91aedc216ecd41c0e64df9d428ad372c55ad7f8706d40b270dd0b2f87c94e0f2

Sharing

Copy URL Twitter E-mail

General

Target

91aedc216ecd41c0e64df9d428ad372c55ad7f8706d40b270dd0b2f87c94e0f2
Size

230KB
MD5

fc0a75cc085bcc8b29080d022eea32bd
SHA1

7b3bf4fe3819307b27bad77b2eadfde089a67d91
SHA256

91aedc216ecd41c0e64df9d428ad372c55ad7f8706d40b270dd0b2f87c94e0f2
SHA512

bcac8fdf7ed4ed4d5ebfaf5b73d1fbb493893da7f1f4bdbc3f4935ee83878b30ce69a834b1bce222785ad1c8f93cecf04f248ad9a94572197b44b03af08e2b7b
SSDEEP

6144:5DFB47UhXBh2yJ5HcOSSSH9nHj7rurFFaf:5DT47U5r2Q+dnHj7a5

Score

N/A

Malware Config

Signatures

Files

91aedc216ecd41c0e64df9d428ad372c55ad7f8706d40b270dd0b2f87c94e0f2
.dll windows x86

26865b7171db1d5c65acde04238656b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
_callnewh
malloc
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
_CxxThrowException
_purecall
ceil
realloc
free
memmove
towupper
memset
_vsnprintf
wcschr
_vsnwprintf
__CxxFrameHandler
memcpy

advapi32

RegOpenKeyExA
RegQueryValueExA
ImpersonateLoggedOnUser
RevertToSelf
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
SetNamedSecurityInfoW
OpenProcessToken
ConvertSidToStringSidW
GetTokenInformation
RegQueryInfoKeyW
RegEnumValueW
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
ConvertStringSecurityDescriptorToSecurityDescriptorW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
TraceEvent

user32

PeekMessageW
GetSystemMetrics
TranslateMessage
DispatchMessageW
MsgWaitForMultipleObjects

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
RtlUnwind
InterlockedExchange
OpenMutexW
CreateMutexW
ReleaseMutex
GetThreadPriority
SetThreadPriority
FileTimeToSystemTime
GetSystemTimeAsFileTime
FileTimeToDosDateTime
GetTempFileNameW
Sleep
GlobalFree
WaitForMultipleObjects
GetTempPathW
GetLongPathNameW
GetVersionExW
WideCharToMultiByte
CreateDirectoryW
GetFileAttributesW
GetFileSizeEx
SetFilePointerEx
lstrlenW
GetThreadLocale
GetModuleHandleA
OpenEventA
GetVersionExA
SetErrorMode
DelayLoadFailureHook
GetCurrentThread
WaitForSingleObject
InterlockedDecrement
OpenFileMappingW
VirtualFree
WriteFile
InterlockedIncrement
ResetEvent
CreateThread
FreeLibraryAndExitThread
CreateEventW
GetFileSize
ReadFile
DuplicateHandle
SetEvent
RaiseException
GetFileAttributesExW
CompareFileTime
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentProcess
GetTickCount
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
LocalFree
LocalAlloc
FreeLibrary
GetProcAddress
LoadLibraryW
DisableThreadLibraryCalls
InterlockedCompareExchange
LoadLibraryA
CompareStringW
VirtualAlloc
SetLastError
GetLastError
LeaveCriticalSection
EnterCriticalSection
CloseHandle
UnmapViewOfFile
SystemTimeToFileTime
GetSystemTime
MapViewOfFile
CreateFileMappingW
CreateFileW
DeleteCriticalSection

Exports

Exports

SqmAddToAverage
SqmAddToStream
SqmAddToStreamDWord
SqmAddToStreamString
SqmAddToStreamV
SqmCleanup
SqmClearFlags
SqmCreateNewId
SqmEndSession
SqmFlushSession
SqmGetEnabled
SqmGetFlags
SqmGetMachineId
SqmGetSession
SqmGetSessionStartTime
SqmGetUserId
SqmIncrement
SqmIsWindowsOptedIn
SqmReadSharedMachineId
SqmReadSharedUserId
SqmSet
SqmSetAppId
SqmSetAppVersion
SqmSetBits
SqmSetBool
SqmSetCurrentTimeAsUploadTime
SqmSetEnabled
SqmSetFlags
SqmSetIfMax
SqmSetIfMin
SqmSetMachineId
SqmSetString
SqmSetUserId
SqmStartSession
SqmStartUpload
SqmSysprepGeneralize
SqmSysprepSpecialize
SqmTimerAccumulate
SqmTimerAddToAverage
SqmTimerRecord
SqmTimerStart
SqmUnattendedSetup
SqmWaitForUploadComplete
SqmWriteSharedMachineId
SqmWriteSharedUserId

Sections

.text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26865b7171db1d5c65acde04238656b5

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

user32

kernel32

Exports

Exports

Sections

.text Size: 121KB - Virtual size: 120KB

.data Size: 1KB - Virtual size: 1KB

.rsrc Size: 100KB - Virtual size: 99KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 121KB - Virtual size: 120KB

.data
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 100KB - Virtual size: 99KB

.reloc
Size: 6KB - Virtual size: 6KB