e27bb20a80d22ba0185bd389484f84c34e36f86d633ff90deb13529f2f87849c

Sharing

Copy URL Twitter E-mail

General

Target

e27bb20a80d22ba0185bd389484f84c34e36f86d633ff90deb13529f2f87849c
Size

335KB
MD5

cd763cfeaebea90ce4fcfc161316ac52
SHA1

b0954b1dfbf0aad59b5d146c577d97b673df9c8c
SHA256

e27bb20a80d22ba0185bd389484f84c34e36f86d633ff90deb13529f2f87849c
SHA512

89c8d0146a5790bcc0e0251e70210cc08463a32f53dce6d4df49d10bfb44a317aad5696c7801f6dbae52e98aed90c763ad042bf79ef02843eaf8be7d5d2961e4
SSDEEP

6144:1Mnv6poRCxNfmBQ/a10qHPEuw2Ffv7x76sTMnB0+fc6T:1w6eRCL6vEudBv7xusAny+f

Score

N/A

Malware Config

Signatures

Files

e27bb20a80d22ba0185bd389484f84c34e36f86d633ff90deb13529f2f87849c
.dll windows x86

a6697f4331da78b43174ed4db85b3f10

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_vsnwprintf
_except_handler3
wcslen
_wcsicmp
free
malloc
memmove
_adjust_fdiv
_initterm

ntdll

RtlInitUnicodeStringEx
RtlUnicodeToMultiByteSize
RtlAnsiStringToUnicodeString
RtlUnicodeStringToAnsiString
RtlIsNameLegalDOS8Dot3

shlwapi

ord476
ord80
StrCmpW
ord16
ord355
UrlIsW
PathFindExtensionW
ord197
SHRegGetValueW
PathFileExistsW
ord204
StrDupW
ord317
ord172
StrStrW
PathCombineW
PathMatchSpecW
PathGetDriveNumberW
SHOpenRegStream2W
ord219
ord346
StrCmpIW
ord461
StrRetToBufW
ord175
PathFindFileNameW
ord266
SHRegGetBoolUSValueW
StrCmpNIW
wvnsprintfW
PathRemoveBlanksW
PathIsRootW
wnsprintfW
StrRChrW
ord217
ord215
PathSkipRootW
StrChrW
PathAddBackslashW
ord437
PathIsUNCW

kernel32

LocalSize
FormatMessageW
GetUserDefaultLCID
FindClose
FindFirstFileW
GetVolumeInformationW
WideCharToMultiByte
FindNextFileW
GetFileAttributesW
GetFullPathNameW
LocalReAlloc
FreeLibraryAndExitThread
ResetEvent
WaitForSingleObject
CreateThread
LoadLibraryW
GetModuleFileNameW
CreateEventW
SetCurrentDirectoryW
SetErrorMode
FindResourceA
GetACP
GetProcAddress
GetModuleHandleW
MulDiv
lstrcpynW
lstrcmpW
GlobalFree
GlobalAlloc
lstrcpyW
lstrcpyA
DeleteCriticalSection
TlsFree
TlsAlloc
InitializeCriticalSectionAndSpinCount
DisableThreadLibraryCalls
DeleteFileW
GetTempFileNameW
GetProfileStringW
GetLocaleInfoW
GlobalUnlock
GlobalLock
GlobalReAlloc
FreeLibrary
InterlockedCompareExchange
LoadLibraryA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InterlockedDecrement
InterlockedIncrement
GetSystemDefaultUILanguage
FindResourceExW
ExpandEnvironmentStringsW
FreeResource
Sleep
CloseHandle
SetEvent
GetDriveTypeW
lstrcmpiW
GetVersionExA
InterlockedExchange
GetModuleHandleA
DelayLoadFailureHook
CreateFileW
GetCurrentDirectoryW
GetShortPathNameW
GetLastError
EnterCriticalSection
LeaveCriticalSection
SizeofResource
lstrlenW
TlsGetValue
SetLastError
LocalAlloc
lstrlenA
MultiByteToWideChar
LocalFree
FindResourceW
TlsSetValue
LockResource
LoadResource
GetProcessVersion

