b40895a37b11ba40ddebf88e7193be759065a3ac4481d4e9ec9c8bc28a5cd1f9

Sharing

Copy URL Twitter E-mail

General

Target

b40895a37b11ba40ddebf88e7193be759065a3ac4481d4e9ec9c8bc28a5cd1f9
Size

128KB
MD5

90a8b8f1a5a382a764ec863f3de96ca7
SHA1

770011ecf575fd330163460a41cc7957dc12e3a7
SHA256

b40895a37b11ba40ddebf88e7193be759065a3ac4481d4e9ec9c8bc28a5cd1f9
SHA512

dce16025e1ee83abbf20f50e39ae5af2cb7da4a21fb2502e5cb3d7a62dccaded9022c0fcd3cb1f75aa388c3c83fa4e6f8d8c4ed621f1ef793a3b6a840da087c0
SSDEEP

3072:6CtNMyKWSfA1EyuY76GHKY7lAHJn0ialMACij1:6C4VWCA1n7h7lAaieMDi

Score

N/A

Malware Config

Signatures

Files

b40895a37b11ba40ddebf88e7193be759065a3ac4481d4e9ec9c8bc28a5cd1f9
.dll windows x86

a7ec52d935039623fc5295944c6a6df1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetHandleInformation
VirtualAlloc
TlsSetValue
FindFirstVolumeMountPointA
ResumeThread
DeleteVolumeMountPointW
CreateMutexA
GlobalGetAtomNameW
WaitForSingleObject
GetTickCount
SetCalendarInfoA
GetEnvironmentStringsW
CreateEventA
WritePrivateProfileSectionA
GetVolumeNameForVolumeMountPointA
UpdateResourceW
RtlUnwind
TerminateProcess
GetLastError
GetBinaryTypeW
SetSystemTime
GetVDMCurrentDirectories
InitAtomTable
ReleaseSemaphore
GetLocalTime
_lclose
IsValidLocale
BackupWrite
FindFirstChangeNotificationW
Process32FirstW
_lcreat
CreateSemaphoreW
SetConsoleNumberOfCommandsA
ShowConsoleCursor
FileTimeToSystemTime
CloseHandle
SetMailslotInfo
Sleep
SetConsoleTitleA
GetProcAddress
SetProcessPriorityBoost
FindNextChangeNotification
EnumDateFormatsW
GetDiskFreeSpaceA
GetModuleHandleA
TlsGetValue
TerminateThread
VirtualQuery
GetConsoleAliasesA
GetSystemTime
DisconnectNamedPipe
IsDBCSLeadByte
GetConsoleKeyboardLayoutNameW
GetCurrencyFormatW
FindFirstVolumeMountPointW
GetDriveTypeA
_hread
GetConsoleMode
lstrcmpA
ReadFileEx
GetNamedPipeHandleStateW
CancelTimerQueueTimer
SetConsoleNumberOfCommandsW
GetVersion
VirtualFree
FreeLibrary
InterlockedDecrement
GetAtomNameA
GetNumberFormatW
SetFilePointer
GetProcessHeap
ReadFile
GetConsoleCommandHistoryLengthW
LocalAlloc

shell32

StrCmpNIW
FindExecutableA
SHGetDiskFreeSpaceA
DragQueryFileW
DragFinish
StrRChrA
StrCmpNIA
InternalExtractIconListW
SHGetSpecialFolderPathW
ExtractIconExA
FreeIconList
SHEmptyRecycleBinW
ShellAboutA
StrChrIW
SHUpdateRecycleBinIcon
ord180
SHAppBarMessage
SHGetDesktopFolder
SheChangeDirA
SHBrowseForFolderA
DoEnvironmentSubstW
StrCmpNW
ShellAboutW
ExtractAssociatedIconExW
SHGetInstanceExplorer
InternalExtractIconListA
CommandLineToArgvW
SHFormatDrive
SHGetPathFromIDListW
DuplicateIcon
CheckEscapesW
DragQueryFileA
SHLoadInProc
SHInvokePrinterCommandA
StrNCmpA
SHGetMalloc
SHAddToRecentDocs
SHGetSettings
StrNCmpIA
SHGetSpecialFolderLocation
StrStrA
StrRStrIW
ExtractIconExW
SHGetPathFromIDListA
StrCmpNA
SHFileOperationW
Shell_NotifyIconW
ExtractIconW
StrStrIW
DoEnvironmentSubstA
StrChrA
StrStrIA
StrChrIA
SHQueryRecycleBinW
FindExecutableW
StrRChrIA
SHGetDataFromIDListW
StrNCmpW
StrRChrIW
StrStrW
SHBrowseForFolderW

