ed618b3b88150e7b22f073f2e1ed9565fa6f76aa05e08def3faf17f0705241d4

Sharing

Copy URL

Twitter E-mail

General

Target

ed618b3b88150e7b22f073f2e1ed9565fa6f76aa05e08def3faf17f0705241d4
Size

151KB
MD5

f8f88208da78c70f3c571680fff35c27
SHA1

d6189681b59342f833ccb3a64695061abe0f57a6
SHA256

ed618b3b88150e7b22f073f2e1ed9565fa6f76aa05e08def3faf17f0705241d4
SHA512

86d70126f3bacce10d73d64a0cbd545fda8d08440e3d42b28423d4901a3bf1e3ba46e822af7e194ef8be6c2bbd916c4018f3996e1e89c2d6e02d0e4a34625a89
SSDEEP

3072:WSfB2YraIPCCfS9LkhhpNdri/W+H+Y3q1Sy8:WsMNCK9LehTFiBH+Y3q1

Score

N/A

Malware Config

Signatures

Files

ed618b3b88150e7b22f073f2e1ed9565fa6f76aa05e08def3faf17f0705241d4
.dll windows x86

75895f1873ccf65d137e7f93f69c47e2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
EndDialog
GetThreadDesktop
GetWindowTextW
OffsetRect
SendMessageW
SetWindowLongW
SetWindowTextW
ShowWindow
EnableWindow
GetWindowLongW
DialogBoxParamW

msvcrt

wcscmp
_except_handler3

kernel32

DisableThreadLibraryCalls
ExitProcess
GetCommandLineA
GetComputerNameW
CompareStringW
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
GetWindowsDirectoryW
LocalAlloc
MultiByteToWideChar
RtlUnwind
SetLastError
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
lstrcmpiW
CloseHandle
GetCurrentProcess

shell32

ShellExecuteW
SHSetUnreadMailCountW
SHOpenFolderAndSelectItems

advapi32

AddAce
CloseServiceHandle
RegSetValueExW
RegSetKeySecurity
RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
OpenServiceW
OpenSCManagerW
InitializeSid
ConvertStringSecurityDescriptorToSecurityDescriptorW
ControlService
ChangeServiceConfigW

setupapi

SetupLogErrorW
CM_Create_DevNodeA
SetupCloseLog
SetupDiCreateDevRegKeyW
SetupDiSetClassInstallParamsW
SetupOpenLog
SetupDiOpenDevRegKey
SetupDiInstallDevice
SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassInstallParamsW
CMP_Report_LogOn

gdi32

CloseEnhMetaFile

Sections

.text
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

75895f1873ccf65d137e7f93f69c47e2

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcrt

kernel32

shell32

advapi32

setupapi

gdi32

Sections

.text Size: 34KB - Virtual size: 33KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 45KB - Virtual size: 46KB

.rsrc Size: 6KB - Virtual size: 6KB

.text
Size: 34KB - Virtual size: 33KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 45KB - Virtual size: 46KB

.rsrc
Size: 6KB - Virtual size: 6KB