d6942a48791ea2479d2e2d964f915012bdf287ebbc6358c61ecc928078064cb6

Sharing

Copy URL Twitter E-mail

General

Target

d6942a48791ea2479d2e2d964f915012bdf287ebbc6358c61ecc928078064cb6
Size

179KB
MD5

275c512480375758303a595a4047c035
SHA1

74b4fe87d9f65fee1041d9f2c4c3e30f590ea78c
SHA256

d6942a48791ea2479d2e2d964f915012bdf287ebbc6358c61ecc928078064cb6
SHA512

f9bb0a77a31650219ac2e1c5b2b95be4a527c728a5c6786e939fdfc4b5ece6889697467fa677f6116e0a4b1f3eb410548e7becfcf1b8fa2f837f4c33609ad02e
SSDEEP

3072:Zk7p8zm95meXUXqAoPw9IbPg/4xbnorGROVFsrXy8BClxf8tN:Tzm9CoPw9ooEYGAWXPtN

Score

N/A

Malware Config

Signatures

Files

d6942a48791ea2479d2e2d964f915012bdf287ebbc6358c61ecc928078064cb6
.dll windows x86

9850b7ed15a81a2d8ea29b87487d0b1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LsaNtStatusToWinError
NotifyBootConfigStatus
RegCloseKey
RegDeleteKeyW
RegEnumValueW
RegOpenCurrentUser
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW

oleaut32

SafeArrayGetLBound
SafeArrayDestroy
SafeArrayGetUBound
SafeArrayUnlock
SysAllocStringLen
SysFreeString
SysStringLen
VarCyMul
VariantChangeType
VariantClear
VariantInit
SafeArrayCreate

shlwapi

PathFindFileNameW

rpcrt4

RpcServerUseProtseqEpW
NdrServerCall2
RpcAsyncRegisterInfo
RpcMgmtStopServerListening
RpcMgmtWaitServerListen
RpcServerRegisterIfEx
RpcServerUnregisterIf

shell32

SHCreateDirectoryExW
SHFreeNameMappings
SHGetDesktopFolder
SHAddToRecentDocs

kernel32

_llseek
WriteFileEx
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitForSingleObject
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SystemTimeToTzSpecificLocalTime
Sleep
SizeofResource
SignalObjectAndWait
SetStdHandle
SetProcessShutdownParameters
SetFilePointer
SetCurrentDirectoryW
RtlUnwind
ResumeThread
ResetEvent
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteFileW
DeviceIoControl
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FindNextFileW
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeThread
GetFileAttributesW
GetFileSizeEx
GetFileType
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GlobalHandle
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent
IsValidLocale
LCMapStringA
LeaveCriticalSection
LocalFree
MapViewOfFile
Module32FirstW
MoveFileW
OpenProcess
OutputDebugStringW
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReadFile
ReleaseMutex
RemoveDirectoryW

ole32

CoInitialize
CoCreateInstance
CoInitializeEx

user32

GetMessageW
PostQuitMessage
SetTimer

setupapi

SetupUninstallOEMInfW
SetupDiEnumDeviceInfo
SetupDiEnumDriverInfoW
SetupDiGetClassDevsW
SetupDiGetDeviceInstallParamsW
SetupGetStringFieldW
SetupGetFieldCount
SetupDiSetDeviceInstallParamsW
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiOpenClassRegKey
SetupDiGetSelectedDriverW
CM_Add_Empty_Log_Conf_Ex
CM_Free_Log_Conf_Ex
CM_Get_DevNode_Status
CM_Get_Device_IDW
SetupDiBuildDriverInfoList
SetupDiCallClassInstaller
SetupDiCreateDeviceInfoList
SetupDiDeleteDeviceInfo
SetupDiGetDeviceRegistryPropertyW

Exports

Exports

DeleteIndex
GetBuffers
GetCounter
IsUpper
Move
SetAccess
StrChrExA

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9850b7ed15a81a2d8ea29b87487d0b1a

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

oleaut32

shlwapi

rpcrt4

shell32

kernel32

ole32

user32

setupapi

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 102KB - Virtual size: 102KB

.data Size: 19KB - Virtual size: 19KB

.rsrc Size: 512B - Virtual size: 486B

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 102KB - Virtual size: 102KB

.data
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 512B - Virtual size: 486B