b04e9edf983e68d62b1d903baf4a7f09ed437c8e7971b9c4c0d9a76a6c22647e

Sharing

Copy URL Twitter E-mail

General

Target

b04e9edf983e68d62b1d903baf4a7f09ed437c8e7971b9c4c0d9a76a6c22647e
Size

841KB
MD5

2b344f9d34d7769a3fc3b10cd1d968d0
SHA1

9169e72a70e51dfb06ef89532f45400378d52f2e
SHA256

b04e9edf983e68d62b1d903baf4a7f09ed437c8e7971b9c4c0d9a76a6c22647e
SHA512

f09ad1b16d5ca4d2e8312e1e4c67d4db78c6fb26f354437fa1f3209fb619d96c6ac8848bd947e933ce8809221dab4957bad10e5bec2d6fea14364206d61914f8
SSDEEP

12288:topt/GuOIgnqx1Cc2K3sJPtsyx8Msfe9GhEwbHuV19TWeKC5g1gSqa:yptQIgnqx1C3K8x8MsfeqEJ1pKogiSF

Score

N/A

Malware Config

Signatures

Files

b04e9edf983e68d62b1d903baf4a7f09ed437c8e7971b9c4c0d9a76a6c22647e
.dll windows x86

b4db4123328d33fd6f8ed3e7509e9363

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetEnvironmentVariableA
LockResource
GetVersionExA
GetACP
WriteConsoleA
FreeEnvironmentStringsA
FileTimeToSystemTime
GetCurrentThread
VirtualFree
GetConsoleMode
HeapDestroy
InterlockedDecrement
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
FreeResource
WriteFile
UnhandledExceptionFilter
SizeofResource
GetLastError
GetStartupInfoA
GetThreadLocale
GlobalReAlloc
FileTimeToLocalFileTime
InterlockedExchange
GetWindowsDirectoryA
GetVersion
GetFileSize
CloseHandle
LCMapStringA
LocalFree
LocalReAlloc
UnlockFile
GetLocaleInfoA
QueryPerformanceCounter
SetLastError
FlushFileBuffers
EnterCriticalSection
InterlockedIncrement
TlsFree
RaiseException
TerminateProcess
SetFileTime
GlobalUnlock
GetCommandLineA
FindClose
LoadResource
GlobalLock
VirtualQuery
MulDiv
lstrlenA
CreateFileA
SetFilePointer
GlobalDeleteAtom
GlobalHandle
GetProcessHeap
GetModuleFileNameA
SetStdHandle
GetSystemDirectoryA
EnumResourceLanguagesW
Sleep
TlsAlloc
GlobalFlags
GetConsoleOutputCP
SetEndOfFile
SystemTimeToFileTime
HeapReAlloc
HeapFree
GetFileType
lstrcmpA
RtlUnwind
SetHandleCount
GetTimeZoneInformation
GetStdHandle
ReadFile
SetErrorMode
HeapAlloc
GetSystemTimeAsFileTime
FreeLibrary
HeapCreate
GetStringTypeA
ConvertDefaultLocale
GetConsoleCP
LockFile
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
GetCurrentProcessId
LocalAlloc
DeleteCriticalSection
TlsGetValue
GetEnvironmentStrings
LocalFileTimeToFileTime
HeapSize
CompareStringA
GetCommandLineW
TlsSetValue
lstrcpyA
GetSystemTime
GetModuleHandleA
GetOEMCP
LoadLibraryA
GlobalFree
GetProcAddress
lstrcatA
GlobalAlloc
GetTickCount
GetFileTime
ExitProcess

