3d897df6781c2101a9b8bfc42d4c01c0a475eb1c6cd4bc3d311e262ecae44d71

Sharing

Copy URL Twitter E-mail

General

Target

3d897df6781c2101a9b8bfc42d4c01c0a475eb1c6cd4bc3d311e262ecae44d71
Size

772KB
MD5

6c2c07e244ecdd7f38605af3724047e0
SHA1

9fbf523871bac3aa808191e5d3db1398dbc61b86
SHA256

3d897df6781c2101a9b8bfc42d4c01c0a475eb1c6cd4bc3d311e262ecae44d71
SHA512

3a249fa44df602426ebdcfa25983c83f0d21e15b9c4be568f5e9b49570d00c12e3774b3c4216d63747579b922945053f879a7b356dab80350baa3d575ac33b4d
SSDEEP

6144:6Bu2eQZegnrU5jJGI8aQ2C4aEDkIiyQzC/Re4:6BcyqJGIM4TDkLyYm1

Score

N/A

Malware Config

Signatures

Files

3d897df6781c2101a9b8bfc42d4c01c0a475eb1c6cd4bc3d311e262ecae44d71
.dll windows x86

db7e9c3142c46cbc185e03d7864011f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
GetTempPathW
CreateFileW
SetFilePointer
ReadFile
WriteFile
GetVersionExA
GetModuleHandleA
FindResourceExA
LoadResource
FreeResource
LockResource
ExitProcess
GetCommandLineA
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetDriveTypeW
FindFirstFileW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetTempPathA
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
HeapReAlloc
HeapSize
VirtualAlloc
IsBadWritePtr
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameW
LoadLibraryA
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
GetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
GetLocaleInfoA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetTempFileNameA
MoveFileW
MoveFileA
DeleteFileW
AreFileApisANSI
DeleteFileA
WideCharToMultiByte
GetVersion
UnmapViewOfFile
CloseHandle
SetErrorMode
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetModuleFileNameA
FindFirstFileA
FindClose
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalFree
GlobalReAlloc
GlobalAlloc
HeapDestroy

user32

UpdateWindow
GetParent
SetParent
GetFocus
SetWindowLongA
GetWindowLongA
GetClassNameA
SetWindowsHookExA
GetWindowLongW
SetWindowsHookExW
SetWindowLongW
DefDlgProcA
DefDlgProcW
TranslateAcceleratorA
CallNextHookEx
DialogBoxParamA
DialogBoxParamW
CreateDialogParamA
CreateDialogParamW
PostMessageA
EndDialog
UnhookWindowsHookEx
GetDlgItem
DefWindowProcA
DefWindowProcW
CallWindowProcA
CallWindowProcW
SetWindowTextW
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetWindowTextW
GetWindowTextLengthW
SendMessageW
FillRect
GetSysColor
DrawFocusRect
DrawTextA
DrawTextW
EnumChildWindows
LoadBitmapA
DestroyCursor
LoadIconA
DestroyIcon
LoadMenuA
DestroyMenu
IsWindow
SystemParametersInfoA
GetDesktopWindow
SetWindowPos
ShowWindow
DestroyWindow
OemToCharBuffA
CharToOemA
GetClientRect
InvalidateRect
WinHelpA
RegisterClassW
LoadCursorA
RegisterClassA
GetSystemMetrics
ScreenToClient
IsRectEmpty
GetWindowRect
IsWindowUnicode
CreateWindowExW
CreateWindowExA
SetRect
EnableWindow
SetFocus
GetDlgItemInt
IsWindowEnabled
SetDlgItemInt
IsWindowVisible
SetForegroundWindow
BringWindowToTop
CopyRect
GetDC
ReleaseDC
SendMessageA

gdi32

CreatePen
CreateSolidBrush
GetTextColor
GetBkColor
GetTextExtentPoint32W
SetBkColor
TextOutA
TextOutW
DeleteDC
BitBlt
CreateCompatibleDC
CreateBitmap
Rectangle
GetTextExtentPointA
SetTextColor
GetObjectA
EnumFontFamiliesExA
CreateFontIndirectA
GetTextMetricsA
GetStockObject
GetTextExtentPoint32A
SelectObject
GetCurrentObject
DeleteObject

advapi32

GetSecurityInfo
InitializeAcl
GetAce
AddAce
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegQueryValueExA

Exports

Exports

EXPLAINLISTPROC
GramAddStats
GramCheck
GramCloseMdt
GramCloseUdr
GramExplainDlg
GramFreeGrb
GramGetError
GramIgnoreRule
GramInit
GramInitStats
GramIsRuleIgnored
GramOpenMdt
GramOpenUdr
GramOptionsDlg
GramResetOptions
GramResetRule
GramSaveRule
GramStats
GramStatsDlg
GramTerminate
GramUseOptions
GramVersion
GramWriteOptions
MyFontEnumFunc

Sections

.text
Size: 668KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db7e9c3142c46cbc185e03d7864011f5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 668KB - Virtual size: 664KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 20KB - Virtual size: 36KB

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 668KB - Virtual size: 664KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 20KB - Virtual size: 36KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 20KB - Virtual size: 19KB