ec7e476c41009bada2d3475d167a81a567e813057560d513c4cf396b5cbd3143

Sharing

Copy URL Twitter E-mail

General

Target

ec7e476c41009bada2d3475d167a81a567e813057560d513c4cf396b5cbd3143
Size

868KB
MD5

9e6ec22999c1028d1adbb6f3e0c0d832
SHA1

ac827ebf03833d9835443efe093ddc0c96f4737f
SHA256

ec7e476c41009bada2d3475d167a81a567e813057560d513c4cf396b5cbd3143
SHA512

32a3f8f6983c460f12943d653f794268e8bc2d577271c54e25a099af1ea6a4f7805741a0c797ec30a30d4acda36b3e0f41b9a0705f0070f349c3a3cc3ef49929
SSDEEP

24576:o+zRdZa8d9C6oLN0CM2jv9I2pHs9vv+0/aGrUSdMAg9pct8bO8:1dZxdm6S5Stb868

Score

N/A

Malware Config

Signatures

Files

ec7e476c41009bada2d3475d167a81a567e813057560d513c4cf396b5cbd3143
.dll windows x86

57e8beeff75b9e6b434f1136d3671fa2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memcpy
_unlock
memset
__dllonexit
_lock
_onexit
free
_stricmp
_wcsnicmp
_vsnwprintf
_wgetenv
wcsrchr
_wcsicmp
towlower
wcschr
_CIexp
_adjust_fdiv
_amsg_exit
_initterm
_XcptFilter
malloc
memmove
_CIlog

kernel32

GetTickCount
QueryPerformanceCounter
Sleep
DelayLoadFailureHook
GetCurrentProcessId
GetSystemTimeAsFileTime
GetVersion
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlUnwind
DebugBreak
GetCurrentThread
TerminateThread
TerminateProcess
IsDebuggerPresent
ExitProcess
GetCurrentProcess
GetModuleHandleW
GetProcessHeap
HeapReAlloc
HeapAlloc
HeapFree
MulDiv
IsProcessorFeaturePresent
InterlockedExchange
SleepEx
GetVersionExW
MapViewOfFileEx
GetSystemInfo
UnmapViewOfFile
GlobalAlloc
RaiseException
WideCharToMultiByte
lstrlenW
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
ReadFile
GetFileInformationByHandle
LeaveCriticalSection
EnterCriticalSection
DisableThreadLibraryCalls
GetProcAddress
FreeLibrary
InterlockedCompareExchange
LoadLibraryA
LocalAlloc
LocalFree
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentThreadId
SetLastError
GetModuleFileNameW
GetLastError
InterlockedIncrement
InterlockedDecrement
GetFileType
CreateFileW
CloseHandle
FindFirstFileW
FindClose
lstrcmpiW
lstrcmpW
SetEndOfFile
WriteFile
SetFilePointer
GetFileSize
RtlCaptureStackBackTrace

user32

GetIconInfo
EqualRect
IsRectEmpty
IntersectRect
SetRect
GetGuiResources

gdi32

CreateDIBSection
SetDIBits
CreateCompatibleDC
GetPaletteEntries
DeleteObject
GetDIBits
GetObjectW
DeleteDC

ole32

PropVariantCopy
CoLockObjectExternal
CoTaskMemFree
GetHGlobalFromStream
CreateStreamOnHGlobal
StringFromGUID2
PropVariantClear
CoTaskMemAlloc
CLSIDFromString
CLIPFORMAT_UserSize
CLIPFORMAT_UserMarshal
CLIPFORMAT_UserFree
CLIPFORMAT_UserUnmarshal
HBITMAP_UserUnmarshal
HICON_UserSize
HPALETTE_UserFree
HBITMAP_UserFree
HBITMAP_UserMarshal
HICON_UserMarshal
HPALETTE_UserMarshal
HBITMAP_UserSize
HICON_UserUnmarshal
HICON_UserFree
HPALETTE_UserSize
HPALETTE_UserUnmarshal
CoCreateInstance

ntdll

DbgPrintEx
DbgPrompt
DbgBreakPoint
NtQuerySystemInformation
RtlSetBits
RtlInitializeBitMap

advapi32

RegEnumKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegEnumValueW

rpcrt4

IUnknown_QueryInterface_Proxy
NdrOleFree
NdrStubForwardingFunction
NdrOleAllocate
CStdStubBuffer_CountRefs
NdrStubCall2
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Connect
NdrCStdStubBuffer_Release
NdrCStdStubBuffer2_Release
NdrDllGetClassObject
CStdStubBuffer_AddRef