user32

UnhookWindowsHookEx
CreatePopupMenu
SetCapture
EqualRect
GetWindowRgn
InvalidateRgn
GetActiveWindow
SetWindowPos
BeginPaint
TrackPopupMenu
SendDlgItemMessageA
GetMessageTime
DestroyWindow
SetWindowRgn
ReleaseCapture
KillTimer
ScreenToClient
OffsetRect
GetWindowPlacement
SetScrollPos
SetTimer
UnregisterClassA
ShowOwnedPopups
GetTopWindow
GetCapture
SetScrollInfo
GetWindowThreadProcessId
GetMessagePos
IsWindowEnabled
DestroyMenu
GetMenuItemID
ScrollWindow
GetNextDlgGroupItem
InflateRect
GetMenuCheckMarkDimensions
ShowWindow
ReleaseDC
GetMenuItemCount
SetForegroundWindow
SetRectEmpty
EndDialog
GetScrollPos
SetRect
LockWindowUpdate
MapDialogRect
GetDesktopWindow
GetKeyState
EnableMenuItem
GetDlgCtrlID
GetSystemMetrics
GetClientRect
WindowFromPoint
GetLastActivePopup
PostQuitMessage
CallNextHookEx
SetFocus
PtInRect
SetCursor
GetWindowRect
GetNextDlgTabItem
GetDC
GetWindow
SetActiveWindow
ValidateRect
SystemParametersInfoA
ClientToScreen
SetMenuItemBitmaps
SetMenu
GetMenuState
IsWindowVisible
TranslateMessage
GetFocus
CopyRect
IntersectRect
UnpackDDElParam
GetMenu
CheckMenuItem
GetCursorPos
GetWindowDC
BeginDeferWindowPos
GetSubMenu
GetForegroundWindow
UpdateWindow
FillRect
IsWindow
AdjustWindowRectEx
GetScrollRange
MapWindowPoints
IsZoomed
IsRectEmpty
GetDlgItem
SetWindowContextHelpId
DrawIcon
MessageBeep
MoveWindow
GetScrollInfo
EndPaint
RedrawWindow
GetSystemMenu
BringWindowToTop
GetSysColorBrush
GetSysColor
GetDCEx
GetParent
IsIconic
SetParent
InvalidateRect
DeferWindowPos
ShowScrollBar
EndDeferWindowPos
DestroyIcon
ReuseDDElParam
IsChild
SetScrollRange
DeleteMenu

gdi32

GetDeviceCaps
SelectClipRgn
CombineRgn
BitBlt
GetPixel
PatBlt
SetViewportExtEx
CreateCompatibleBitmap
ScaleViewportExtEx
IntersectClipRect
GetClipBox
PtVisible
RestoreDC
SetTextColor
CreateSolidBrush
SetBkMode
SetWindowExtEx
CreateRectRgnIndirect
CreatePatternBrush
DPtoLP
ExtSelectClipRgn
GetTextColor
CreateEllipticRgn
DeleteDC
RectVisible
CreateBitmap
SetRectRgn
GetStockObject
Ellipse
ScaleWindowExtEx
Escape
CreateCompatibleDC
SelectObject
GetRgnBox
OffsetRgn
GetMapMode
DeleteObject
OffsetViewportOrgEx
GetBkColor
SetBkColor
StretchDIBits
SaveDC
CreateRectRgn
ExcludeClipRect
SetViewportOrgEx
SetMapMode
GetWindowExtEx

advapi32

RegCloseKey
SetFileSecurityW

shell32

DragFinish

ole32

CreateStreamOnHGlobal
StgCreateDocfileOnILockBytes
OleInitialize
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleFlushClipboard
OleUninitialize
CLSIDFromProgID
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoRegisterMessageFilter
CoRevokeClassObject

oleaut32

VariantInit
SysAllocString
OleCreateFontIndirect
VariantTimeToSystemTime
SafeArrayDestroy
SysFreeString
SystemTimeToVariantTime
SysAllocStringLen
VariantCopy
SysStringLen
VariantClear
OleLoadPicture
VariantChangeType

comctl32

ImageList_LoadImageW

shlwapi

PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
PathIsUNCW

wldap32

ord201

Sections

.text
Size: 474KB - Virtual size: 474KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b4db4123328d33fd6f8ed3e7509e9363

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

Sections

.text Size: 474KB - Virtual size: 474KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 343KB - Virtual size: 362KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 474KB - Virtual size: 474KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 343KB - Virtual size: 362KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 3KB - Virtual size: 3KB