9c135d2f8f64fe1ed99baaa8c1543d776d89dca209bb2389ae0184c767495d34

Sharing

Copy URL

Twitter E-mail

General

Target

9c135d2f8f64fe1ed99baaa8c1543d776d89dca209bb2389ae0184c767495d34
Size

270KB
MD5

03fed6711fff1ea2b61d69ed96810310
SHA1

4b2f03079455ba7e1d88bf20339450b78c719023
SHA256

9c135d2f8f64fe1ed99baaa8c1543d776d89dca209bb2389ae0184c767495d34
SHA512

a1d6878fb3c84b14143e42bc9c2452689d026f47a3b07beb580a39413a37f40a68ab9f5cb086fcbb0f4cf7733ab0e5c73a31ec37cce69a11deaa0933eaf0318e
SSDEEP

6144:l3zkKwiJaKY9wmgKkV9NtaolEY092oZVQMn9iR12zkmpRQzy:l3qiJanKKY9Wog2az8R1ktpY

Score

N/A

Malware Config

Signatures

Files

9c135d2f8f64fe1ed99baaa8c1543d776d89dca209bb2389ae0184c767495d34
.dll windows x86

737584a24d517e1dd61ed6a493bffb12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

rpcrt4

NdrConformantVaryingStructFree
NdrGetUserMarshalInfo
RpcSmEnableAllocate

secur32

LsaRegisterLogonProcess
QueryCredentialsAttributesA
RevertSecurityContext
LsaGetLogonSessionData

oleaut32

VarR4FromUI2
VarDateFromCy
SafeArrayRedim
VarI1FromStr

rasapi32

RasDialA
RasGetAutodialAddressW
RasEnumEntriesA
RasEnumAutodialAddressesW

ole32

CoIsHandlerConnected
OleConvertIStorageToOLESTREAM
CoQueryAuthenticationServices
GetRunningObjectTable

shell32

ShellExecuteA
ord64
ord49
DragQueryFileW

imm32

ImmIsUIMessageA
ImmSetCompositionStringA
ImmSimulateHotKey
ImmSetCompositionStringW

glu32

gluGetTessProperty
gluProject
gluScaleImage
gluTessEndPolygon

opengl32

glTexCoord1f
glColor4iv
glShadeModel
glRasterPos3fv

msvcrt

isspace
sprintf
isxdigit
islower
toupper

wininet

InternetCloseHandle
FtpFindFirstFileW
CommitUrlCacheEntryA
CommitUrlCacheEntryW

shlwapi

PathIsUNCW
ChrCmpIA
ChrCmpIW
PathFindExtensionW
PathIsNetworkPathW
PathParseIconLocationW

comctl32

CreateStatusWindowW
ImageList_Create
PropertySheetW
ImageList_Destroy

kernel32

EnumResourceNamesW
GetDriveTypeW
SetProcessWorkingSetSize
GlobalHandle
FindResourceExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

ReleaseDC
GetDC

gdi32

GetBitmapBits
GetPixel
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
TranslateCharsetInfo
StretchBlt
CombineRgn
SetTextAlign
DeleteObject
DeleteDC
SetPixel

comdlg32

GetSaveFileNameA
PrintDlgW
PrintDlgExA
GetOpenFileNameA

advapi32

QueryServiceStatus
GetAuditedPermissionsFromAclA
CredGetTargetInfoA
MapGenericMask

Exports

Exports

CakeSpaeTethchowboyoPool
DielSuksblamSlueMullHookwarpup
HeirburlBurntaskHathjiltRutsswayrun
JiaoAbyeArchPeonGibsBumfBermkeckdagsAlmeZymeApexBedsPoosthedo
LurehoarcompBoatHawkhale
MeshChadNavybopsut
PeelPeepKyesblurRuddLunyduckRinsHeapPrigRisk
PiesShahFatsdarnPoxysumoShodSnipDeliroueTyppDirldimit

Sections

.pdata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.pdata
Size: - Virtual size: 512B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 250KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

737584a24d517e1dd61ed6a493bffb12

Headers

DLL Characteristics

File Characteristics

Imports

rpcrt4

secur32

oleaut32

rasapi32

ole32

shell32

imm32

glu32

opengl32

msvcrt

wininet

shlwapi

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.pdata Size: - Virtual size: 512B

.pdata Size: - Virtual size: 512B

.rdata Size: 250KB - Virtual size: 250KB

.reloc Size: 18KB - Virtual size: 18KB

.pdata
Size: - Virtual size: 512B

.pdata
Size: - Virtual size: 512B

.rdata
Size: 250KB - Virtual size: 250KB

.reloc
Size: 18KB - Virtual size: 18KB