3f9fe5cd2a7c28c80a8610fcb2b1fadeb051d7cf72e8150eb4ef4cb72b508144

Sharing

Copy URL Twitter E-mail

General

Target

3f9fe5cd2a7c28c80a8610fcb2b1fadeb051d7cf72e8150eb4ef4cb72b508144
Size

840KB
MD5

5d529fb86188f9e926941dc57698d1a0
SHA1

957b9ffe28084f6fab3124e1f79a44cff1a368bd
SHA256

3f9fe5cd2a7c28c80a8610fcb2b1fadeb051d7cf72e8150eb4ef4cb72b508144
SHA512

a04de33d81b43a352ca631b7a20af5d413f09417a0cc15ad259216979370b5a2f6db40f35cf396166c6a70ba4ed207a2737f6f298036f1cda1c92817a80e7317
SSDEEP

12288:AqKHmBs2Bx43nvRpofT3GqKWLb3UiGmTbfwDWsEyD88UC2gNwU5LNec1Ll/O0RQ:ESFxIn4rOQb3UfGN7yoZjgCiLIcll

Score

N/A

Malware Config

Signatures

Files

3f9fe5cd2a7c28c80a8610fcb2b1fadeb051d7cf72e8150eb4ef4cb72b508144
.dll windows x86

7e71c32c87e7c710ff337cd68373d35a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetConsoleMode
DeleteCriticalSection
GetOEMCP
GlobalUnlock
QueryPerformanceCounter
GetVersionExA
LocalFree
DuplicateHandle
GetConsoleCP
HeapDestroy
FileTimeToSystemTime
LocalAlloc
ReadFile
TlsSetValue
SetHandleCount
SetEndOfFile
CompareStringA
InitializeCriticalSection
lstrcmpA
EnterCriticalSection
FlushFileBuffers
GetSystemInfo
GetStringTypeA
SetUnhandledExceptionFilter
UnlockFile
TlsFree
LocalFileTimeToFileTime
VirtualAlloc
GlobalDeleteAtom
SizeofResource
TlsAlloc
GetCommandLineW
RtlUnwind
GetACP
GetLastError
GetProcessHeap
GetStdHandle
TerminateProcess
GetCurrentThreadId
GlobalHandle
GetCommandLineA
GetThreadLocale
FreeLibrary
lstrlenA
Sleep
VirtualFree
LocalReAlloc
HeapFree
GetSystemTimeAsFileTime
GlobalLock
FreeEnvironmentStringsA
SetFilePointer
VirtualQuery
GetFileSize
InterlockedExchange
GetFileType
SetEnvironmentVariableA
LeaveCriticalSection
HeapAlloc
LockFile
GlobalFlags
GetCurrentProcessId
UnhandledExceptionFilter
GetConsoleOutputCP
CloseHandle
SetStdHandle
LoadResource
GetTimeZoneInformation
LCMapStringA
GetModuleHandleA
HeapSize
WriteFile
ConvertDefaultLocale
GlobalReAlloc
GlobalFree
SystemTimeToFileTime
FreeResource
InterlockedDecrement
IsDebuggerPresent
EnumResourceLanguagesW
MulDiv
GetSystemDirectoryA
FileTimeToLocalFileTime
GetWindowsDirectoryA
SetFileTime
CreateFileA
GetModuleFileNameA
HeapCreate
RaiseException
GetLocaleInfoA
FindClose
SetLastError
HeapReAlloc
LoadLibraryA
GetStartupInfoA
GetFileTime
SetErrorMode
InterlockedIncrement
GlobalAlloc
LockResource
GetCurrentThread
GetVersion
VirtualProtect
LoadLibraryExA
AddAtomA
WriteConsoleA
GetProcAddress
SetConsoleCP
FreeConsole
ReadConsoleInputA
GetTickCount
WriteConsoleInputA
AllocConsole
TlsGetValue
ExitProcess

