1881aeb57bd133e5812fa59991ed92f1c9a562ca3139394fe1194b310bf47872

Sharing

Copy URL Twitter E-mail

General

Target

1881aeb57bd133e5812fa59991ed92f1c9a562ca3139394fe1194b310bf47872
Size

756KB
MD5

818d40d7d19ccfe1736530109f0b5ab4
SHA1

8381598d4e88b9f913fd2f2178a125498103f43e
SHA256

1881aeb57bd133e5812fa59991ed92f1c9a562ca3139394fe1194b310bf47872
SHA512

9e4eace85f03f671c75b4f868e1c32e443e88c810f150907870ec4e4bc5b2158e70643ad5575283cb88846ccfc64a9bfe5fba2327154b20e7fa5d1e03f4420fb
SSDEEP

12288:4RWu36FKfXAgSMHEB5cqrz+5CKJ5n5GUXvE/leJGTcPwH4mzRsfVzt0/D:48O6FKBS1GXLXvEdeJGTpH4mzw2D

Score

N/A

Malware Config

Signatures

Files

1881aeb57bd133e5812fa59991ed92f1c9a562ca3139394fe1194b310bf47872
.dll windows x86

9c4d6d425c438fcc77d2644ede4d63fa

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcessId
GetSystemTimeAsFileTime
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
lstrcpyW
lstrcmpiW
lstrcpynW
lstrcmpW
SizeofResource
LockResource
LoadResource
FindResourceW
lstrlenW
GetVersionExW
GetVersion
GetTickCount
GetTempFileNameW
GetTempPathW
GetProcessHeap
FreeLibrary
GlobalUnlock
GlobalLock
GlobalAlloc
CreateEventW
CloseHandle
SetEvent
WaitForSingleObject
CreateThread
MulDiv
GetSystemTime
LoadLibraryW
GetWindowsDirectoryW
WriteProcessMemory
lstrcmpiA
FlushInstructionCache
ReadFile
SetUnhandledExceptionFilter
DeleteFileA
RaiseException
QueryPerformanceCounter
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
HeapSize
LoadLibraryA
VirtualQuery
InterlockedExchange
RtlUnwind
InitializeCriticalSection
IsBadWritePtr
HeapReAlloc
VirtualAlloc
GetCPInfo
GetOEMCP
GetACP
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
WriteFile
UnhandledExceptionFilter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
SetEndOfFile
GetStdHandle
SetHandleCount
HeapAlloc
HeapFree
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
GetLastError
SetLastError
TlsAlloc
GetCurrentProcess
TerminateProcess
GetModuleHandleA
ExitProcess
GetCommandLineA
GetCurrentThreadId
SetFilePointer
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileA
CreateFileW
SetConsoleCtrlHandler
MultiByteToWideChar
GetModuleHandleW
GetProcAddress
GetModuleFileNameW
GetVersionExA

user32

GetScrollRange
SetScrollPos
ShowScrollBar
SetScrollInfo
SetScrollRange
IsWindowEnabled
LoadStringW
DrawFrameControl
EnumChildWindows
SetFocus
GetFocus
SetRect
EnableWindow
GetWindowWord
DrawIcon
DestroyIcon
DrawStateW
ValidateRect
EqualRect
DrawMenuBar
IsMenu
LoadImageW
SystemParametersInfoW
CharLowerW
CharUpperW
CopyIcon
DestroyCursor
SetCursor
GetSubMenu
GetMenuItemID
CopyRect
MapWindowPoints
GetMessagePos
MessageBoxA
GetCapture
DrawTextExW
CreateIconIndirect
EnableScrollBar
DrawEdge
SetForegroundWindow
IsWindowVisible
InvalidateRect
SetCapture
ReleaseCapture
UpdateWindow
SetTimer
LoadCursorW
RegisterClassExW
GetScrollPos
GetCursor
GetIconInfo
KillTimer
DestroyWindow
GetDC
BeginPaint
EndPaint
CreateWindowExW
UnregisterClassW
GetDesktopWindow
LockWindowUpdate
SetPropW
RedrawWindow
SetWindowRgn
SetWindowPos
SetWindowLongW
RemovePropW
GetMenu
SetMenu
GetWindowInfo
CallWindowProcW
MoveWindow
ShowWindow
PostMessageW
ReleaseDC
GetWindowDC
GetWindowTextW
DefWindowProcW
CharUpperBuffA
GetSystemMenu
IsZoomed
EnableMenuItem
GetCursorPos
DestroyMenu
GetClientRect
InflateRect
DrawTextW
GetClassLongW
DrawIconEx
ClientToScreen
ScreenToClient
IsRectEmpty
GetMenuItemCount
CreatePopupMenu
InsertMenuItemW
GetMenuItemInfoW
FillRect
GetKeyState
CopyAcceleratorTableW
PtInRect
GetScrollInfo
GetSystemMetrics
GetWindowRect
UnhookWindowsHookEx
GetSysColorBrush
GetSysColor
GetMessageW
DispatchMessageW
SetWindowsHookExW
IsWindow
GetParent
GetWindowLongW
GetActiveWindow
GetClassNameW
GetPropW
GetMenuState
SendMessageW
CallNextHookEx
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow

