b997194fdfaffb04183882224349599e729e27678324a127bda54c055d603339

Sharing

Copy URL

Twitter E-mail

General

Target

b997194fdfaffb04183882224349599e729e27678324a127bda54c055d603339
Size

416KB
MD5

cd0100a8a631ef94a38d4e6ec404e760
SHA1

3a51c028b292e22f0c9c3f9fe71ab8fdb3c59cb7
SHA256

b997194fdfaffb04183882224349599e729e27678324a127bda54c055d603339
SHA512

2b4a2d45c77e5bec68f6af78ef39f54631f2134838ed43c2e53c1eb41d9823b92b9601e5ed1c51dbed3d51fc64a8ba5d07b16c71aed834d981fc8345a0aecd58
SSDEEP

6144:YKawgit3UV1hSe/xcGCa6VZbr4zLAkPpGEJUNGhsUpGyLiy4MgxmkFGLscykuO8b:vanipyGzhYckBGEJvZpZLizkEcykulM

Score

N/A

Malware Config

Signatures

Files

b997194fdfaffb04183882224349599e729e27678324a127bda54c055d603339
.dll windows x86

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupTermDefaultQueueCallback
SetupQueueCopyW
SetupQueueCopyIndirectW
SetupPromptReboot
SetupOpenInfFileW
SetupOpenAppendInfFileW
SetupInstallFromInfSectionW
SetupInstallFilesFromInfSectionW
SetupInitDefaultQueueCallbackEx
SetupGetTargetPathW
SetupGetStringFieldW
SetupGetLineCountW
SetupGetIntField
SetupGetFieldCount
SetupFindNextLine
SetupDiSetSelectedDevice
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiOpenClassRegKey
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiClassNameFromGuidW
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
SetupDefaultQueueCallbackW
SetupCopyOEMInfW
SetupCommitFileQueueW
SetupCloseInfFile
SetupCloseFileQueue
CM_Setup_DevNode
CM_Locate_DevNodeW
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Enumerate_Classes

kernel32

lstrcmpiW
WriteFile
WriteConsoleW
CloseHandle
CompareStringW
CopyFileW
CreateDirectoryW
CreateEventW
CreateFileMappingW
CreateMutexW
CreateThread
DeleteCriticalSection
DeleteFileW
DeviceIoControl
EnterCriticalSection
EnumResourceLanguagesW
ExitProcess
FillConsoleOutputCharacterW
FindClose
FindNextFileW
FormatMessageW
FreeConsole
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCommandLineA
GetCommandLineW
GetConsoleCP
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcess
GetDevicePowerState
GetEnvironmentStringsA
GetEnvironmentStringsW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFileSizeEx
GetFileTime
GetFileType
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemDefaultUILanguage
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTempFileNameW
GetThreadLocale
GetTickCount
GetUserDefaultUILanguage
GetVersionExA
GetVersionExW
GetWindowsDirectoryW
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedCompareExchange
InterlockedExchange
InterlockedIncrement
IsValidLocale
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
LoadResource
WriteConsoleOutputW
LocalReAlloc
MapViewOfFile
MoveFileExW
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
RaiseException
ReadConsoleOutputW
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetWriteWatch
SearchPathW
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetHandleCount
SetLastError
SetNamedPipeHandleState
SetStdHandle
SetThreadLocale
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
UnregisterWait
VerSetConditionMask
VerifyVersionInfoW
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
LocalAlloc

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdi32

Polyline
GetTextMetricsW
GetObjectW
GetDeviceCaps
EndPage
DeleteObject
CreatePen
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
StartDocW
StartPage
SetBkMode

advapi32

SetEntriesInAclW
RegSetValueExW
RegQueryValueExW
RegDeleteValueW
RegDeleteKeyW
RegCloseKey
QueryServiceStatus
OpenServiceW
OpenSCManagerW
OpenProcessToken
LsaLookupPrivilegeValue
IsTextUnicode
InitializeSecurityDescriptor
GetTokenInformation
GetLengthSid
FreeSid
DeleteService
ControlService
CloseServiceHandle
AllocateAndInitializeSid
AddAccessDeniedAce
StartServiceW
SetTraceCallback
SetSecurityDescriptorDacl

user32

AllowSetForegroundWindow
AnimateWindow
CharLowerW
CheckDlgButton
CreateIconIndirect
CreateWindowExW
DefWindowProcW
DestroyIcon
DialogBoxParamW
DrawTextExW
EndDialog
GetDC
GetIconInfo
GetProcessWindowStation
GetSysColor
GetSystemMetrics
GetUserObjectInformationW
IsDlgButtonChecked
LoadBitmapW
LoadIconW
LoadImageW
MessageBoxW
PostMessageW
PostQuitMessage
SendDlgItemMessageW
SendMessageW
SetDlgItemTextW
SetFocus
SetWindowLongW
SetWindowTextW
ShowWindow
SystemParametersInfoW

shell32

ShellHookProc
ShellExecuteExW
SHGetFolderPathW

Exports

Exports

KeyboardInterrupt
NewEx
ReadLastObjectFromFile
SetAttrString
convert_to_rfc1123
get_copyright
memcpy_check
process_data

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

53f63443133e6a0c30ccddeb5c4734cd

Headers

File Characteristics

Imports

setupapi

kernel32

version

gdi32

advapi32

user32

shell32

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 188KB - Virtual size: 187KB

.data Size: 102KB - Virtual size: 102KB

.rsrc Size: 21KB - Virtual size: 21KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 188KB - Virtual size: 187KB

.data
Size: 102KB - Virtual size: 102KB

.rsrc
Size: 21KB - Virtual size: 21KB

.reloc
Size: 5KB - Virtual size: 5KB