Exports

Exports

DllGetClassObject
IEnumString_Next_WIC_Proxy
IEnumString_Reset_WIC_Proxy
IPropertyBag2_Write_Proxy
IWICBitmapClipper_Initialize_Proxy
IWICBitmapCodecInfo_DoesSupportAnimation_Proxy
IWICBitmapCodecInfo_DoesSupportLossless_Proxy
IWICBitmapCodecInfo_DoesSupportMultiframe_Proxy
IWICBitmapCodecInfo_GetContainerFormat_Proxy
IWICBitmapCodecInfo_GetDeviceManufacturer_Proxy
IWICBitmapCodecInfo_GetDeviceModels_Proxy
IWICBitmapCodecInfo_GetFileExtensions_Proxy
IWICBitmapCodecInfo_GetMimeTypes_Proxy
IWICBitmapDecoder_CopyPalette_Proxy
IWICBitmapDecoder_GetColorContexts_Proxy
IWICBitmapDecoder_GetDecoderInfo_Proxy
IWICBitmapDecoder_GetFrameCount_Proxy
IWICBitmapDecoder_GetFrame_Proxy
IWICBitmapDecoder_GetMetadataQueryReader_Proxy
IWICBitmapDecoder_GetPreview_Proxy
IWICBitmapDecoder_GetThumbnail_Proxy
IWICBitmapEncoder_Commit_Proxy
IWICBitmapEncoder_CreateNewFrame_Proxy
IWICBitmapEncoder_GetEncoderInfo_Proxy
IWICBitmapEncoder_GetMetadataQueryWriter_Proxy
IWICBitmapEncoder_Initialize_Proxy
IWICBitmapEncoder_SetPalette_Proxy
IWICBitmapEncoder_SetThumbnail_Proxy
IWICBitmapFlipRotator_Initialize_Proxy
IWICBitmapFrameDecode_GetColorContexts_Proxy
IWICBitmapFrameDecode_GetMetadataQueryReader_Proxy
IWICBitmapFrameDecode_GetThumbnail_Proxy
IWICBitmapFrameEncode_Commit_Proxy
IWICBitmapFrameEncode_GetMetadataQueryWriter_Proxy
IWICBitmapFrameEncode_Initialize_Proxy
IWICBitmapFrameEncode_SetColorContexts_Proxy
IWICBitmapFrameEncode_SetResolution_Proxy
IWICBitmapFrameEncode_SetSize_Proxy
IWICBitmapFrameEncode_SetThumbnail_Proxy
IWICBitmapFrameEncode_WriteSource_Proxy
IWICBitmapLock_GetDataPointer_STA_Proxy
IWICBitmapLock_GetStride_Proxy
IWICBitmapScaler_Initialize_Proxy
IWICBitmapSource_CopyPalette_Proxy
IWICBitmapSource_CopyPixels_Proxy
IWICBitmapSource_GetPixelFormat_Proxy
IWICBitmapSource_GetResolution_Proxy
IWICBitmapSource_GetSize_Proxy
IWICBitmap_Lock_Proxy
IWICBitmap_SetPalette_Proxy
IWICBitmap_SetResolution_Proxy
IWICColorContext_InitializeFromMemory_Proxy
IWICComponentFactory_CreateMetadataWriterFromReader_Proxy
IWICComponentFactory_CreateQueryWriterFromBlockWriter_Proxy
IWICComponentInfo_GetAuthor_Proxy
IWICComponentInfo_GetCLSID_Proxy
IWICComponentInfo_GetFriendlyName_Proxy
IWICComponentInfo_GetSpecVersion_Proxy
IWICComponentInfo_GetVersion_Proxy
IWICFastMetadataEncoder_Commit_Proxy
IWICFastMetadataEncoder_GetMetadataQueryWriter_Proxy
IWICFormatConverter_Initialize_Proxy
IWICImagingFactory_CreateBitmapClipper_Proxy
IWICImagingFactory_CreateBitmapFlipRotator_Proxy
IWICImagingFactory_CreateBitmapFromHBITMAP_Proxy
IWICImagingFactory_CreateBitmapFromHICON_Proxy
IWICImagingFactory_CreateBitmapFromMemory_Proxy