gdi32

CreateBitmap
BitBlt
RealizePalette
SelectPalette
GetDeviceCaps
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
StretchBlt
Polygon
RestoreDC
SetBkMode
SaveDC
CreateFontIndirectW
GetStockObject
GetTextExtentPointW
CreateDIBitmap
CreateDIBSection
RectVisible
StretchDIBits
GetClipBox
SetDIBitsToDevice
ExtSelectClipRgn
ExcludeClipRect
GetPixel
SelectClipRgn
GetClipRgn
GetTextExtentPoint32W
TextOutW
SetPixel
LineTo
MoveToEx
Rectangle
CreatePen
IntersectClipRect
PtInRegion
GetRgnBox
GetTextMetricsW
UnrealizeObject
PatBlt
SetBrushOrgEx
CreatePatternBrush
ExtTextOutW
GetDCOrgEx
SetBkColor
SetTextColor
GetObjectW
CreateICW
GetDIBits
DeleteDC
CreateRectRgn
CombineRgn
CreateRectRgnIndirect
GetRegionData
ExtCreateRegion
OffsetRgn
SetStretchBltMode
DeleteObject
CreateSolidBrush

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueW

shell32

ExtractIconExW

imagehlp

ImageDirectoryEntryToData

comctl32

ImageList_Draw
ImageList_DrawEx
ImageList_GetIcon
_TrackMouseEvent
ImageList_Create
ImageList_AddMasked
ImageList_Remove
ImageList_Destroy
ImageList_GetIconSize
ImageList_GetImageCount

Exports

Exports

CloseSkinData
CreateBitmapFromSkinImage
CreateImageList
CreateSkinImageRectRegion
CreateSkinImageSectionRegion
DisableWindowScrollbarSkin
DrawSkinImageRect
DrawSkinImageSection
DrawSkinTextEffect
EnableCaptionButtons
EnableWindowScrollbarSkin
ExitSkinMagicLib
GetCaptionButtonState
GetLibVersion
GetSkinBool
GetSkinClientRect
GetSkinColor
GetSkinControlBkColor
GetSkinControlColor
GetSkinControlFont
GetSkinControlID
GetSkinControlRect
GetSkinDWORD
GetSkinFont
GetSkinImageSectionMargins
GetSkinInt
GetSkinMagicErrorCode
GetSkinMenu
GetSkinObjectText
GetSkinString
GetSkinSysColor
GetSkinSysColorBrush
GetSkinTransparentColor
HideTooltip
InitSkinMagicLib
LoadSkinFile
LoadSkinFromResource
OpenSkinData
RedrawCaptionStatic
RegisterSkinWindow
RemoveDialogSkin
RemoveWindowSkin
SetCaptionButtonState
SetCaptionButtonTooltip
SetControlSkin
SetControlTooltip
SetDialogSkin
SetShapeWindowSkin
SetSingleDialogSkin
SetSkinMenu
SetSkinObjectText
SetSkinWindowAccelerator
SetWindowMainMenuImage
SetWindowSkin
ShowSkinObject
ShowTooltipPoint
TrackSkinPopupMenu
TrackSkinPopupMenuEx
UnregisterSkinWindow

Sections

.text
Size: 524KB - Virtual size: 521KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 136KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1000B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c4d6d425c438fcc77d2644ede4d63fa

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

imagehlp

comctl32

Exports

Exports

Sections

.text Size: 524KB - Virtual size: 521KB

.rdata Size: 60KB - Virtual size: 59KB

.data Size: 136KB - Virtual size: 207KB

.rsrc Size: 4KB - Virtual size: 1000B

.reloc Size: 28KB - Virtual size: 26KB

.text
Size: 524KB - Virtual size: 521KB

.rdata
Size: 60KB - Virtual size: 59KB

.data
Size: 136KB - Virtual size: 207KB

.rsrc
Size: 4KB - Virtual size: 1000B

.reloc
Size: 28KB - Virtual size: 26KB