b35e20c61c08efedd2551cbccf9657ae0936342910a798f9eee8778c7ba84bee

Sharing

Copy URL Twitter E-mail

General

Target

b35e20c61c08efedd2551cbccf9657ae0936342910a798f9eee8778c7ba84bee
Size

772KB
MD5

e4827b6beed66b158e48a9a8739828e0
SHA1

b65171874f2d6c702cb88e602545b058abf026c4
SHA256

b35e20c61c08efedd2551cbccf9657ae0936342910a798f9eee8778c7ba84bee
SHA512

defb11c4bac2caf3887443a9944ff78835b89db378bd19eaff12dc8ac11042c9b0f0d1cac046856951ed1c025ef70fd6083313b4b254f77fee9f3591f56575d0
SSDEEP

6144:pcvGTzsMDjCOo5jBrXu4uEDkIiyQzC/Re4:yG3NGO6l7PDkLyYm1

Score

N/A

Malware Config

Signatures

Files

b35e20c61c08efedd2551cbccf9657ae0936342910a798f9eee8778c7ba84bee
.dll windows x86

db7e9c3142c46cbc185e03d7864011f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
GetTempPathW
CreateFileW
SetFilePointer
ReadFile
WriteFile
GetVersionExA
GetModuleHandleA
FindResourceExA
LoadResource
FreeResource
LockResource
ExitProcess
GetCommandLineA
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetDriveTypeW
FindFirstFileW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetTempPathA
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
HeapReAlloc
HeapSize
VirtualAlloc
IsBadWritePtr
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameW
LoadLibraryA
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
GetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
GetLocaleInfoA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetTempFileNameA
MoveFileW
MoveFileA
DeleteFileW
AreFileApisANSI
DeleteFileA
WideCharToMultiByte
GetVersion
UnmapViewOfFile
CloseHandle
SetErrorMode
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetModuleFileNameA
FindFirstFileA
FindClose
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalFree
GlobalReAlloc
GlobalAlloc
HeapDestroy

user32

UpdateWindow
GetParent
SetParent
GetFocus
SetWindowLongA
GetWindowLongA
GetClassNameA
SetWindowsHookExA
GetWindowLongW
SetWindowsHookExW
SetWindowLongW
DefDlgProcA
DefDlgProcW
TranslateAcceleratorA
CallNextHookEx
DialogBoxParamA
DialogBoxParamW
CreateDialogParamA
CreateDialogParamW
PostMessageA
EndDialog
UnhookWindowsHookEx
GetDlgItem
DefWindowProcA
DefWindowProcW
CallWindowProcA
CallWindowProcW
SetWindowTextW
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetWindowTextW
GetWindowTextLengthW
SendMessageW
FillRect
GetSysColor
DrawFocusRect
DrawTextA
DrawTextW
EnumChildWindows
LoadBitmapA
DestroyCursor
LoadIconA
DestroyIcon
LoadMenuA
DestroyMenu
IsWindow
SystemParametersInfoA
GetDesktopWindow
SetWindowPos
ShowWindow
DestroyWindow
OemToCharBuffA
CharToOemA
GetClientRect
InvalidateRect
WinHelpA
RegisterClassW
LoadCursorA
RegisterClassA
GetSystemMetrics
ScreenToClient
IsRectEmpty
GetWindowRect
IsWindowUnicode
CreateWindowExW
CreateWindowExA
SetRect
EnableWindow
SetFocus
GetDlgItemInt
IsWindowEnabled
SetDlgItemInt
IsWindowVisible
SetForegroundWindow
BringWindowToTop
CopyRect
GetDC
ReleaseDC
SendMessageA

gdi32

CreatePen
CreateSolidBrush
GetTextColor
GetBkColor
GetTextExtentPoint32W
SetBkColor
TextOutA
TextOutW
DeleteDC
BitBlt
CreateCompatibleDC
CreateBitmap
Rectangle
GetTextExtentPointA
SetTextColor
GetObjectA
EnumFontFamiliesExA
CreateFontIndirectA
GetTextMetricsA
GetStockObject
GetTextExtentPoint32A
SelectObject
GetCurrentObject
DeleteObject

advapi32

GetSecurityInfo
InitializeAcl
GetAce
AddAce
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegQueryValueExA

Exports

Exports

EXPLAINLISTPROC
GramAddStats
GramCheck
GramCloseMdt
GramCloseUdr
GramExplainDlg
GramFreeGrb
GramGetError
GramIgnoreRule
GramInit
GramInitStats
GramIsRuleIgnored
GramOpenMdt
GramOpenUdr
GramOptionsDlg
GramResetOptions
GramResetRule
GramSaveRule
GramStats
GramStatsDlg
GramTerminate
GramUseOptions
GramVersion
GramWriteOptions
MyFontEnumFunc

Sections

.text
Size: 668KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db7e9c3142c46cbc185e03d7864011f5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 668KB - Virtual size: 664KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 20KB - Virtual size: 36KB

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 668KB - Virtual size: 664KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 20KB - Virtual size: 36KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 20KB - Virtual size: 19KB