shlwapi

PathIsFileSpecW
PathAddBackslashW
UrlHashA
UrlGetPartA
SHRegCreateUSKeyA
StrCatW
PathFindExtensionW
StrDupA
PathIsUNCA
SHRegSetUSValueW
StrNCatA
PathIsUNCServerShareW
UrlUnescapeA
UrlGetPartW
PathIsRootA
PathRemoveBlanksW
PathCombineA
StrIsIntlEqualW
PathCompactPathA
StrCmpIW
UrlIsW
StrFromTimeIntervalW
PathAppendW
PathIsURLW
PathAddExtensionW
SHRegGetUSValueW
SHQueryInfoKeyW
StrCmpW
PathMatchSpecA
UrlEscapeW
PathRemoveArgsA
UrlCanonicalizeA
PathSetDlgItemPathW
PathRelativePathToA
SHRegSetUSValueA
PathRemoveBackslashA
PathCreateFromUrlA
SHOpenRegStreamW
PathBuildRootW
SHEnumValueA
PathCombineW
SHRegCloseUSKey
PathIsUNCServerA
PathRelativePathToW
UrlApplySchemeW
PathMatchSpecW
UrlGetLocationA
PathParseIconLocationA
PathFindFileNameA
PathUnmakeSystemFolderA
StrCSpnW
StrPBrkW
PathRemoveBackslashW
SHRegOpenUSKeyW
UrlIsNoHistoryA
StrIsIntlEqualA
PathIsContentTypeW
PathSkipRootW
PathIsSystemFolderA
PathIsPrefixA
PathFindFileNameW
PathCompactPathExA
PathCompactPathW
UrlIsOpaqueA
PathRemoveExtensionW
PathSetDlgItemPathA
PathCompactPathExW
SHRegQueryInfoUSKeyW
SHDeleteOrphanKeyW
PathUnquoteSpacesA
SHRegDeleteUSValueW
SHQueryValueExA
SHEnumKeyExW
UrlCreateFromPathA

winmm

timeGetTime
auxSetVolume
midiInStart
waveOutGetDevCapsA
waveInUnprepareHeader
tid32Message
wid32Message
timeGetDevCaps
waveOutMessage
PlaySoundA
waveOutPause

msvcrt

_mbsnccnt
_mbsupr
_mbsnbicmp
_mbsninc
_mbsnset
_mbsspn
_ismbstrail
_ismbbkpunct
_gcvt
_ismbbalpha
_ecvt
_filelengthi64
wcspbrk
_unlock
_wcsupr
asin
__p__osver
fclose
_mbspbrk
_strdate
_local_unwind2
_CIacos
__p__timezone
_wrmdir
_aexit_rtn
asctime
ferror
_mbctokata
_putenv
__threadhandle
_mbsstr
sprintf
_loaddll
fread
fopen
toupper
_spawnve
putchar
fsetpos
_mktemp
fgets
fseek
wcstombs
_jn
mbtowc
memset
fprintf
_ismbcspace
iswlower
fputs
_except_handler3
mktime
fputc
_vsnwprintf
_setjmp
_ftime
_ismbslead
ftell
wcsrchr
_strnicmp
_unlink
_mbsncpy
_ismbclower
_write
__dllonexit
_CIasin
_ismbbalnum
_ismbckata
_mbcjmstojis
feof
tolower
realloc
printf
calloc
_CIlog
_environ
_eof
fwprintf
longjmp
_wstrdate
_errno
fwrite
_rotl
strtol
_ismbcalpha
_pclose
_inpd
_HUGE
_wspawnlpe
_wpopen

Exports

Exports

Aakllwhu
Agokmq
Iupjafq
Lgyifzsh
Vxaw
Wbemz

Sections

.text
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a7ec52d935039623fc5295944c6a6df1

Headers

File Characteristics

Imports

kernel32

shell32

shlwapi

winmm

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 47KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 52KB - Virtual size: 48KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 48KB - Virtual size: 47KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 52KB - Virtual size: 48KB

.reloc
Size: 12KB - Virtual size: 8KB