df9adb75bb8d58f526cbc3f27df5dfb784c438f2a1dfa36e108d62aa2499fd4b

Sharing

Copy URL Twitter E-mail

General

Target

df9adb75bb8d58f526cbc3f27df5dfb784c438f2a1dfa36e108d62aa2499fd4b
Size

178KB
MD5

0396ed95923648743edbbc748d5bf470
SHA1

9184e0aa3befcc3c244b48b4c356c5ef7fa1221a
SHA256

df9adb75bb8d58f526cbc3f27df5dfb784c438f2a1dfa36e108d62aa2499fd4b
SHA512

34eb6c8731cb10d4b8e3f95703b93cacd9461ea294950d536ad6dc3dc065f0b0b819fcf70ff54fcce3d6af505b3484996f40f8af2562dcfa8f7b3d866196f87e
SSDEEP

3072:+c0+B8onPPrb+9sGvWWfDx4D6t9Ao+uuP1ntdQTyPeODPtCxqB+camh:hc4+OIJfyWtK7ZtdhmGham

Score

N/A

Malware Config

Signatures

Files

df9adb75bb8d58f526cbc3f27df5dfb784c438f2a1dfa36e108d62aa2499fd4b
.dll windows x86

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoInitialize
CoCreateInstance

advapi32

RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
LsaNtStatusToWinError
NotifyBootConfigStatus
RegCloseKey
RegEnumValueW
RegOpenCurrentUser

user32

SetTimer
PostQuitMessage
GetMessageW

setupapi

SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiGetSelectedDriverW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiDeleteDeviceInfo
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Free_Log_Conf_Ex
CM_Add_Empty_Log_Conf_Ex
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupGetFieldCount
SetupGetStringFieldW
SetupUninstallOEMInfW
SetupDiOpenClassRegKey

oleaut32

SysFreeString
VariantInit
VariantClear
VariantChangeType
VarCyMul
SysStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy

kernel32

_llseek
GetLocaleInfoA
WriteFileEx
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitForSingleObject
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SystemTimeToTzSpecificLocalTime
Sleep
SizeofResource
SignalObjectAndWait
SetStdHandle
SetProcessShutdownParameters
SetFilePointer
SetCurrentDirectoryW
RtlUnwind
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
OpenProcess
MoveFileW
Module32FirstW
MapViewOfFile
LocalFree
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringA
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteFileW
DeviceIoControl
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FindNextFileW
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeThread
GetFileAttributesW
GetFileSizeEx
GetFileType
GetLastError
IsValidLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GlobalHandle
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent

shlwapi

PathFindFileNameW

rpcrt4

RpcMgmtStopServerListening
RpcMgmtWaitServerListen
NdrServerCall2
RpcAsyncRegisterInfo
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcServerRegisterIfEx

shell32

SHFreeNameMappings
SHCreateDirectoryExW
SHAddToRecentDocs
SHGetDesktopFolder

Exports

Exports

AStartUp
CleanupFileNameInPlaceA
ComputeStats
CreateLink
CreateNotify
DeleteTexture
DescribeLayerPlane
FIsSpaceA
GetHtmlCharset
HrCheckTridentMenu
HrYtreamSeekSet
OpenWFileStreamWithFlags
PszAllocW
ReplaceChars
UpdateSubTexture

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 342B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

user32

setupapi

oleaut32

kernel32

shlwapi

rpcrt4

shell32

Exports

Exports

Sections

.text Size: 58KB - Virtual size: 57KB

.rdata Size: 99KB - Virtual size: 98KB

.data Size: 20KB - Virtual size: 20KB

.rsrc Size: 512B - Virtual size: 342B

.text
Size: 58KB - Virtual size: 57KB

.rdata
Size: 99KB - Virtual size: 98KB

.data
Size: 20KB - Virtual size: 20KB

.rsrc
Size: 512B - Virtual size: 342B