2df66110147688a7c2276eac7eab0b389dcd9b76eb378204d2e2e3ebbb249d1a

Sharing

Copy URL Twitter E-mail

General

Target

2df66110147688a7c2276eac7eab0b389dcd9b76eb378204d2e2e3ebbb249d1a
Size

868KB
MD5

8cd24f29503f09c7f36159f3d08d33a0
SHA1

d7b0317cf7e9aeffe951bef0e94ba06042f0f1bb
SHA256

2df66110147688a7c2276eac7eab0b389dcd9b76eb378204d2e2e3ebbb249d1a
SHA512

8cffa5d5937acec3b0439491f9c3ed7d336dceb733aa0caf503b1f08d9ed38d6f6e985dada771a017cea9397ff2b885f69fba088d6e0ced39ccab50475dfa373
SSDEEP

24576:Yodc16Vh2lvonNnq1Nt3mMExLCSEEK7sfY25Oe7I:JVh2lvkNvtKAA25+

Score

N/A

Malware Config

Signatures

Files

2df66110147688a7c2276eac7eab0b389dcd9b76eb378204d2e2e3ebbb249d1a
.dll windows x86

79df75fb9d0900a4397681e3fd9d477a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetEnvironmentVariableA
ExpandEnvironmentStringsA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
UnmapViewOfFile
CloseHandle
CreateFileA
GetFullPathNameA
GetFileAttributesA
SetFilePointer
FindClose
CreateDirectoryA
VirtualProtect
VirtualAlloc
DuplicateHandle
GetFileSize
MapViewOfFile
CreateFileMappingA
GetCurrentProcessId
VirtualFree
ReadProcessMemory
DeleteFileW
WriteFile
CreateFileW
SetErrorMode
TerminateProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetSystemTimeAsFileTime
FreeLibrary
OutputDebugStringA
lstrlenA
GetModuleHandleA
GetProcAddress
IsDBCSLeadByte
HeapFree
HeapAlloc
HeapReAlloc
FlushViewOfFile
MapViewOfFileEx
SetEndOfFile
GetDriveTypeA
GetDriveTypeW
LCMapStringA
CreateFileMappingW
GetFileType
DeviceIoControl
ExpandEnvironmentStringsW
CopyFileA
SetFileAttributesA
CopyFileW
GetFileAttributesW
SetFileAttributesW
InterlockedIncrement
InterlockedDecrement
Sleep
FormatMessageA
lstrcmpW
CreateThread
TerminateThread
GetThreadSelectorEntry
ResumeThread
SuspendThread
GetThreadContext
GetProcessHeap
VirtualQueryEx
GetSystemInfo
DebugBreak
TlsFree
TlsAlloc
GetVersionExA
InitializeCriticalSection
HeapCreate
DeleteCriticalSection
HeapDestroy
TlsGetValue
FindNextFileA
TlsSetValue
GetLastError
EnterCriticalSection
LeaveCriticalSection
LocalAlloc
LocalFree
SetLastError
FindFirstFileA
LoadLibraryA

msvcrt

_onexit
__dllonexit
_adjust_fdiv
_initterm
_snprintf
isprint
sprintf
_vsnwprintf
memmove
calloc
wcscat
strncat
_ltoa
_itoa
_vsnprintf
_write
_iob
fputs
_strcmpi
strrchr
tolower
_close
_open
time
_strnicmp
vsprintf
strncpy
_stricmp
_purecall
malloc
free
isspace
ctime
_strlwr
_except_handler3
_wcsicmp
wcsncpy
wcscmp
wcsncmp
fclose
_wsplitpath
_wcsnicmp
towlower
__unDName
_CxxThrowException
bsearch
_snwprintf
fread
fseek
_wfopen
fopen
_osver
wcstol
_mbsnbcpy
fflush
_wmakepath
wcsrchr
wcscpy
_wcsdup
ftell
_wgetenv
_mbsicmp
printf
_fullpath
_access
_fsopen
_wfsopen
_sopen
_wsopen
_wfullpath
_read
_lseeki64
_chsize
_get_osfhandle
_open_osfhandle
_mbscmp
_memicmp
wcsncat
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__CxxFrameHandler
wcslen
qsort
strchr
strstr
strncmp
isxdigit
??2@YAPAXI@Z
??3@YAXPAX@Z
_assert
_splitpath
wprintf

