aa11a0a7cfeb58e8af19f1d39600276c3598828d78a5a3d14e98e39db8718f20

Sharing

Copy URL Twitter E-mail

General

Target

aa11a0a7cfeb58e8af19f1d39600276c3598828d78a5a3d14e98e39db8718f20
Size

838KB
MD5

961dd9cb2a4ade8921a9d9ff85ac6e00
SHA1

4a62dd538bd38418e994123418b7e6e812fd1f73
SHA256

aa11a0a7cfeb58e8af19f1d39600276c3598828d78a5a3d14e98e39db8718f20
SHA512

ca9b488b3fc5a4a5f12a7b00750e177d7cf8f8e50f1a57d0626899e2831bb8e05632a280ef6ead36f7fda7a42e6c5302673552797077eff3e1b712e3b61cdbb5
SSDEEP

24576:ALWlHRSHxNiN0sc1h6kmfqMYtxe2TgJr3:eWxAHHc/c1blg7

Score

N/A

Malware Config

Signatures

Files

aa11a0a7cfeb58e8af19f1d39600276c3598828d78a5a3d14e98e39db8718f20
.dll windows x86

3b92e59a3eee71fd923e8f684e26ddb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleMode
DeleteCriticalSection
GetOEMCP
GlobalUnlock
QueryPerformanceCounter
GetVersionExA
LocalFree
DuplicateHandle
GetConsoleCP
HeapDestroy
FileTimeToSystemTime
LocalAlloc
ReadFile
TlsSetValue
SetHandleCount
SetEndOfFile
CompareStringA
InitializeCriticalSection
lstrcmpA
EnterCriticalSection
FlushFileBuffers
GetSystemInfo
GetStringTypeA
SetUnhandledExceptionFilter
UnlockFile
TlsFree
LocalFileTimeToFileTime
GetVersion
VirtualAlloc
GlobalDeleteAtom
GetEnvironmentStrings
TlsAlloc
GetCommandLineW
RtlUnwind
GetACP
GetLastError
GetProcessHeap
GetStdHandle
TerminateProcess
GetCurrentThreadId
GlobalHandle
GetCommandLineA
GetThreadLocale
FreeLibrary
lstrlenA
Sleep
VirtualFree
LocalReAlloc
HeapFree
GetSystemTimeAsFileTime
GlobalLock
FreeEnvironmentStringsA
SetFilePointer
VirtualQuery
GetFileSize
InterlockedExchange
GetFileType
SetEnvironmentVariableA
LeaveCriticalSection
HeapAlloc
LockFile
SizeofResource
GlobalFlags
GetCurrentProcessId
UnhandledExceptionFilter
GetConsoleOutputCP
CloseHandle
SetStdHandle
LoadResource
GetTimeZoneInformation
LCMapStringA
GetModuleHandleA
HeapSize
WriteFile
ConvertDefaultLocale
GlobalReAlloc
GlobalFree
SystemTimeToFileTime
FreeResource
InterlockedDecrement
IsDebuggerPresent
EnumResourceLanguagesW
MulDiv
GetSystemDirectoryA
FileTimeToLocalFileTime
GetWindowsDirectoryA
SetFileTime
CreateFileA
GetModuleFileNameA
HeapCreate
RaiseException
GetLocaleInfoA
FindClose
SetLastError
HeapReAlloc
LoadLibraryA
GetStartupInfoA
GetFileTime
SetErrorMode
InterlockedIncrement
GlobalAlloc
LockResource
GetCurrentThread
VirtualProtect
LoadLibraryExA
AddAtomA
WriteConsoleA
GetProcAddress
SetConsoleCP
FreeConsole
ReadConsoleInputA
GetTickCount
WriteConsoleInputA
AllocConsole
TlsGetValue
ExitProcess

