f7a9baaee4d1c097fc56a4d4b61881ceceea6cf9b31b9a4e2ee37722ffbbc8ae

Sharing

Copy URL Twitter E-mail

General

Target

f7a9baaee4d1c097fc56a4d4b61881ceceea6cf9b31b9a4e2ee37722ffbbc8ae
Size

849KB
MD5

fcf8e0d720680cee1a8881aa2dd685d0
SHA1

20d8e5f261b8d80181301052c6b996fb61f207fa
SHA256

f7a9baaee4d1c097fc56a4d4b61881ceceea6cf9b31b9a4e2ee37722ffbbc8ae
SHA512

d50a211ca91b92de6840a5029fff9fa8421118dc4298ca495a300316e4addd911f9aab2f24f08354a96608757a47f4c90ae90d92c929f0ac8e220ea1db834aec
SSDEEP

24576:H9+u734kOrewpozBRo1cgHojdWEo0IZVBxKxvX:H9+wokOzeHDE/pRc

Score

N/A

Malware Config

Signatures

Files

f7a9baaee4d1c097fc56a4d4b61881ceceea6cf9b31b9a4e2ee37722ffbbc8ae
.dll windows x86

16d14cca1cb3190efd48de69ba2982c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SetFilePointer
GetCommandLineA
MulDiv
GetProcessHeap
UnhandledExceptionFilter
GetCommandLineW
GetCurrentThread
GetStdHandle
GetEnvironmentStrings
ReadFile
GetCurrentThreadId
GlobalLock
SetLastError
HeapReAlloc
LoadResource
InterlockedIncrement
SetStdHandle
LCMapStringA
SetUnhandledExceptionFilter
GetStartupInfoA
GlobalFree
GlobalReAlloc
GetVersion
FreeLibrary
GetConsoleCP
SetEnvironmentVariableA
FindClose
LocalFileTimeToFileTime
GlobalUnlock
RaiseException
GlobalHandle
DeleteCriticalSection
GetCurrentProcessId
GlobalDeleteAtom
FlushFileBuffers
GetModuleFileNameA
GetSystemDirectoryA
TlsFree
LockFile
SetHandleCount
WriteFile
LocalReAlloc
CloseHandle
FreeEnvironmentStringsA
GetStringTypeA
InterlockedDecrement
GetVersionExA
GetTimeZoneInformation
FreeResource
UnlockFile
VirtualQuery
GetFileSize
lstrlenA
CompareStringA
HeapSize
FileTimeToSystemTime
ExitProcess
DuplicateHandle
GetWindowsDirectoryA
GetFileType
lstrcmpA
HeapAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
RtlUnwind
VirtualFree
GetConsoleMode
GetLastError
TerminateProcess
SizeofResource
SystemTimeToFileTime
SetFileTime
GetConsoleOutputCP
ConvertDefaultLocale
HeapFree
InterlockedExchange
CreateFileA
GlobalFlags
GetFileTime
EnterCriticalSection
LockResource
GetSystemInfo
LeaveCriticalSection
GetLocaleInfoA
Sleep
TlsGetValue
EnumResourceLanguagesW
SetEndOfFile
GetACP
GetThreadLocale
InitializeCriticalSection
QueryPerformanceCounter
FileTimeToLocalFileTime
TlsSetValue
HeapCreate
SetErrorMode
TlsAlloc
HeapDestroy
VirtualProtect
LocalFree
GetModuleHandleA
GetOEMCP
FindAtomA
AddAtomA
LocalAlloc
WriteConsoleA
LoadLibraryA
GetProcAddress
ReadConsoleInputA
GlobalAlloc
GetTickCount

