3e1b601bc280a6ceaf43b83c9ee48680eed6dba7fbf5a015ada4e71492893518

Sharing

Copy URL Twitter E-mail

General

Target

3e1b601bc280a6ceaf43b83c9ee48680eed6dba7fbf5a015ada4e71492893518
Size

457KB
MD5

9f3cd4d5af52edd7f544116bbf3ea080
SHA1

489c100644ed92ddbe1ffe0d4d059f98315b3a3f
SHA256

3e1b601bc280a6ceaf43b83c9ee48680eed6dba7fbf5a015ada4e71492893518
SHA512

73f54a1c86bd9d39b8311b6bb0b2dea3fe9cbae4151d27a456f4b5d75cdc8925bc12e2f65c2cc15d53c383afb9bb50d0a88ce1f9212e7b76c57324ab7b180a04
SSDEEP

6144:Ht1nOb7Dagg3IHLIt4eUuyfWX78E6UNLnubTiNui0/wwpl3:fgbGLmfWX7z6GuiNRwf

Score

N/A

Malware Config

Signatures

Files

3e1b601bc280a6ceaf43b83c9ee48680eed6dba7fbf5a015ada4e71492893518
.dll windows x86

09708eb9bda0aa7dd7c0a74870adbf1a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

winmm

PlaySoundW

advapi32

RegCreateKeyExW
UnregisterTraceGuids
TraceEvent
RegisterTraceGuidsW
RegSetValueExW
RegQueryValueExW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
InitializeAcl
RegCloseKey
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW

gdi32

SetBrushOrgEx
SetStretchBltMode
SetTextColor
StretchBlt
BitBlt
SetBkMode
CreateCompatibleDC
CreateDIBSection
CreateHalftonePalette
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectW
GetStockObject
RealizePalette
Rectangle
RestoreDC
SaveDC
SelectObject
SelectPalette
SetBkColor

kernel32

WaitForMultipleObjects
WriteFile
lstrcmpiW
lstrlenW
GetModuleHandleW
VirtualFree
CloseHandle
CompareFileTime
CompareStringW
CopyFileExW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetLogicalDriveStringsW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
VirtualAlloc
GetPrivateProfileIntW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetSystemTime
GetSystemTimeAsFileTime
GetTempFileNameW
GetTempPathW
GetThreadLocale
GetTickCount
GetVersion
GetVersionExA
GetVolumeInformationW
HeapAlloc
HeapFree
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LoadLibraryExW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFileMappingW
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
RtlUnwind
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadLocale
SetUnhandledExceptionFilter
SizeofResource
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile

user32

SetFocus
SetForegroundWindow
SetPropW
SetWinEventHook
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
SystemParametersInfoW
TranslateMessage
UnhookWinEvent
UnregisterClassA
UnregisterDeviceNotification
GetSysColor
GetPropW
GetParent
GetMonitorInfoW
GetMessageW
GetLastActivePopup
GetDlgItem
GetDesktopWindow
GetDC
GetWindowRect
GetClientRect
SetDlgItemTextW
FillRect
EnumWindows
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
DrawTextW
DispatchMessageW
SetCursor
SendMessageW
SendDlgItemMessageW
RemovePropW
ReleaseDC
RegisterWindowMessageW
RegisterDeviceNotificationW
PostThreadMessageW
PostMessageW
PeekMessageW
OffsetRect
GetWindowLongW
GetWindow
GetSystemMetrics
AllowSetForegroundWindow
BeginDeferWindowPos
CharNextW
CharUpperBuffW
CharUpperW
CopyImage
CreateDialogParamW
CreatePopupMenu
CreateWindowExW
DeferWindowPos
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
MsgWaitForMultipleObjects
MoveWindow
MonitorFromRect
MessageBoxW
MessageBeep
MapWindowPoints
MapDialogRect
LoadImageW
LoadCursorW
IsWindowVisible
IsWindowEnabled
IsWindow
IsDlgButtonChecked
InvalidateRect
IntersectRect
GetWindowTextW
GetClassNameW
GetWindowTextLengthW
GetSystemMenu
GetCursor
GetSysColorBrush

rpcrt4

NdrOleFree
NdrOleAllocate
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
IUnknown_Release_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_Connect
CStdStubBuffer_AddRef

shell32

CommandLineToArgvW
SHBindToParent
SHBrowseForFolderW
SHChangeNotify
SHGetDesktopFolder
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteExW
DragQueryFileW

ntdll

memcpy
memmove
memset
qsort
towupper
wcsrchr
wcsstr
wcstoul
_CIlog
iswspace
_wcsicmp
_vsnwprintf
ceil
bsearch
_vsnprintf

ole32

StringFromGUID2
ReleaseStgMedium
PropVariantCopy
PropVariantClear
HWND_UserUnmarshal
HWND_UserSize
HWND_UserMarshal
HWND_UserFree
HICON_UserUnmarshal
HICON_UserSize
HICON_UserMarshal
HICON_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserSize
HBITMAP_UserMarshal
HBITMAP_UserFree
CreateBindCtx
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoAllowSetForegroundWindow
CLSIDFromString
CoInitializeEx

setupapi

SetupDiCreateDeviceInfoList
SetupDiOpenDevRegKey
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiOpenDeviceInterfaceW

msvcrt

free
calloc
_unlock
_onexit
_lock
malloc
_errno
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIexp
_initterm
realloc

shlwapi

StrCSpnW
StrCmpNIW
SHStrDupW
StrRetToBufW
StrStrW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW
PathParseIconLocationW
PathMatchSpecW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
StrCmpW
PathAddBackslashW
PathAppendW

oleaut32

VarUI4FromStr
VariantClear
VariantInit
VariantTimeToSystemTime
VarBstrCmp
UnRegisterTypeLi
SysStringLen
SysFreeString
SysAllocString
RegisterTypeLi
LoadTypeLi
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserFree
BSTR_UserUnmarshal
BSTR_UserSize
BSTR_UserMarshal
BSTR_UserFree

Exports

Exports

GetFlags
IsSubclass
Method_Fini
VaParse
get_x_offset_microns
set_bKGD

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09708eb9bda0aa7dd7c0a74870adbf1a

Headers

File Characteristics

Imports

version

winmm

advapi32

gdi32

kernel32

user32

rpcrt4

shell32

ntdll

ole32

setupapi

msvcrt

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 273KB - Virtual size: 272KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 35KB - Virtual size: 35KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 273KB - Virtual size: 272KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 35KB - Virtual size: 35KB

.reloc
Size: 3KB - Virtual size: 3KB