0939155266f4c1016c8a07957cbd95a3b3c884a4ef4f49add7d7e3d860ef555d

Sharing

Copy URL Twitter E-mail

General

Target

0939155266f4c1016c8a07957cbd95a3b3c884a4ef4f49add7d7e3d860ef555d
Size

230KB
MD5

de469df6ad16d026947719a4a81c6732
SHA1

ab7e544cddda2c0834c5ab49228e1052317a2714
SHA256

0939155266f4c1016c8a07957cbd95a3b3c884a4ef4f49add7d7e3d860ef555d
SHA512

b171467f03cd7c8edc572f7297dafa64d871f6862efc1ca324f2f8e3cd8c3658fb7f49bf66c5899e1d99b25587c4d8c983ca07324efffebab0e605e8f1d6cba6
SSDEEP

3072:YJjnvp6f9AbdoQaNpQWcikjFfwFRfYIK4egun3daWJ8ZVzHZ3N+qK65wqMB3HTXT:Oj4AbdoBpEwfDszJg3vK653oPU7uPf

Score

N/A

Malware Config

Signatures

Files

0939155266f4c1016c8a07957cbd95a3b3c884a4ef4f49add7d7e3d860ef555d
.dll windows x86

7cccf9ec4f99392126bed61c9368ea29

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtQueryVirtualMemory
RtlUnwind
RtlDeleteResource
RtlInitializeResource
mbstowcs
VerSetConditionMask
NtCreateEvent
NtWaitForMultipleObjects
NtCreateTimer
NtSetTimer
NtCancelTimer
NtSetEvent
NtSetTimerResolution
NtQueryTimerResolution
memmove
RtlUnicodeToMultiByteN
RtlMultiByteToUnicodeN
wcsrchr
towlower
isdigit
wcscpy
wcscat
strncpy
strspn
strncmp
strstr
RtlReleaseResource
RtlAcquireResourceShared
RtlAcquireResourceExclusive
NtCreateSection
NtMapViewOfSection
NtUnmapViewOfSection
atoi
wcschr
wcstol
swprintf
RtlCreateUserThread
NtResumeThread
wcsncpy
wcsncmp
_wcsnicmp
wcslen
wcsncat
NtSetValueKey
RtlOpenCurrentUser
NtQueryValueKey
RtlInitUnicodeString
NtOpenKey
NtClose

user32

GetWinStationInfo
GetSystemMetrics
SystemParametersInfoW
CharUpperA
LoadIconA
RegisterClassA
CreateWindowExA
GetMessageA
DispatchMessageA
DestroyWindow
DefWindowProcA
PostThreadMessageA
PeekMessageA
UnregisterClassA
PeekMessageW
MessageBoxW
GetAsyncKeyState
LoadStringA
SendMessageA
CharLowerBuffA
PostMessageA
SetTimer
LoadStringW
PostMessageW
KillTimer
RegisterWindowMessageW
IsWindow
wsprintfA
wsprintfW

gdi32

GetObjectW
GetBkMode

kernel32

WaitForSingleObject
CreateEventW
OpenEventW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
HeapReAlloc
TlsGetValue
TlsSetValue
DisableThreadLibraryCalls
TlsAlloc
TlsFree
OpenFileMappingW
MapViewOfFile
WaitForSingleObjectEx
InterlockedExchange
SleepEx
VerifyVersionInfoW
HeapSize
MultiByteToWideChar
GetACP
PulseEvent
LoadLibraryA
GetTickCount
GetModuleFileNameW
Beep
GetFileSize
GetFileTime
CompareFileTime
GlobalHandle
GlobalFree
MoveFileW
_lclose
GetTempPathW
GetTempFileNameW
DeleteFileW
GetFileAttributesW
GetFullPathNameW
_llseek
_lwrite
_lread
CreateEventA
GetCurrentThread
SetEvent
ExitThread
ResetEvent
FindResourceW
LoadLibraryExW
LoadResource
LockResource
FreeResource
SetCurrentDirectoryW
GetCurrentDirectoryW
lstrcmpW
lstrcpyA
WideCharToMultiByte
CreateThread
LocalAlloc
UnmapViewOfFile
lstrcmpiA
HeapAlloc
HeapFree
Sleep
GetLastError
GetCurrentProcessId
IsBadWritePtr
IsBadStringPtrW
SetLastError
IsBadReadPtr
IsBadCodePtr
ExpandEnvironmentStringsW
lstrlenW
lstrcpyW
lstrcatW
lstrcmpiW
GetPrivateProfileStringW
CloseHandle
SearchPathW
CreateFileW
GetProfileStringW
GetProcAddress
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
LocalFree
lstrcpynA
FileTimeToSystemTime
GlobalUnlock
GlobalLock
GetFileAttributesExA
GetModuleFileNameA
lstrcpynW
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
LoadLibraryW
SetErrorMode
FreeLibrary
GlobalReAlloc
GlobalAlloc
InitializeCriticalSection
GetCurrentThreadId
GetThreadPriority
SetThreadPriority

advapi32

RegQueryInfoKeyW
OpenSCManagerW
RegCloseKey
CloseServiceHandle
QueryServiceConfigW
QueryServiceStatus
RegDeleteValueW
ImpersonateSelf
RegEnumKeyExW
OpenServiceW
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyA
RegQueryValueExA

rpcrt4

RpcBindingFromStringBindingW
RpcStringBindingComposeW
RpcBindingFree
NdrClientCall2
RpcStringFreeW

