da315fb4d2f8ea3ef629a4def0fd645d09020502041018bbe27744502eb8ab4a

Sharing

Copy URL Twitter E-mail

General

Target

da315fb4d2f8ea3ef629a4def0fd645d09020502041018bbe27744502eb8ab4a
Size

1010KB
MD5

81ca7bb96eff0d18ce52154f50fc87df
SHA1

fb91bfd3fee0643c8b1177d2022d40a43c7050ec
SHA256

da315fb4d2f8ea3ef629a4def0fd645d09020502041018bbe27744502eb8ab4a
SHA512

254b6774e6193cb15491de192b316227a83be184c7dfb3caca02cf6cea526296257faf35025462d0b61d9bb1bdbc80045f87c5a129286b915c17213b2bbcaef6
SSDEEP

24576:mYcOH18fuU0dbbP5fcBxT2xEd4ASf2VR+x:mYcq8fuU09bP5C2xEd4j+c

Score

N/A

Malware Config

Signatures

Files

da315fb4d2f8ea3ef629a4def0fd645d09020502041018bbe27744502eb8ab4a
.dll windows x86

267868fa1554e5493a451b10067bd915

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
GlobalFree
InterlockedDecrement
GetVersionExA
lstrcmpW
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
ConvertDefaultLocale
GetCurrentThread
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
FileTimeToSystemTime
FileTimeToLocalFileTime
GetPrivateProfileIntW
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
SetErrorMode
lstrlenA
InterlockedIncrement
GlobalFlags
LocalFree
GetFileSizeEx
GetFileTime
HeapAlloc
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
RaiseException
ExitThread
CreateThread
HeapReAlloc
HeapSize
VirtualFree
VirtualAlloc
HeapCreate
HeapDestroy
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
ResumeThread
SuspendThread
GetPrivateProfileSectionA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileSectionW
GetPrivateProfileStructA
WritePrivateProfileStructA
DeleteFileW
GetNativeSystemInfo
GetVersion
GlobalAlloc
GlobalLock
GlobalUnlock
QueryPerformanceCounter
GetCurrentThreadId
GetPrivateProfileStructW
WritePrivateProfileStructW
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
lstrlenW
DecodeSystemPointer
EncodeSystemPointer
ReadFile
DeviceIoControl
CreateFileW
GetSystemTimeAsFileTime
Beep
FlushInstructionCache
ReadProcessMemory
VirtualProtect
WideCharToMultiByte
SetLastError
GetLastError
DecodePointer
FreeLibrary
LoadLibraryW
WaitForSingleObject
ExitProcess
TerminateProcess
SetEvent
OpenEventW
EncodePointer
MultiByteToWideChar
IsBadReadPtr
GetModuleFileNameW
GetTickCount
FindResourceW
LoadResource
LockResource
SizeofResource
WriteProcessMemory
VirtualProtectEx
GetCurrentProcess
GetModuleHandleW
Sleep
OutputDebugStringW
CloseHandle
GetProcAddress
GetModuleHandleA
GetCurrentProcessId
GetVersionExW

user32

LoadCursorW
GetDC
ReleaseDC
GetSysColorBrush
UnregisterClassW
CharUpperW
SetCursor
GetMessageW
ValidateRect
PostQuitMessage
ShowWindow
SetWindowTextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
DestroyMenu
GetFocus
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
GetKeyState
SetMenu
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
SetWindowLongW
GetWindowPlacement
GetSystemMetrics
GetWindow
GetActiveWindow
DestroyWindow
GetDlgItem
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
MessageBoxW
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
IsIconic
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
RemovePropW
IsWindowVisible
GetWindowRect
GetCursorPos
SendMessageW
SetWindowPos
SetForegroundWindow
GetForegroundWindow
GetClassNameW
GetWindowTextW
PeekMessageW
TranslateMessage
DispatchMessageW
EnableWindow
PostMessageW
IsWindow
SetWindowsHookExW
FindWindowExW
CallNextHookEx
GetWindowThreadProcessId
SystemParametersInfoA

gdi32

DeleteDC
GetStockObject
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
GetDeviceCaps
DeleteObject
SetMapMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
TextOutW

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shlwapi

PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

CreateInterfaceEx

Sections

.text
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.d
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

0
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 364KB - Virtual size: 364KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

267868fa1554e5493a451b10067bd915

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shlwapi

oleaut32

Exports

Exports

Sections

.text Size: 400KB - Virtual size: 400KB

.rdata Size: 87KB - Virtual size: 87KB

.data Size: 69KB - Virtual size: 121KB

.d Size: 4KB - Virtual size: 4KB

.rsrc Size: 11KB - Virtual size: 11KB

0 Size: 51KB - Virtual size: 50KB

1 Size: 364KB - Virtual size: 364KB

.reloc Size: 21KB - Virtual size: 20KB

.text
Size: 400KB - Virtual size: 400KB

.rdata
Size: 87KB - Virtual size: 87KB

.data
Size: 69KB - Virtual size: 121KB

.d
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 11KB - Virtual size: 11KB

0
Size: 51KB - Virtual size: 50KB

1
Size: 364KB - Virtual size: 364KB

.reloc
Size: 21KB - Virtual size: 20KB