d8721b62aaa45865e34af14f518d45511dd36feca9d8b64c1349526e9a576a430d3e80a4cd0b6806d4f9bd96
SSDEEP

3072:RloQCL3BwTGCVC7kmjN57eNw0/WFlZyrZjUn4PdSRcB5bgarFQVpkVqH9+CKpXg6:3ohXCVmh59tAUn4dhB5v5Q5H9+DP

Score

N/A

Malware Config

Signatures

Files

7d26e36bf7cda9ea2352e80a004b1b7ef4305b9631d68a5390cdbd8c5f26874f
.dll windows x86

79fccfd0922b7fe7567c9933bf82f42b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfW
UnregisterDeviceNotification
SetCursorPos
RegisterDeviceNotificationA
PeekMessageA
MsgWaitForMultipleObjectsEx
CharUpperA

ws2_32

socket
send
select
recv
listen
ioctlsocket
htonl
getsockopt
getsockname
connect
closesocket
accept
__WSAFDIsSet
WSAGetLastError

advapi32

FreeSid
UninstallApplication
SetSecurityDescriptorDacl
SetSecurityDescriptorControl
SetEntriesInAclW
RevertToSelf
ReportEventW
RegisterServiceCtrlHandlerExA
RegisterEventSourceW
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
OpenThreadToken
OpenServiceW
OpenSCManagerW
OpenProcessToken
MapGenericMask
InitializeSecurityDescriptor
AccessCheck
AddAccessAllowedAce
AllocateAndInitializeSid
CheckTokenMembership
CreateServiceW
CryptGenRandom
CryptReleaseContext
DeleteService
DeregisterEventSource
EqualSid
GetExplicitEntriesFromAclW
GetFileSecurityW
GetLengthSid
GetOldestEventLogRecord
GetPrivateObjectSecurity
GetUserNameW
ImpersonateNamedPipeClient
ImpersonateSelf
InitializeAcl

shell32

SHGetFolderPathW

setupapi

SetupDiSetSelectedDriverW
SetupDiSetSelectedDevice
SetupDiSetDeviceRegistryPropertyW
SetupDiOpenDeviceInfoA
SetupDiInstallDevice
SetupDiGetSelectedDriverW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstanceIdA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDriverInfoList
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller
CM_Request_Eject_PC
CM_Request_Device_EjectW
CM_Locate_DevNodeA
CM_Get_Sibling
CM_Get_Parent
CM_Get_Device_ID_Size
CM_Get_Device_IDA
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_PropertyA
CM_Get_Depth

kernel32

TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpiA
lstrcpyW
lstrlenW
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
ExpandEnvironmentStringsW
SetTimeZoneInformation
SetLastError
SetFileTime
SetFilePointer
SetFileApisToOEM
SetEvent
SetEndOfFile
ResetEvent
RequestDeviceWakeup
RemoveDirectoryW
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
Process32NextW
OutputDebugStringW
OutputDebugStringA
OpenThread
OpenProcess
MultiByteToWideChar
MoveFileW
MapViewOfFile
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
IsDebuggerPresent
BackupWrite
CancelIo
CloseHandle
ConnectNamedPipe
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileMappingA
CreateFileW
CreateNamedPipeW
CreateThread
DeleteCriticalSection
DeleteFileW
DisconnectNamedPipe
DuplicateHandle
EnterCriticalSection
ExitProcess
ExitThread
IsBadReadPtr
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindCloseChangeNotification
FindFirstChangeNotificationW
FindFirstFileW
FindNextChangeNotification
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeLibrary
FreeResource
GetACP
GetCommProperties
GetComputerNameExW
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetFileAttributesA
GetFileAttributesExW
GetFileAttributesW
GetFileInformationByHandle
GetFullPathNameW
GetHandleInformation
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNamedPipeHandleStateA
GetOverlappedResult
GetPriorityClass
GetProcAddress
GetProcessHeaps
GetShortPathNameW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetVersion
GetVersionExA
GetVolumeInformationW
GlobalUnlock
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsBadHugeReadPtr
TlsGetValue

ole32

CLSIDFromString
CoCreateInstance
CoGetMalloc
CoInitialize
CoQueryProxyBlanket
CoTaskMemFree
CoUninitialize
HBRUSH_UserFree

Exports

Exports

CopyPixels
CreateQuery
DoHotMailWizard
PixelMap
RetrieveQoSql

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 967B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

79fccfd0922b7fe7567c9933bf82f42b

Headers

DLL Characteristics

File Characteristics

Imports

user32

ws2_32

advapi32

shell32

setupapi

kernel32

ole32

Exports

Exports

Sections

.text Size: 55KB - Virtual size: 55KB

.rdata Size: 84KB - Virtual size: 83KB

.data Size: 8KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 967B

.text
Size: 55KB - Virtual size: 55KB

.rdata
Size: 84KB - Virtual size: 83KB

.data
Size: 8KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 967B