51d08a355dcb0e8dbe6a6455b0ec6544f8368a7c394e87e4e61967036c24b040

Sharing

Copy URL Twitter E-mail

General

Target

51d08a355dcb0e8dbe6a6455b0ec6544f8368a7c394e87e4e61967036c24b040
Size

443KB
MD5

51cd996e9b6d9ccf0c441146438d64f0
SHA1

fab0d9036f3da925bfd271f0260169d4c82463a0
SHA256

51d08a355dcb0e8dbe6a6455b0ec6544f8368a7c394e87e4e61967036c24b040
SHA512

a65b614d3b3633bdd67ceb023cdcfc6fd683aacceaf1aad05009a1c06189c360265f954398a05cda75a104f5650e14e8e90cfb7c2e6c9d49e14a9af0ec6db794
SSDEEP

12288:JRz/azNQO15sNsjlNBVF9uZj/5ANkSD5O:JRz/2C6+B/5AC

Score

N/A

Malware Config

Signatures

Files

51d08a355dcb0e8dbe6a6455b0ec6544f8368a7c394e87e4e61967036c24b040
.dll windows x86

4028328557669218c3e09adaca7c1802

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

floor
_CIsin
free
malloc
_XcptFilter
_controlfp
ceil
_CIlog
_initterm
??_U@YAPAXI@Z
??_V@YAXPAX@Z
_aligned_free
_aligned_malloc
memmove
_CIlog10
memcpy
_isnan
_CItan
_CIpow
_CIcos
_ftol2
__CxxFrameHandler3
memset
_ftol2_sse
_CIsqrt
_CIatan2
_amsg_exit
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_vsnprintf
_vsnwprintf

kernel32

GetTickCount
QueryPerformanceCounter
WaitForSingleObject
ResetEvent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
InterlockedCompareExchange64
OutputDebugStringA
GetThreadTimes
CloseHandle
GetFullPathNameW
GetModuleFileNameW
GetModuleHandleW
lstrcmpiW
GetFileSize
SetFilePointer
ReadFile
CreateFileW
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
DuplicateHandle
GetCurrentProcess
GetLastError
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
lstrlenW
lstrcmpW
LoadLibraryW
ReleaseMutex
QueryPerformanceFrequency
DisableThreadLibraryCalls
CreateMutexW
GetCurrentThreadId
GetCurrentProcessId
LocalFree
GetSystemPowerStatus
InitializeCriticalSection
LeaveCriticalSection
SetEvent
EnterCriticalSection
InterlockedIncrement
DeleteCriticalSection
InterlockedDecrement
SetThreadPriority
GetCurrentThread
CreateThread
CreateEventW
WaitForMultipleObjects
Sleep
ReleaseSemaphore
OpenProcess
GetExitCodeThread
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
MulDiv
InterlockedExchange
SwitchToThread
InterlockedCompareExchange
GetProcessHeap
GetSystemInfo
HeapSize
CreateSemaphoreW
GetProcessTimes

user32

GetParent
CharUpperW
GetWindowPlacement
IsWindow
GetWindowThreadProcessId
LoadStringW
GetForegroundWindow

advapi32

GetTraceEnableLevel
RegOpenKeyExA
RegCreateKeyW
RegOpenKeyExW
RegQueryValueExA
TraceMessage
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
RegCreateKeyA
GetTraceEnableFlags
RegCloseKey
RegSetValueExW
RegSetValueExA
RegQueryValueExW

ole32

CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
PropVariantClear
CoTaskMemFree

winmm

timeBeginPeriod
timeEndPeriod
timeGetTime
waveOutGetDevCapsW
waveOutGetNumDevs
waveInGetNumDevs
waveInGetDevCapsW

powrprof

PowerReadACValue
PowerGetActiveScheme
CallNtPowerInformation
PowerReadDCValue

Exports

Exports

DirectSoundCaptureCreate
DirectSoundCaptureCreate8
DirectSoundCaptureEnumerateA
DirectSoundCaptureEnumerateW
DirectSoundCreate
DirectSoundCreate8
DirectSoundEnumerateA
DirectSoundEnumerateW
DirectSoundFullDuplexCreate
DllCanUnloadNow
DllGetClassObject
GetDeviceID

Sections

.text
Size: 415KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RT_CODE
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.code9
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4028328557669218c3e09adaca7c1802

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

advapi32

ole32

winmm

powrprof

Exports

Exports

Sections

.text Size: 415KB - Virtual size: 416KB

RT_CODE Size: 512B - Virtual size: 4KB

.data Size: 13KB - Virtual size: 16KB

.rsrc Size: 2KB - Virtual size: 4KB

.reloc Size: 10KB - Virtual size: 12KB

.code9 Size: 512B - Virtual size: 4KB

.text
Size: 415KB - Virtual size: 416KB

RT_CODE
Size: 512B - Virtual size: 4KB

.data
Size: 13KB - Virtual size: 16KB

.rsrc
Size: 2KB - Virtual size: 4KB

.reloc
Size: 10KB - Virtual size: 12KB

.code9
Size: 512B - Virtual size: 4KB