General

Malware Config

Signatures

Files

• 88da99406952a8a6d463f61b106a5e516121c3ac6c89307bdac084455316cde7

  .dll windows x86

  e2224a1d5d44d0f0c9ddbea29e35843d

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  ws2_32

  gethostbyname

  WSACleanup

  WSAStartup

  ole32

  CoTaskMemRealloc

  CoTaskMemFree

  CoUninitialize

  OleUninitialize

  OleInitialize

  CreateStreamOnHGlobal

  CoCreateInstance

  CLSIDFromString

  CLSIDFromProgID

  CoGetClassObject

  CoTaskMemAlloc

  OleLockRunning

  StringFromGUID2

  CoInitialize

  wininet

  InternetConnectA

  InternetReadFile

  InternetCrackUrlA

  InternetOpenA

  GetUrlCacheEntryInfoA

  InternetCloseHandle

  HttpOpenRequestA

  HttpSendRequestA

  urlmon

  URLDownloadToFileA

  kernel32

  WideCharToMultiByte

  MultiByteToWideChar

  CloseHandle

  ReadFile

  GetFileSize

  CreateFileA

  GetLocalTime

  MapViewOfFile

  CreateFileMappingA

  OpenFileMappingA

  UnmapViewOfFile

  FlushViewOfFile

  Sleep

  FindClose

  FindFirstFileA

  SetProcessWorkingSetSize

  GetCurrentProcess

  GetTickCount

  DeviceIoControl

  WaitForSingleObject

  CreateThread

  CreateDirectoryA

  RemoveDirectoryA

  FindNextFileA

  DeleteFileA

  SetFileAttributesA

  lstrcmpA

  lstrcatA

  lstrcpyA

  CopyFileA

  GetWindowsDirectoryA

  FreeLibrary

  GetProcAddress

  LoadLibraryA

  lstrcpynA

  lstrlenA

  GetEnvironmentVariableA

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  FlushInstructionCache

  InterlockedDecrement

  GetCurrentThreadId

  SetLastError

  lstrlenW

  GetLastError

  InitializeCriticalSectionAndSpinCount

  DeleteCriticalSection

  MulDiv

  GetModuleFileNameA

  InterlockedIncrement

  GlobalUnlock

  GlobalLock

  GlobalAlloc

  WriteFile

  SetFilePointer

  GetProcessHeap

  UnlockFile

  GetDiskFreeSpaceExA

  GetFullPathNameA

  GetPrivateProfileSectionA

  GetModuleHandleA

  lstrcmpiA

  IsDBCSLeadByte

  GetModuleFileNameW

  LoadResource

  FindResourceA

  LoadLibraryExA

  GetSystemTimeAsFileTime

  GetVolumeInformationA

  GetSystemDirectoryA

  GetVersionExA

  CreateProcessA

  SetErrorMode

  SetEvent

  OpenEventA

  WaitForMultipleObjects

  CreateMutexA

  CreateEventA

  LocalFree

  GetConsoleCP

  GetStartupInfoW

  GetFileType

  GetStdHandle

  SetHandleCount

  HeapDestroy

  HeapCreate

  ExitProcess

  HeapSize

  TlsFree

  TlsSetValue

  TlsGetValue

  TlsAlloc

  TerminateProcess

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetConsoleMode

  GetCPInfo

  LCMapStringW

  GetCommandLineA

  VirtualQuery

  GetSystemInfo

  GetModuleHandleW

  VirtualProtect

  GetFileAttributesA

  RtlUnwind

  DecodePointer

  EncodePointer

  InitializeCriticalSection

  InterlockedExchange

  InterlockedPopEntrySList

  VirtualAlloc

  VirtualFree

  IsProcessorFeaturePresent

  HeapAlloc

  HeapFree

  InterlockedPushEntrySList

  InterlockedCompareExchange

  GetLocaleInfoW

  HeapReAlloc

  GetACP

  GetOEMCP

  IsValidCodePage

  FreeEnvironmentStringsW

  GetEnvironmentStringsW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetStringTypeW

  GetUserDefaultLCID

  GetLocaleInfoA

  EnumSystemLocalesA

  IsValidLocale

  SetStdHandle

  LoadLibraryW

  WriteConsoleW

  SetEndOfFile

  CreateFileW

  SizeofResource

  FlushFileBuffers

  user32

  AdjustWindowRectEx

  GetWindowTextA

  IsWindow

  GetWindowTextLengthA

  RegisterWindowMessageA

  PostMessageA

  FindWindowExA

  DispatchMessageA

  TranslateMessage

  GetMessageA

  PeekMessageA

  UpdateWindow

  ShowWindow

  MapWindowPoints

  GetMonitorInfoA

  MonitorFromWindow

  CreateAcceleratorTableA

  GetDesktopWindow

  GetFocus

  GetWindow

  SetFocus

  DestroyAcceleratorTable

  BeginPaint

  EndPaint

  FillRect

  ReleaseCapture

  GetClassNameA

  UnregisterClassA

  GetParent

  IsChild

  SetCapture

  RedrawWindow

  InvalidateRgn

  InvalidateRect

  ScreenToClient

  ClientToScreen

  CharNextA

  GetSysColor

  CreateWindowExA

  RegisterClassExA

  CallWindowProcA

  DefWindowProcA

  SetActiveWindow

  PostQuitMessage

  LoadCursorA

  GetClassInfoExA

  KillTimer

  SetTimer

  SetWindowPos

  MoveWindow

  SetWindowTextA

  SendMessageA

  GetWindowLongA

  SetWindowLongA

  SetWindowRgn

  ReleaseDC

  GetDC

  GetWindowRect

  GetClientRect

  GetSystemMetrics

  LoadImageA

  DestroyWindow

  GetDlgItem

  gdi32

  GetStockObject

  GetObjectA

  CreateSolidBrush

  GetDeviceCaps

  CreateCompatibleDC

  SaveDC

  RestoreDC

  SelectObject

  GetPixel

  DeleteObject

  CreateRectRgn

  CombineRgn

  DeleteDC

  BitBlt

  CreateCompatibleBitmap

  advapi32

  SetSecurityDescriptorDacl

  RegEnumValueA

  RegEnumKeyExA

  RegQueryInfoKeyW

  RegSetValueExA

  RegCloseKey

  RegDeleteValueA

  RegDeleteKeyA

  RegCreateKeyExA

  RegOpenKeyExA

  RegQueryValueA

  RegCreateKeyA

  InitializeSecurityDescriptor

  oleaut32

  VarUI4FromStr

  DispCallFunc

  LoadTypeLi

  LoadRegTypeLi

  OleCreateFontIndirect

  VariantInit

  SysAllocString

  SysAllocStringLen

  VariantClear

  SysStringLen

  SysFreeString

  Exports

  Exports

  Always

  ConfigAd

  GetADpop

  HKbolo

  HashAd

  PlayAb

  PrioritPutAd

  PutTestSpecial

  SetAdOnbk

  StandYourad

  _2

  adefee

  heyllow

  msnpop

  qqadpop

  Sections

  .text

  Size: 274KB - Virtual size: 273KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 62KB - Virtual size: 61KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 17KB - Virtual size: 285KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 5KB - Virtual size: 4KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 23KB - Virtual size: 23KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