bdedc550f0f9e5520ca6c35999478a3f819ed774865ffecdc0a15e1d37ddcd84

Sharing

Copy URL Twitter E-mail

General

Target

bdedc550f0f9e5520ca6c35999478a3f819ed774865ffecdc0a15e1d37ddcd84
Size

177KB
MD5

a0524bbb6fcb0af54c43206777f15584
SHA1

037a22ccb29757aaf946b51f10a231e5d26570d1
SHA256

bdedc550f0f9e5520ca6c35999478a3f819ed774865ffecdc0a15e1d37ddcd84
SHA512

d625716784e0d0e4ea93d6f4af8cbf53e753da4f96edd37d474ab66fe94c6f88b512959093abbbd3982535c8bb8f1a7f2289ef550f465376d36cd6c48da5abe7
SSDEEP

3072:5USlSpu8R+/WZpt3JTZ+oFd+wFRMM5YgNCPiTeEdC7+iBO2D6FhNB:XOLRfnwoFdMMeB/qCaiw2D

Score

N/A

Malware Config

Signatures

Files

bdedc550f0f9e5520ca6c35999478a3f819ed774865ffecdc0a15e1d37ddcd84
.dll windows x86

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

CoInitializeEx
CoInitialize
CoCreateInstance

advapi32

RegDeleteKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
LsaNtStatusToWinError
NotifyBootConfigStatus
RegCloseKey
RegEnumValueW
RegOpenCurrentUser

user32

SetTimer
PostQuitMessage
GetMessageW

setupapi

SetupDiOpenDevRegKey
SetupDiOpenDeviceInfoW
SetupDiGetSelectedDriverW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiDeleteDeviceInfo
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller
SetupDiBuildDriverInfoList
CM_Get_Device_IDW
CM_Get_DevNode_Status
CM_Free_Log_Conf_Ex
CM_Add_Empty_Log_Conf_Ex
SetupDiSetClassInstallParamsW
SetupDiSetDeviceInstallParamsW
SetupGetFieldCount
SetupGetStringFieldW
SetupUninstallOEMInfW
SetupDiOpenClassRegKey

oleaut32

SysFreeString
VariantInit
VariantClear
VariantChangeType
VarCyMul
SysStringLen
SafeArrayCreate
SysAllocStringLen
SafeArrayUnlock
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayDestroy

kernel32

_llseek
GetLocaleInfoA
WriteFileEx
WriteFile
WriteConsoleW
WriteConsoleA
WideCharToMultiByte
WaitForSingleObject
VirtualProtect
VirtualFree
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
SystemTimeToTzSpecificLocalTime
Sleep
SizeofResource
SignalObjectAndWait
SetStdHandle
SetProcessShutdownParameters
SetFilePointer
SetCurrentDirectoryW
RtlUnwind
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringW
OpenProcess
MoveFileW
Module32FirstW
MapViewOfFile
LocalFree
LoadLibraryW
LoadLibraryA
LeaveCriticalSection
LCMapStringA
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteFileW
DeviceIoControl
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FindNextFileW
FlushConsoleInputBuffer
FlushFileBuffers
FlushViewOfFile
FormatMessageA
FormatMessageW
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCommState
GetCommandLineA
GetConsoleCP
GetConsoleMode
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatA
GetEnvironmentStringsA
GetExitCodeThread
GetFileAttributesW
GetFileSizeEx
GetFileType
GetLastError
IsValidLocale
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessTimes
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
GetTickCount
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExW
GlobalHandle
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedExchange
IsDebuggerPresent

shlwapi

PathFindFileNameW

rpcrt4

RpcMgmtStopServerListening
RpcMgmtWaitServerListen
NdrServerCall2
RpcAsyncRegisterInfo
RpcServerUseProtseqEpW
RpcServerUnregisterIf
RpcServerRegisterIfEx

shell32

SHFreeNameMappings
SHCreateDirectoryExW
SHAddToRecentDocs
SHGetDesktopFolder

Exports

Exports

AAuxDecode
FIsHTMLFile
GetIndexInfo
HrGetStreamPos
HrUtreamToByte
OpenWFileStream
SetViewport

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 359B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

296f76395d8f40f97c976fc24057cb6e

Headers

DLL Characteristics

File Characteristics

Imports

ole32

advapi32

user32

setupapi

oleaut32

kernel32

shlwapi

rpcrt4

shell32

Exports

Exports

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 103KB - Virtual size: 102KB

.data Size: 19KB - Virtual size: 19KB

.rsrc Size: 512B - Virtual size: 359B

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 103KB - Virtual size: 102KB

.data
Size: 19KB - Virtual size: 19KB

.rsrc
Size: 512B - Virtual size: 359B