b60c392a8ccfc5af9a8f11466021eb93c68daa65976b642590761fda4680ca86

Sharing

Copy URL Twitter E-mail

General

Target

b60c392a8ccfc5af9a8f11466021eb93c68daa65976b642590761fda4680ca86
Size

148KB
MD5

20b76e302a0211aef8d14c5b1383ef77
SHA1

c6e51024b584892275324184fc1b585f54b239ac
SHA256

b60c392a8ccfc5af9a8f11466021eb93c68daa65976b642590761fda4680ca86
SHA512

e98de9378e65afb16c01e6fb110b04726decf71a624f9a2db99a20c653c47c764b2ce4a68e66b95d0eeb547a3b480e96418fb0c1c0979ae250013a7e8bad8fa2
SSDEEP

3072:0LoWO6W5tCIT2PUv+k+yi6SS+o9+W8JN7+O:0lOZ5hSMi8SRW8b7+

Score

N/A

Malware Config

Signatures

Files

b60c392a8ccfc5af9a8f11466021eb93c68daa65976b642590761fda4680ca86
.dll windows x86

7189e1712fecb2be62660360eab4eeb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
GetNamedPipeHandleStateA
GetNamedPipeInfo
GetOverlappedResult
GetProcAddress
GetShortPathNameW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempPathW
GetTickCount
GetVersionExA
GetVolumeInformationW
GlobalMemoryStatusEx
GlobalUnlock
HeapAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
InterlockedExchange
IsBadReadPtr
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LocalAlloc
LocalFileTimeToFileTime
MapUserPhysicalPagesScatter
MapViewOfFile
MultiByteToWideChar
OpenProcess
OpenThread
OutputDebugStringA
OutputDebugStringW
GetModuleHandleA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW
RequestWakeupLatency
ResetEvent
ResumeThread
RtlUnwind
SetEndOfFile
SetErrorMode
SetLastError
SetThreadLocale
Sleep
SystemTimeToFileTime
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TransactNamedPipe
TryEnterCriticalSection
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteFile
lstrcmpiA
lstrcpyW
lstrlenW
GetLastError
GetHandleInformation
GetFullPathNameW
GetFileInformationByHandle
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetCurrentDirectoryW
GetConsoleFontSize
GetComputerNameExW
GetACP
FreeLibrary
FormatMessageW
FindNextChangeNotification
FindFirstFileW
FindFirstChangeNotificationW
FindCloseChangeNotification
FindClose
FileTimeToSystemTime
ExpandEnvironmentStringsW
ExitThread
ExitProcess
EnterCriticalSection
DisconnectNamedPipe
DeviceIoControl
DeleteTimerQueueTimer
DeleteFileW
DeleteCriticalSection
CreateThread
CreateTapePartition
CreatePipe
CreateNamedPipeW
CreateFileW
CreateFileA
CreateDirectoryW
ConnectNamedPipe
CloseHandle
Process32First
CancelIo

shell32

SHGetFolderPathW

advapi32

SetSecurityDescriptorDacl
SetSecurityDescriptorControl
SetEntriesInAclW
RevertToSelf
ReportEventW
RegisterServiceCtrlHandlerExA
RegisterEventSourceW
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
OpenServiceW
OpenSCManagerW
OpenProcessToken
MapGenericMask
InitializeSecurityDescriptor
InitializeAcl
ImpersonateSelf
ImpersonateNamedPipeClient
GetUserNameW
GetTokenInformation
GetSecurityDescriptorSacl
GetNamedSecurityInfoW
GetLengthSid
GetFileSecurityW
GetExplicitEntriesFromAclW
FreeSid
DeregisterEventSource
DeleteService
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW
CryptAcquireContextA
CreateServiceW
CloseServiceHandle
AddAccessAllowedAce
AccessCheck
SetServiceStatus
StartServiceCtrlDispatcherA
SetSecurityDescriptorOwner

ws2_32

bind
accept
__WSAFDIsSet
WSCEnableNSProvider
closesocket
connect
send
select
listen
ioctlsocket
inet_addr
getsockopt
getsockname
gethostname

user32

LookupIconIdFromDirectory
MessageBoxW
MsgWaitForMultipleObjectsEx
NotifyWinEvent
PeekMessageA
RegisterDeviceNotificationA
wsprintfW
CharUpperA

ole32

CoInitialize
CoQueryProxyBlanket
CoSetProxyBlanket
CoTaskMemFree
CoUninitialize
WriteClassStm
CoCreateInstance

setupapi

SetupOpenMasterInf
SetupDiSetSelectedDriverW
SetupDiSetDeviceRegistryPropertyW
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoA
SetupDiGetDriverInfoDetailW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailW
SetupDiGetDeviceInterfaceDetailA
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsA
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInterfaces
SetupDiEnumDeviceInfo
SetupDiDestroyDriverInfoList
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
CM_Request_Device_EjectW
CM_Locate_DevNodeA
CM_Get_Sibling
CM_Get_Parent
CM_Get_Next_Log_Conf
CM_Get_Device_ID_Size
CM_Get_Device_IDA
CM_Get_DevNode_Registry_PropertyW
CM_Get_DevNode_Registry_PropertyA
CM_Get_Depth
CM_Get_Child
CMP_UnregisterNotification
CM_Add_Empty_Log_Conf
CM_Free_Log_Conf_Handle

Exports

Exports

ADeviceStartPlay
DeleteContext
HrGetMsgParam
OpenFileStreamWithFlags
SetColumns
UpdateRebarBandColors

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 850B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7189e1712fecb2be62660360eab4eeb2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

advapi32

ws2_32

user32

ole32

setupapi

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 50KB

.rdata Size: 88KB - Virtual size: 88KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 1024B - Virtual size: 850B

.text
Size: 50KB - Virtual size: 50KB

.rdata
Size: 88KB - Virtual size: 88KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 1024B - Virtual size: 850B