Exports

Exports

CloseDriver
DefDriverProc
DriverCallback
DrvGetModuleHandle
GetDriverModuleHandle
MigrateAllDrivers
MigrateSoundEvents
NotifyCallbackData
OpenDriver
PlaySound
PlaySoundA
PlaySoundW
SendDriverMessage
WOW32DriverCallback
WOW32ResolveMultiMediaHandle
WOWAppExit
WinmmLogoff
WinmmLogon
_gfxLogoff@0
_gfxLogon@4
aux32Message
auxGetDevCapsA
auxGetDevCapsW
auxGetNumDevs
auxGetVolume
auxOutMessage
auxSetVolume
gfxAddGfx
gfxBatchChange
gfxCreateGfxFactoriesList
gfxCreateZoneFactoriesList
gfxDestroyDeviceInterfaceList
gfxEnumerateGfxs
gfxModifyGfx
gfxOpenGfx
gfxRemoveGfx
joy32Message
joyConfigChanged
joyGetDevCapsA
joyGetDevCapsW
joyGetNumDevs
joyGetPos
joyGetPosEx
joyGetThreshold
joyReleaseCapture
joySetCapture
joySetThreshold
mci32Message
mciDriverNotify
mciDriverYield
mciExecute
mciFreeCommandResource
mciGetCreatorTask
mciGetDeviceIDA
mciGetDeviceIDFromElementIDA
mciGetDeviceIDFromElementIDW
mciGetDeviceIDW
mciGetDriverData
mciGetErrorStringA
mciGetErrorStringW
mciGetYieldProc
mciLoadCommandResource
mciSendCommandA
mciSendCommandW
mciSendStringA
mciSendStringW
mciSetDriverData
mciSetYieldProc
mid32Message
midiConnect
midiDisconnect
midiInAddBuffer
midiInClose
midiInGetDevCapsA
midiInGetDevCapsW
midiInGetErrorTextA
midiInGetErrorTextW
midiInGetID
midiInGetNumDevs
midiInMessage
midiInOpen
midiInPrepareHeader
midiInReset
midiInStart
midiInStop
midiInUnprepareHeader
midiOutCacheDrumPatches
midiOutCachePatches
midiOutClose
midiOutGetDevCapsA
midiOutGetDevCapsW
midiOutGetErrorTextA
midiOutGetErrorTextW
midiOutGetID
midiOutGetNumDevs
midiOutGetVolume
midiOutLongMsg
midiOutMessage
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutSetVolume
midiOutShortMsg
midiOutUnprepareHeader
midiStreamClose
midiStreamOpen
midiStreamOut
midiStreamPause
midiStreamPosition
midiStreamProperty
midiStreamRestart
midiStreamStop
mixerClose
mixerGetControlDetailsA
mixerGetControlDetailsW
mixerGetDevCapsA
mixerGetDevCapsW
mixerGetID
mixerGetLineControlsA
mixerGetLineControlsW
mixerGetLineInfoA
mixerGetLineInfoW
mixerGetNumDevs
mixerMessage
mixerOpen
mixerSetControlDetails
mmDrvInstall
mmGetCurrentTask
mmTaskBlock
mmTaskCreate
mmTaskSignal
mmTaskYield
mmioAdvance
mmioAscend
mmioClose
mmioCreateChunk
mmioDescend
mmioFlush
mmioGetInfo
mmioInstallIOProcA
mmioInstallIOProcW
mmioOpenA
mmioOpenW
mmioRead
mmioRenameA
mmioRenameW
mmioSeek
mmioSendMessage
mmioSetBuffer
mmioSetInfo
mmioStringToFOURCCA
mmioStringToFOURCCW
mmioWrite
mmsystemGetVersion
mod32Message
mxd32Message
sndPlaySoundA
sndPlaySoundW
tid32Message
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetSystemTime
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetDevCapsW
waveInGetErrorTextA
waveInGetErrorTextW
waveInGetID
waveInGetNumDevs
waveInGetPosition
waveInMessage
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutBreakLoop
waveOutClose
waveOutGetDevCapsA
waveOutGetDevCapsW
waveOutGetErrorTextA
waveOutGetErrorTextW
waveOutGetID
waveOutGetNumDevs
waveOutGetPitch
waveOutGetPlaybackRate
waveOutGetPosition
waveOutGetVolume
waveOutMessage
waveOutOpen
waveOutPause
waveOutPrepareHeader
waveOutReset
waveOutRestart
waveOutSetPitch
waveOutSetPlaybackRate
waveOutSetVolume
waveOutUnprepareHeader
waveOutWrite
wid32Message
winmmDbgOut
winmmSetDebugLevel
wod32Message

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cccf9ec4f99392126bed61c9368ea29

Headers

File Characteristics

Imports

ntdll

user32

gdi32

kernel32

advapi32

rpcrt4

Exports

Exports

Sections

.text Size: 122KB - Virtual size: 121KB

.data Size: 64KB - Virtual size: 67KB

.rsrc Size: 36KB - Virtual size: 35KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 122KB - Virtual size: 121KB

.data
Size: 64KB - Virtual size: 67KB

.rsrc
Size: 36KB - Virtual size: 35KB

.reloc
Size: 6KB - Virtual size: 6KB