version

GetFileVersionInfoA
GetFileVersionInfoW
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW

advapi32

RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
CryptReleaseContext
CryptGenRandom
CryptAcquireContextA

rpcrt4

UuidCreate

Exports

Exports

DbgHelpCreateUserDump
DbgHelpCreateUserDumpW
EnumDirTree
EnumerateLoadedModules
EnumerateLoadedModules64
ExtensionApiVersion
FindDebugInfoFile
FindDebugInfoFileEx
FindExecutableImage
FindExecutableImageEx
FindFileInPath
FindFileInSearchPath
GetTimestampForLoadedLibrary
ImageDirectoryEntryToData
ImageDirectoryEntryToDataEx
ImageNtHeader
ImageRvaToSection
ImageRvaToVa
ImagehlpApiVersion
ImagehlpApiVersionEx
MakeSureDirectoryPathExists
MapDebugInformation
MiniDumpReadDumpStream
MiniDumpWriteDump
SearchTreeForFile
StackWalk
StackWalk64
SymAddSymbol
SymCleanup
SymDeleteSymbol
SymEnumSourceFiles
SymEnumSym
SymEnumSymbols
SymEnumSymbolsForAddr
SymEnumTypes
SymEnumerateModules
SymEnumerateModules64
SymEnumerateSymbols
SymEnumerateSymbols64
SymEnumerateSymbolsW
SymEnumerateSymbolsW64
SymFindFileInPath
SymFromAddr
SymFromName
SymFunctionTableAccess
SymFunctionTableAccess64
SymGetFileLineOffsets64
SymGetLineFromAddr
SymGetLineFromAddr64
SymGetLineFromName
SymGetLineFromName64
SymGetLineNext
SymGetLineNext64
SymGetLinePrev
SymGetLinePrev64
SymGetModuleBase
SymGetModuleBase64
SymGetModuleInfo
SymGetModuleInfo64
SymGetModuleInfoW
SymGetModuleInfoW64
SymGetOptions
SymGetSearchPath
SymGetSourceFile
SymGetSymFromAddr
SymGetSymFromAddr64
SymGetSymFromName
SymGetSymFromName64
SymGetSymNext
SymGetSymNext64
SymGetSymPrev
SymGetSymPrev64
SymGetTypeFromName
SymGetTypeInfo
SymInitialize
SymLoadModule
SymLoadModule64
SymLoadModuleEx
SymMatchFileName
SymMatchString
SymRegisterCallback
SymRegisterCallback64
SymRegisterFunctionEntryCallback
SymRegisterFunctionEntryCallback64
SymSetContext
SymSetOptions
SymSetParentWindow
SymSetSearchPath
SymUnDName
SymUnDName64
SymUnloadModule
SymUnloadModule64
UnDecorateSymbolName
UnmapDebugInformation
WinDbgExtensionDllInit
dbghelp
dh
lm
lmi
omap
srcfiles
stackdbg
sym
vc7fpo

Sections

.text
Size: 647KB - Virtual size: 646KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 165KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

79df75fb9d0900a4397681e3fd9d477a

Headers

File Characteristics

Imports

kernel32

msvcrt

version

advapi32

rpcrt4

Exports

Exports

Sections

.text Size: 647KB - Virtual size: 646KB

.data Size: 10KB - Virtual size: 20KB

.rsrc Size: 1024B - Virtual size: 984B

.reloc Size: 43KB - Virtual size: 42KB

.text Size: 165KB - Virtual size: 168KB

.text
Size: 647KB - Virtual size: 646KB

.data
Size: 10KB - Virtual size: 20KB

.rsrc
Size: 1024B - Virtual size: 984B

.reloc
Size: 43KB - Virtual size: 42KB

.text
Size: 165KB - Virtual size: 168KB