user32

SetParent
DestroyWindow
BringWindowToTop
GetMenuState
InflateRect
GetWindowPlacement
ScreenToClient
CopyRect
GetTopWindow
TrackPopupMenu
GetWindowRect
SetWindowContextHelpId
GetKeyState
GetWindowRgn
GetMenuCheckMarkDimensions
SetWindowPos
SetScrollPos
SetScrollRange
DeferWindowPos
LockWindowUpdate
UpdateWindow
DestroyIcon
IntersectRect
FillRect
GetLastActivePopup
SetWindowRgn
SetActiveWindow
OffsetRect
GetSysColorBrush
BeginDeferWindowPos
UnhookWindowsHookEx
CheckMenuItem
SetMenu
ClientToScreen
SendDlgItemMessageA
KillTimer
GetFocus
DeleteMenu
CreatePopupMenu
CallNextHookEx
PtInRect
GetSystemMetrics
ValidateRect
GetWindowThreadProcessId
GetMessagePos
IsRectEmpty
GetDlgCtrlID
GetScrollRange
DestroyMenu
InvalidateRect
ShowWindow
EnableMenuItem
InvalidateRgn
GetWindow
SetTimer
GetNextDlgTabItem
GetMessageTime
IsZoomed
GetWindowDC
GetClientRect
BeginPaint
RedrawWindow
ReuseDDElParam
AdjustWindowRectEx
EndDeferWindowPos
GetMenu
GetDC
IsIconic
SetCapture
UnregisterClassA
GetDesktopWindow
GetMenuItemCount
GetSysColor
GetMenuItemID
IsWindow
MessageBeep
GetScrollInfo
WindowFromPoint
MapWindowPoints
MapDialogRect
SetRect
GetActiveWindow
ShowOwnedPopups
IsChild
SetForegroundWindow
GetSystemMenu
GetSubMenu
ScrollWindow
GetDCEx
ReleaseDC
GetCapture
DrawIcon
GetCursorPos
GetParent
SetCursor
ReleaseCapture
GetScrollPos
EqualRect
SetRectEmpty
GetDlgItem
EndPaint
GetNextDlgGroupItem
UnpackDDElParam
SystemParametersInfoA
PostQuitMessage
SetFocus
ShowScrollBar
GetForegroundWindow
MoveWindow
IsWindowVisible
SetScrollInfo
TranslateMessage
IsWindowEnabled
SetMenuItemBitmaps
GetKeyboardType
EndDialog

gdi32

ScaleWindowExtEx
GetBkColor
RestoreDC
SetBkMode
SetBkColor
SaveDC
CreateCompatibleBitmap
GetClipBox
GetStockObject
IntersectClipRect
DeleteDC
SetMapMode
CreateSolidBrush
GetTextColor
DeleteObject
SelectObject
GetDeviceCaps
OffsetRgn
GetWindowExtEx
ExtSelectClipRgn
ExcludeClipRect
CreateBitmap
CreateEllipticRgn
BitBlt
CreateCompatibleDC
CreateRectRgn
PatBlt
SetWindowExtEx
StretchDIBits
RectVisible
SetViewportOrgEx
Ellipse
SetViewportExtEx
CreateRectRgnIndirect
SelectClipRgn
ScaleViewportExtEx
GetMapMode
CreatePatternBrush
GetPixel
Escape
DPtoLP
PtVisible
OffsetViewportOrgEx
SetRectRgn
CombineRgn
GetRgnBox
SetTextColor

advapi32

RegCloseKey
SetFileSecurityW

shell32

DragFinish

ole32

CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
CreateStreamOnHGlobal
CLSIDFromString
CreateILockBytesOnHGlobal
CoCreateInstance
CLSIDFromProgID
OleUninitialize
OleFlushClipboard
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
StgOpenStorageOnILockBytes

oleaut32

VariantTimeToSystemTime
SysStringLen
SafeArrayDestroy
VariantCopy
VariantClear
OleLoadPicture
VariantChangeType
SysAllocStringLen
OleCreateFontIndirect
VariantInit
SysAllocString
SysFreeString
SystemTimeToVariantTime

comctl32

ImageList_LoadImageW

shlwapi

PathIsUNCW
PathRemoveExtensionW
PathFindExtensionW
PathStripToRootW
PathFileExistsW
PathFindFileNameW

wldap32

ord201

userenv

UnloadUserProfile

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

16d14cca1cb3190efd48de69ba2982c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

userenv

Sections

.text Size: 474KB - Virtual size: 473KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 343KB - Virtual size: 365KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 474KB - Virtual size: 473KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 343KB - Virtual size: 365KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 3KB - Virtual size: 3KB