user32

UnhookWindowsHookEx
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetWindowRect
IsChild
InflateRect
GetFocus
GetScrollInfo
SetCursor
SetScrollRange
DestroyMenu
SetWindowRgn
ReuseDDElParam
EnableMenuItem
IsWindowEnabled
ShowScrollBar
PtInRect
EndDeferWindowPos
IsWindowVisible
TranslateMessage
SetRect
IsIconic
GetNextDlgGroupItem
GetWindowDC
EndPaint
EqualRect
BeginDeferWindowPos
GetSysColorBrush
GetWindowThreadProcessId
GetCapture
SetMenuItemBitmaps
SetWindowContextHelpId
GetMenuState
GetParent
ReleaseDC
GetActiveWindow
ScrollWindow
GetDesktopWindow
CreatePopupMenu
SetMenu
IsZoomed
ScreenToClient
MapDialogRect
PostQuitMessage
GetTopWindow
SetWindowPos
InvalidateRect
IntersectRect
GetSystemMetrics
SetScrollPos
GetCursorPos
GetMessageTime
ReleaseCapture
UpdateWindow
GetMenuItemCount
SetFocus
GetForegroundWindow
GetMenuItemID
GetClientRect
GetKeyState
IsRectEmpty
ShowOwnedPopups
GetScrollPos
GetWindowRgn
ClientToScreen
GetNextDlgTabItem
SystemParametersInfoA
InvalidateRgn
SendDlgItemMessageA
LockWindowUpdate
DrawIcon
GetMenu
GetScrollRange
GetDCEx
SetParent
IsWindow
BeginPaint
DestroyIcon
WindowFromPoint
GetDlgItem
RedrawWindow
MoveWindow
UnpackDDElParam
EndDialog
ShowWindow
CopyRect
GetSubMenu
GetMessagePos
UnregisterClassA
BringWindowToTop
GetWindow
TrackPopupMenu
ValidateRect
CheckMenuItem
GetDC
OffsetRect
GetSystemMenu
SetCapture
CallNextHookEx
SetActiveWindow
SetScrollInfo
GetWindowPlacement
GetMenuCheckMarkDimensions
GetDlgCtrlID
MessageBeep
DeferWindowPos
DestroyWindow
GetLastActivePopup
FillRect
SetTimer
DeleteMenu
SetRectEmpty
KillTimer
SetForegroundWindow

gdi32

GetWindowExtEx
Ellipse
OffsetViewportOrgEx
SelectClipRgn
CombineRgn
DeleteDC
ExtSelectClipRgn
StretchDIBits
CreateRectRgnIndirect
DeleteObject
BitBlt
SetBkColor
SetBkMode
GetMapMode
SelectObject
ExcludeClipRect
CreateEllipticRgn
SaveDC
GetBkColor
ScaleWindowExtEx
Escape
IntersectClipRect
PtVisible
PatBlt
LPtoDP
CreateRectRgn
GetStockObject
GetClipBox
GetPixel
SetMapMode
RectVisible
CreatePatternBrush
GetRgnBox
GetTextColor
SetTextColor
DPtoLP
SetViewportOrgEx
RestoreDC
CreateCompatibleDC
ScaleViewportExtEx
CreateSolidBrush
CreateBitmap
SetWindowExtEx
CreateCompatibleBitmap
GetDeviceCaps
OffsetRgn
SetViewportExtEx
SetRectRgn

advapi32

RegCloseKey
GetFileSecurityW
SetFileSecurityW

shell32

DragAcceptFiles
DragFinish

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoCreateInstance
CoGetClassObject
OleInitialize
OleIsCurrentClipboard
CoTaskMemFree
OleFlushClipboard
CLSIDFromString
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleUninitialize
CoTaskMemAlloc
CoUninitialize
CLSIDFromProgID

oleaut32

VariantCopy
OleLoadPicture
SysAllocStringLen
VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
SystemTimeToVariantTime
VariantClear
SysStringLen
VariantChangeType
VariantInit
SysFreeString

comctl32

ImageList_LoadImageW

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveExtensionW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

userenv

UnloadUserProfile

Sections

.text
Size: 479KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 344KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e71c32c87e7c710ff337cd68373d35a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

userenv

Sections

.text Size: 479KB - Virtual size: 478KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 344KB - Virtual size: 365KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 479KB - Virtual size: 478KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 344KB - Virtual size: 365KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 3KB - Virtual size: 3KB