IWICImagingFactory_CreateBitmapFromSource_Proxy
IWICImagingFactory_CreateBitmapScaler_Proxy
IWICImagingFactory_CreateBitmap_Proxy
IWICImagingFactory_CreateComponentInfo_Proxy
IWICImagingFactory_CreateDecoderFromFileHandle_Proxy
IWICImagingFactory_CreateDecoderFromFilename_Proxy
IWICImagingFactory_CreateDecoderFromStream_Proxy
IWICImagingFactory_CreateEncoder_Proxy
IWICImagingFactory_CreateFastMetadataEncoderFromDecoder_Proxy
IWICImagingFactory_CreateFastMetadataEncoderFromFrameDecode_Proxy
IWICImagingFactory_CreateFormatConverter_Proxy
IWICImagingFactory_CreatePalette_Proxy
IWICImagingFactory_CreateQueryWriterFromReader_Proxy
IWICImagingFactory_CreateQueryWriter_Proxy
IWICImagingFactory_CreateStream_Proxy
IWICMetadataBlockReader_GetCount_Proxy
IWICMetadataBlockReader_GetReaderByIndex_Proxy
IWICMetadataQueryReader_GetContainerFormat_Proxy
IWICMetadataQueryReader_GetEnumerator_Proxy
IWICMetadataQueryReader_GetLocation_Proxy
IWICMetadataQueryReader_GetMetadataByName_Proxy
IWICMetadataQueryWriter_RemoveMetadataByName_Proxy
IWICMetadataQueryWriter_SetMetadataByName_Proxy
IWICPalette_GetColorCount_Proxy
IWICPalette_GetColors_Proxy
IWICPalette_GetType_Proxy
IWICPalette_HasAlpha_Proxy
IWICPalette_InitializeCustom_Proxy
IWICPalette_InitializeFromBitmap_Proxy
IWICPalette_InitializeFromPalette_Proxy
IWICPalette_InitializePredefined_Proxy
IWICPixelFormatInfo_GetBitsPerPixel_Proxy
IWICPixelFormatInfo_GetChannelCount_Proxy
IWICPixelFormatInfo_GetChannelMask_Proxy
IWICStream_InitializeFromIStream_Proxy
IWICStream_InitializeFromMemory_Proxy
WICConvertBitmapSource
WICCreateBitmapFromSection
WICCreateColorContext_Proxy
WICCreateImagingFactory_Proxy
WICGetMetadataContentSize
WICMapGuidToShortName
WICMapSchemaToName
WICMapShortNameToGuid
WICMatchMetadataContent
WICSerializeMetadataContent
WICSetEncoderFormat_Proxy

Sections

.text
Size: 657KB - Virtual size: 656KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.orpc
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 188KB - Virtual size: 194KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

57e8beeff75b9e6b434f1136d3671fa2

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

ole32

ntdll

advapi32

rpcrt4

Exports

Exports

Sections

.text Size: 657KB - Virtual size: 656KB

.orpc Size: 1024B - Virtual size: 914B

.data Size: 188KB - Virtual size: 194KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 19KB - Virtual size: 19KB

.text
Size: 657KB - Virtual size: 656KB

.orpc
Size: 1024B - Virtual size: 914B

.data
Size: 188KB - Virtual size: 194KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 19KB - Virtual size: 19KB