6d9c66d8e997fc4f0d29fb94cf0163b5668eb149937c77833ffb140fcee727dc

Sharing

Copy URL Twitter E-mail

General

Target

6d9c66d8e997fc4f0d29fb94cf0163b5668eb149937c77833ffb140fcee727dc
Size

492KB
MD5

38269daaeb73fd64ce3c4d53863ff5bb
SHA1

97f72543a4c5b3e522e5f06bfe19ad94be3fbe4c
SHA256

6d9c66d8e997fc4f0d29fb94cf0163b5668eb149937c77833ffb140fcee727dc
SHA512

772080ff53c601831db4ba6be48060fbf7b27a7b4f3b7f4908fcb29de0acd8759e78d7ce2492f7bb591f9a618f11b6df0b291097972f72c9d0b995c1f14b2bce
SSDEEP

12288:qM0It1GgFtZ2QkMxpXwlNTMbKdS5iyezBF:q6t1GgTZ2QkMxhMW+dS5iD1F

Score

N/A

Malware Config

Signatures

Files

6d9c66d8e997fc4f0d29fb94cf0163b5668eb149937c77833ffb140fcee727dc
.dll windows x86

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupTermDefaultQueueCallback
SetupQueueCopyW
SetupQueueCopyIndirectW
SetupPromptReboot
SetupOpenInfFileW
SetupOpenAppendInfFileW
SetupInstallFromInfSectionW
SetupInstallFilesFromInfSectionW
SetupInitDefaultQueueCallbackEx
SetupGetTargetPathW
SetupGetStringFieldW
SetupGetLineCountW
SetupGetIntField
SetupGetFieldCount
SetupFindNextLine
SetupDiSetSelectedDevice
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiOpenClassRegKey
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDefaultQueueCallbackW
SetupCopyOEMInfW
SetupCommitFileQueueW
SetupCloseInfFile
SetupCloseFileQueue
CM_Setup_DevNode
CM_Locate_DevNodeW
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Enumerate_Classes

kernel32

lstrcmpiW
WriteFile
WriteConsoleW
CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EnterCriticalSection
EnumResourceLanguagesW
ExitProcess
FillConsoleOutputCharacterW
FindClose
FindNextFileW
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetDevicePowerState
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempFileNameW
GetThreadLocale
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
WriteConsoleOutputW
LocalReAlloc
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleOutputW
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetWriteWatch
SearchPathW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
UnregisterWait
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
LocalAlloc

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdi32

Polyline
GetTextMetricsW
GetObjectW
GetDeviceCaps
EndPage
DeleteObject
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
StartDocW
StartPage
SetBkMode

advapi32

SetEntriesInAclW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
QueryServiceStatus
OpenServiceW
OpenSCManagerW
OpenProcessToken
LsaLookupPrivilegeValue
IsTextUnicode
InitializeSecurityDescriptor
GetTokenInformation
GetLengthSid
FreeSid
DeleteService
ControlService
CloseServiceHandle
AllocateAndInitializeSid
AddAccessDeniedAce
StartServiceW
SetTraceCallback
SetSecurityDescriptorDacl

user32

AllowSetForegroundWindow
AnimateWindow
CharLowerW
CheckDlgButton
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DestroyIcon
DialogBoxParamW
DrawTextExW
EndDialog
GetDC
GetIconInfo
GetProcessWindowStation
GetSysColor
GetSystemMetrics
GetUserObjectInformationW
IsDlgButtonChecked
LoadBitmapW
LoadIconW
LoadImageW
MessageBoxW
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
ShowWindow
SystemParametersInfoW

shell32

ShellHookProc
ShellExecuteExW
SHGetFolderPathW

Exports

Exports

FlagsFilename
Module_GetFilename
_Readline
get_PLTE
info_init_3
vResolveTokenVarA

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 255KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

Imports

setupapi

kernel32

version

gdi32

advapi32

user32

shell32

Exports

Exports

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 255KB - Virtual size: 255KB

.data Size: 108KB - Virtual size: 108KB

.rsrc Size: 17KB - Virtual size: 17KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 255KB - Virtual size: 255KB

.data
Size: 108KB - Virtual size: 108KB

.rsrc
Size: 17KB - Virtual size: 17KB

.reloc
Size: 6KB - Virtual size: 5KB