user32

UnhookWindowsHookEx
MapWindowPoints
GetSysColor
AdjustWindowRectEx
GetWindowRect
IsChild
InflateRect
GetFocus
GetScrollInfo
SetCursor
SetScrollRange
DestroyMenu
SetWindowRgn
ReuseDDElParam
EnableMenuItem
IsWindowEnabled
ShowScrollBar
PtInRect
EndDeferWindowPos
IsWindowVisible
TranslateMessage
SetRect
IsIconic
GetNextDlgGroupItem
GetWindowDC
EndPaint
EqualRect
BeginDeferWindowPos
GetSysColorBrush
GetWindowThreadProcessId
GetCapture
SetMenuItemBitmaps
SetWindowContextHelpId
GetMenuState
GetParent
ReleaseDC
GetActiveWindow
ScrollWindow
GetDesktopWindow
CreatePopupMenu
SetMenu
IsZoomed
ScreenToClient
MapDialogRect
PostQuitMessage
GetTopWindow
SetWindowPos
InvalidateRect
IntersectRect
GetSystemMetrics
SetScrollPos
GetCursorPos
GetMessageTime
ReleaseCapture
UpdateWindow
GetMenuItemCount
SetFocus
GetForegroundWindow
GetMenuItemID
GetClientRect
GetKeyState
IsRectEmpty
ShowOwnedPopups
GetScrollPos
GetWindowRgn
ClientToScreen
GetNextDlgTabItem
SystemParametersInfoA
InvalidateRgn
SendDlgItemMessageA
LockWindowUpdate
DrawIcon
GetMenu
GetScrollRange
GetDCEx
SetParent
IsWindow
BeginPaint
DestroyIcon
WindowFromPoint
GetDlgItem
RedrawWindow
MoveWindow
UnpackDDElParam
EndDialog
ShowWindow
CopyRect
GetSubMenu
GetMessagePos
UnregisterClassA
BringWindowToTop
GetWindow
TrackPopupMenu
ValidateRect
CheckMenuItem
GetDC
OffsetRect
GetSystemMenu
SetCapture
CallNextHookEx
SetActiveWindow
SetScrollInfo
GetWindowPlacement
GetMenuCheckMarkDimensions
GetDlgCtrlID
MessageBeep
DeferWindowPos
DestroyWindow
GetLastActivePopup
FillRect
SetTimer
DeleteMenu
SetRectEmpty
KillTimer
SetForegroundWindow

gdi32

GetWindowExtEx
Ellipse
OffsetViewportOrgEx
SelectClipRgn
CombineRgn
DeleteDC
ExtSelectClipRgn
StretchDIBits
CreateRectRgnIndirect
DeleteObject
BitBlt
SetBkColor
SetBkMode
GetMapMode
SelectObject
ExcludeClipRect
CreateEllipticRgn
SaveDC
GetBkColor
ScaleWindowExtEx
Escape
IntersectClipRect
PtVisible
PatBlt
LPtoDP
CreateRectRgn
GetStockObject
GetClipBox
GetPixel
SetMapMode
RectVisible
CreatePatternBrush
GetRgnBox
GetTextColor
SetTextColor
DPtoLP
SetViewportOrgEx
RestoreDC
CreateCompatibleDC
ScaleViewportExtEx
CreateSolidBrush
CreateBitmap
SetWindowExtEx
CreateCompatibleBitmap
GetDeviceCaps
OffsetRgn
SetViewportExtEx
SetRectRgn

advapi32

RegCloseKey
GetFileSecurityW
SetFileSecurityW

shell32

DragAcceptFiles
DragFinish

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
CoRevokeClassObject
StgOpenStorageOnILockBytes
CoCreateInstance
CoGetClassObject
OleInitialize
OleIsCurrentClipboard
CoTaskMemFree
OleFlushClipboard
CLSIDFromString
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleUninitialize
CoTaskMemAlloc
CoUninitialize
CLSIDFromProgID

oleaut32

VariantCopy
OleLoadPicture
SysAllocStringLen
VariantTimeToSystemTime
OleCreateFontIndirect
SafeArrayDestroy
SysAllocString
SystemTimeToVariantTime
VariantClear
SysStringLen
VariantChangeType
VariantInit
SysFreeString

comctl32

ImageList_LoadImageW

shlwapi

PathFileExistsW
PathFindFileNameW
PathRemoveExtensionW
PathStripToRootW
PathFindExtensionW
PathIsUNCW

userenv

UnloadUserProfile

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 262KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b92e59a3eee71fd923e8f684e26ddb8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

userenv

Sections

.text Size: 478KB - Virtual size: 477KB

.rdata Size: 92KB - Virtual size: 91KB

.data Size: 262KB - Virtual size: 283KB

.rsrc Size: 1024B - Virtual size: 912B

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 478KB - Virtual size: 477KB

.rdata
Size: 92KB - Virtual size: 91KB

.data
Size: 262KB - Virtual size: 283KB

.rsrc
Size: 1024B - Virtual size: 912B

.reloc
Size: 3KB - Virtual size: 3KB