a587c6ba9e3fd11d1a31fdfc4309090925496368ec69a47eefa5178d081e4392

Sharing

Copy URL

Twitter E-mail

General

Target

a587c6ba9e3fd11d1a31fdfc4309090925496368ec69a47eefa5178d081e4392
Size

54KB
MD5

f931326b816883e76b4e389bd95b921e
SHA1

425d2cdf0b3ba600603d5745a53a232075445005
SHA256

a587c6ba9e3fd11d1a31fdfc4309090925496368ec69a47eefa5178d081e4392
SHA512

0ec1657ec44b8cebcea630a0eeb4ecbf030ff5a860ab3300579a7f29dfa0817ee1ec45ead66294f729415b54cca9f7b0918bb5aea6dc5b769b1e8ef028e396e1
SSDEEP

768:QzGh3L1shxO28eA4H1Id34m6BrpEeH/w969+YDp1eOPZh/+/lXZ93vmdkTJvasqi:64JsA28eAlZo6eH/2sJhG/lp9Fhllf

Score

N/A

Malware Config

Signatures

Files

a587c6ba9e3fd11d1a31fdfc4309090925496368ec69a47eefa5178d081e4392
.dll windows x86

2ccc375ef5d1df40ffbdc5d148ca4407

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageW
GetSystemTimeAsFileTime
InterlockedExchangeAdd
GetModuleHandleA
LoadLibraryW
GetCommandLineW
VirtualAlloc
Sleep
WideCharToMultiByte
FindNextVolumeW
VirtualFree
QueryPerformanceCounter
lstrcmpiW
GetCurrentProcess
CloseHandle
GetStartupInfoA
lstrcmpW
CreateMutexW

shlwapi

PathFindFileNameW

ole32

CoGetClassObject
RevokeDragDrop

oleaut32

VariantInit
SysAllocString

msvcrt

wcscoll
_wfopen
__getmainargs
exit
__dllonexit
qsort
free
realloc
_stricmp
fclose

comctl32

ImageList_GetImageInfo
ImageList_Add
ImageList_BeginDrag

ntdll

NtOpenEventPair
NtClose
NtCancelTimer
NtOpenJobObject
NtOpenEvent
NtMapViewOfSection
NtReadFile

user32

DrawTextA
DrawEdge
GetSystemMetrics
GetSysColorBrush
RedrawWindow
RegisterWindowMessageW
SystemParametersInfoW
SetForegroundWindow
SetCursor
GetKeyState
GetClientRect
GetDC
DrawTextW
GetSubMenu
CloseClipboard
SetWindowLongW
SetProcessDefaultLayout
InvalidateRgn
CallNextHookEx
GetDlgCtrlID
CharLowerW
UpdateWindow
GetWindowLongW
OffsetRect
MapWindowPoints

shell32

DragQueryPoint
SHGetPathFromIDListW

d3divdmd

_LInf
_Tolower
_Dscale
_LRteps
_Toupper
_LExp
_Getcvt
_Snan
_FSnan
_Xbig

gdi32

CreateBitmap
CreateCompatibleBitmap
GetObjectW

Exports

Exports

CreateProcessNotify
PathMakeUniqueName
EtwUnregister
PathGetShortPath
PathResolve
PathQualify
PathIsSlowW
DbgBreakPoint
DbgkLkmdUnregisterCallback

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2ccc375ef5d1df40ffbdc5d148ca4407

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

ole32

oleaut32

msvcrt

comctl32

ntdll

user32

shell32

d3divdmd

gdi32

Exports

Exports

Sections

.text Size: 16KB - Virtual size: 16KB

.data Size: 35KB - Virtual size: 34KB

.rsrc Size: 1024B - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 8KB

.text
Size: 16KB - Virtual size: 16KB

.data
Size: 35KB - Virtual size: 34KB

.rsrc
Size: 1024B - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 8KB