670198cd9794b0156e691900b4b664ce92a2e1658c5f52d502288f4f466cc9ed

Sharing

Copy URL Twitter E-mail

General

Target

670198cd9794b0156e691900b4b664ce92a2e1658c5f52d502288f4f466cc9ed
Size

55KB
MD5

0d59db14616733c377f801b59e077eae
SHA1

1edb64bb7021a77846123091298328f16be4e590
SHA256

670198cd9794b0156e691900b4b664ce92a2e1658c5f52d502288f4f466cc9ed
SHA512

0d8c34038b5ffb5bc298d14201061732931d9c230296b8f3da61cd80060219ec25d85ce90928a02894a42b815e5cd7e0e996b29b75947370c9cfeb799686408b
SSDEEP

1536:bhavR0shiANf4tJMPbZWwtMvXqbSaCZlOPBaHxb+X:tavR0szuJyDMaGlOZ8FO

Score

N/A

Malware Config

Signatures

Files

670198cd9794b0156e691900b4b664ce92a2e1658c5f52d502288f4f466cc9ed
.dll windows x86

994823cf28834564078e21fcffaa923e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msr2sens

IsResourceClassEqual
GetMultiSzProperty
SetSzValue
GetResourceNameDependency
StopResourceService
IsPathValid
GetEnvironmentWithNetName

user32

SetWindowLongW
GetParent
OffsetRect
SetParent
GetDC
ShowCursor
SetScrollPos
SetRectEmpty
SetTimer
GetWindowTextW
GetDlgItem
EndDeferWindowPos
DestroyMenu
SendMessageA
ClientToScreen
DrawTextA
DestroyWindow

ntdll

ZwQueryInformationThread
NtSetSystemInformation
RtlCompareUnicodeString
ZwMapViewOfSection
NtQuerySystemTime
RtlAddAce
ZwQueryInformationPort
NtCreateEventPair

kernel32

InterlockedDecrement
LeaveCriticalSection
CreateFileMappingW
GetFileSizeEx
LocalFileTimeToFileTime
GetModuleHandleA
GetDriveTypeA
CloseHandle
FatalAppExitA
GetStdHandle
WriteConsoleA
OpenThread
HeapSize
SetFileAttributesA
FindClose
HeapFree
LCMapStringA
TlsGetValue
GetOEMCP
IsValidLocale
QueryPerformanceCounter

Exports

Exports

CreateProcessNofify
UmPlatformDeinitialize
CreateUnimodemTimer
SetUnimodemTimer
ResetCallCount
ExecuteAction
GetCatalogObject2
DestroyOverStructPool
CancelUnimodemTimer
InprocServer32FromString
SetActionLogModeSz
SetSetupOpen
CallBeginning
MonitorHandle
StopMonitorThread
SetSilent
SetActionEnum
SetupOpen
GetCatalogObject
UpdateFromComponentChange
OpenComponentLibraryEx
SetActionLogMode
DowngradeAPL
OpenComponentLibraryOnMemEx
GetComputerObject
QueryApplication
GetSimpleTableDispenser

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

994823cf28834564078e21fcffaa923e

Headers

DLL Characteristics

File Characteristics

Imports

msr2sens

user32

ntdll

kernel32

Exports

Exports

Sections

.text Size: 42KB - Virtual size: 42KB

.data Size: 10KB - Virtual size: 10KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 4KB

.text
Size: 42KB - Virtual size: 42KB

.data
Size: 10KB - Virtual size: 10KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 4KB