3417dd7549e48deed9c3350b1444536bf46e42671f2389342d596eea6192f029

Sharing

Copy URL

Twitter E-mail

General

Target

3417dd7549e48deed9c3350b1444536bf46e42671f2389342d596eea6192f029
Size

88KB
MD5

49c726ebec0f8529f8dcdf584543ed57
SHA1

3141dbd682a96344308ff8df510a50678191f861
SHA256

3417dd7549e48deed9c3350b1444536bf46e42671f2389342d596eea6192f029
SHA512

657603f8c7c2b739d09175d9ac52aa56ee953c4b6980205822ca8ff7441e487edc06654c43be18041dec563be1e10cadbbd7dd17a62d83032e4f05d0e4d020b5
SSDEEP

1536:d3NmTBxjw9H+GO6u/3EmiP+SAzit6t+c9FPdYrFmvzANBQIEyDb:9k3CH+n6i3EmiMzi4t+UFPdCFmvzANqU

Score

N/A

Malware Config

Signatures

Files

3417dd7549e48deed9c3350b1444536bf46e42671f2389342d596eea6192f029
.dll windows x86

70b3ca897f02afece9e699b1a1f916c6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiW
AddAtomW
ExitThread
GetFileSize
UnlockFile
GetTempPathW
GlobalGetAtomNameA
OpenFile
FindVolumeMountPointClose
ReadConsoleInputA
MoveFileW
GetVersionExW
GetCommModemStatus
CreateSemaphoreA
EnumResourceLanguagesA
ClearCommError
CreateIoCompletionPort
GetThreadLocale
GetFullPathNameA
FindActCtxSectionGuid
IsWow64Process
CreateNamedPipeW
HeapWalk
HeapUnlock
FreeEnvironmentStringsW
TryEnterCriticalSection
PurgeComm
CompareStringW
WriteFileEx
ReadConsoleA
GetCompressedFileSizeW
RtlUnwind
GetLocalTime
GetSystemInfo
EnumResourceNamesA
IsValidLocale
GetUserDefaultLangID
WriteConsoleW
ReleaseSemaphore
SetConsoleCtrlHandler
VirtualQueryEx
RaiseException
GetShortPathNameW
ActivateActCtx
SetConsoleWindowInfo
WaitForMultipleObjects
ExpandEnvironmentStringsW
DeviceIoControl
LocalAlloc
CreateToolhelp32Snapshot
CreateConsoleScreenBuffer
WriteConsoleInputA
GetConsoleScreenBufferInfo
SetStdHandle
GetModuleHandleExW
CreateJobObjectW
GetProfileIntA
GetTimeFormatA
SetCommTimeouts
GlobalFindAtomA
CreateMutexW
GetDefaultCommConfigW
ReadFile
GetCurrentProcessId
EnterCriticalSection
LocalFree
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
lstrlenA
GetSystemTimeAsFileTime
InterlockedIncrement
LeaveCriticalSection
InterlockedCompareExchange
UnmapViewOfFile
GetCommandLineA
MapViewOfFile
VirtualQuery
CreateProcessA
GetLastError
GetProcAddress
InterlockedExchange
GetProcessHeap
LoadLibraryA
CloseHandle
VirtualProtect
HeapFree
WaitForSingleObject
HeapAlloc
MapViewOfFileEx
WriteFile

ole32

CoAddRefServerProcess
OleTranslateAccelerator
IIDFromString
PropVariantCopy
RevokeDragDrop
OleQueryLinkFromData
CoCreateInstanceEx
CoUninitialize
CoTaskMemFree
CoInitialize
CoGetClassObject

oleaut32

SysAllocStringLen
SysFreeString
SysAllocString

advapi32

CredReadW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegOpenKeyExA
RegSetValueExA
SetSecurityInfo
GetSecurityDescriptorSacl
RegUnLoadKeyW
NotifyBootConfigStatus
RegSetValueA
RegCreateKeyA
ReportEventW
EnumServicesStatusW
CredFree
RegLoadKeyW
RegisterServiceCtrlHandlerExA
RegDisablePredefinedCache
RegQueryValueExA
MakeAbsoluteSD
BuildExplicitAccessWithNameW
QueryServiceStatus
IsTokenRestricted
RegQueryValueA
CredDeleteW
EnumServicesStatusA
ElfReportEventW
RegEnumValueW

shell32

SHGetFolderPathAndSubDirW
SHGetSpecialFolderPathA
SHGetFolderPathA
SHGetFolderPathW

gdi32

GetMetaFileBitsEx
GetRegionData
EqualRgn
CreateMetaFileA
CreateHatchBrush
EnumFontFamiliesExA
GetRgnBox
CreateRectRgnIndirect
SetTextJustification
CombineRgn
CreateScalableFontResourceA
PlayEnhMetaFile
GetCharWidth32W
SetBrushOrgEx
EnumEnhMetaFile
OffsetWindowOrgEx
SetDIBits
GetCharWidthW
DescribePixelFormat
GetClipRgn
SetWindowExtEx
GetMapMode
CreatePolygonRgn
IntersectClipRect

Exports

Exports

d3dCommsmon

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70b3ca897f02afece9e699b1a1f916c6

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

advapi32

shell32

gdi32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 8KB - Virtual size: 6KB

.reloc Size: 4KB - Virtual size: 2KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 8KB - Virtual size: 6KB

.reloc
Size: 4KB - Virtual size: 2KB