b970a22ed78aafa1af3391597c9ddf3aa7249cd340d6f6f2ae70d10878798676

Sharing

Copy URL Twitter E-mail

General

Target

b970a22ed78aafa1af3391597c9ddf3aa7249cd340d6f6f2ae70d10878798676
Size

116KB
MD5

4e46bbd2007a5112ad824bac0343f694
SHA1

10476e098e17b528ac7b0dbc984d5ac51fff09d2
SHA256

b970a22ed78aafa1af3391597c9ddf3aa7249cd340d6f6f2ae70d10878798676
SHA512

ed0565a9203ee148b6a15cffe4ece42af674d318b42cb3eda74ffea41093469f7f1f0b936c594069f78db0ec4b3fb24c45a7f7e61ee3646d385a5776ada462a0
SSDEEP

3072:du3Zsm5UQSvFwftfYglDcKjwLCZaODRC:du3ZbU5vFItrlDVpa

Score

N/A

Malware Config

Signatures

Files

b970a22ed78aafa1af3391597c9ddf3aa7249cd340d6f6f2ae70d10878798676
.dll windows x86

6f23f0bcef3c864c6f20455900e601d4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

AddAccessAllowedAce
AllocateAndInitializeSid
CloseServiceHandle
ControlService
CryptDuplicateHash
ElfOldestRecord
EnumDependentServicesW
FreeSid
GetLengthSid
GetOldestEventLogRecord
InitializeAcl
InitializeSecurityDescriptor
LookupAccountNameW
MakeSelfRelativeSD
NotifyChangeEventLog
ObjectDeleteAuditAlarmW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SetEntriesInAclW
SetFileSecurityW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner

gdi32

OffsetWindowOrgEx

kernel32

GetCommandLineA
CreateDirectoryW
DeleteFileW
EnterCriticalSection
FillConsoleOutputCharacterA
FreeLibrary
GetComputerNameW
GetCurrentDirectoryW
GetEnvironmentVariableW
GetFileAttributesW
GetLastError
GetLocalTime
GetProcAddress
GlobalAlloc
GlobalCompact
GlobalFree
HeapUnlock
LeaveCriticalSection
LoadLibraryExW
LocalAlloc
LocalFree
OutputDebugStringW
SetCurrentDirectoryW
SetEnvironmentVariableW
SetEvent
SetPriorityClass
SetProcessShutdownParameters
Sleep
WideCharToMultiByte
WriteFile
lstrcatW
lstrcmpiW
lstrcpyW
lstrcpynW
lstrlenW
LoadResource
FindResourceA
VirtualAlloc
CompareStringW
CompareStringA
GetLocaleInfoW
GetSystemInfo
VirtualProtect
GetTimeZoneInformation
SetEnvironmentVariableA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetCurrentThreadId
GetVersionExA
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
TlsAlloc
SetLastError
GetCurrentThread
TlsFree
TlsSetValue
TlsGetValue
HeapFree
HeapAlloc
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
FatalAppExitA
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
IsBadWritePtr
InitializeCriticalSection
RtlUnwind
InterlockedExchange
VirtualQuery
LoadLibraryA
HeapSize

ole32

CoUninitialize
CoInitializeEx
CoInitialize
CoGetClassObject
OleLoadFromStream

oleaut32

VarI4FromR8
VarI1FromR8

rpcrt4

I_RpcFreeBuffer
NdrSimpleTypeUnmarshall
RpcServerUnregisterIf

user32

GetLastInputInfo
DdeKeepStringHandle
DdeAbandonTransaction
GetMenuItemCount
LoadStringW
MessageBoxIndirectA
MessageBoxW
SetCursor
SetScrollPos

Exports

Exports

HOYAE

Sections

.text
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6f23f0bcef3c864c6f20455900e601d4

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

ole32

oleaut32

rpcrt4

user32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 53KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 56KB - Virtual size: 53KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 8KB - Virtual size: 4KB