user32

DialogBoxIndirectParamW
CharPrevW
KillTimer
GetWindowTextLengthW
CreateDialogIndirectParamA
SetTimer
IsWindowVisible
MsgWaitForMultipleObjects
TranslateMessage
DispatchMessageW
CreatePopupMenu
DestroyMenu
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
PeekMessageW
EnumChildWindows
GetDlgCtrlID
SetWindowsHookExW
LoadAcceleratorsW
UnhookWindowsHookEx
CreateDialogIndirectParamW
GetSystemMenu
DeleteMenu
SetParent
CallNextHookEx
LockWindowUpdate
GetWindow
GetLastActivePopup
FindWindowExW
TranslateAcceleratorW
RedrawWindow
DrawTextW
DrawIcon
GetWindowPlacement
SetWindowPlacement
GetKeyState
LoadIconW
LoadImageW
RegisterClipboardFormatW
GetKeyboardLayout
DestroyWindow
GetDlgItemTextA
SetDlgItemTextA
CheckRadioButton
IsWindow
RegisterWindowMessageA
RegisterWindowMessageW
MessageBeep
IsDlgButtonChecked
CheckDlgButton
SetWindowTextW
DlgDirListW
SetDlgItemTextW
GetWindowTextW
MessageBoxW
CharNextW
DefWindowProcW
GrayStringW
CharLowerW
GetDialogBaseUnits
ScreenToClient
CreateWindowExW
GetWindowLongA
LoadStringW
GetSystemMetrics
ShowCursor
LoadCursorW
SetCursor
IntersectRect
EqualRect
GetSysColorBrush
InvalidateRect
IsWindowEnabled
WinHelpW
BeginPaint
EndPaint
SetPropW
PtInRect
SetCapture
ClipCursor
ValidateRect
ChildWindowFromPoint
SetFocus
GetDlgItemInt
SetDlgItemInt
GetDlgItemTextW
RemovePropW
EndDialog
UpdateWindow
SendDlgItemMessageW
SetWindowPos
EnableWindow
ShowWindow
MoveWindow
SetWindowLongW
GetWindowRect
DrawEdge
FillRect
GetParent
SendMessageW
GetPropW
DialogBoxIndirectParamAorW
CreateDialogIndirectParamAorW
CharNextA
CallWindowProcW
GetDlgItem
GetClientRect
MapWindowPoints
GetFocus
GetDC
InflateRect
DrawFocusRect
ReleaseDC
CopyRect
GetSysColor
FrameRect
GetWindowLongW
PostMessageW

gdi32

GetMapMode
TranslateCharsetInfo
CreateFontIndirectW
GetCharWidth32W
GetViewportExtEx
CreateRectRgnIndirect
CreateFontW
CreateICW
CreateDCW
ExcludeClipRect
GetWindowExtEx
SetMapMode
SetWindowExtEx
SetViewportExtEx
GetTextCharsetInfo
TextOutW
GetTextCharset
GetDeviceCaps
EnumFontFamiliesExW
GetTextExtentPointW
SetBkColor
SetTextColor
SetBkMode
DeleteObject
CreateSolidBrush
Rectangle
SelectObject
GetStockObject
CreatePen
GetNearestColor
DeleteDC
CreateCompatibleDC
RealizePalette
SelectPalette
PatBlt
BitBlt
LineTo
MoveToEx
CreateCompatibleBitmap
CreateDIBitmap
CreateDiscardableBitmap
GetObjectW
GetTextMetricsW
SelectClipRgn
ExtTextOutW

advapi32

RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegSetValueExW
RegQueryValueW
RegEnumValueW

comctl32

ord334
ImageList_Destroy
ord338
ImageList_GetIconSize
InitCommonControlsEx
ord403
ord152
ord169
ord167
ord156
ord335
ord339
ord386
ord401
PropertySheetW
ord410
ord413
ord412
ord16
ord329
ord328
ImageList_Draw
CreateToolbarEx
ord341
ord400
CreatePropertySheetPageW

shell32

SHAddToRecentDocs
ord17
ord25
SHBindToParent
ord155
ord18
SHGetPathFromIDListW
ord102
ord644
ord645
ord21
ord2
ord16
ord71
ord89
ord4
ord195
SHGetDesktopFolder
SHGetMalloc
ord100
SheChangeDirExW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetFileInfoW
ord28
SHCreateShellItem
ord152
ord148
ord68
ord77
ord19
ord153
ord24
SHGetFolderLocation
ord190
ord173
ord42
ord654
ord714
ord96
ord755
ord95

Exports

Exports

ChooseColorA
ChooseColorW
ChooseFontA
ChooseFontW
CommDlgExtendedError
FindTextA
FindTextW
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
LoadAlterBitmap
PageSetupDlgA
PageSetupDlgW
PrintDlgA
PrintDlgExA
PrintDlgExW
PrintDlgW
ReplaceTextA
ReplaceTextW
Ssync_ANSI_UNICODE_Struct_For_WOW
WantArrows
dwLBSubclass
dwOKSubclass

Sections

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a6697f4331da78b43174ed4db85b3f10

Headers

File Characteristics

Imports

msvcrt

ntdll

shlwapi

kernel32

user32

gdi32

advapi32

comctl32

shell32

Exports

Exports

Sections

.text Size: 188KB - Virtual size: 188KB

.data Size: 71KB - Virtual size: 81KB

.rsrc Size: 64KB - Virtual size: 64KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 188KB - Virtual size: 188KB

.data
Size: 71KB - Virtual size: 81KB

.rsrc
Size: 64KB - Virtual size: 64KB

.reloc
Size: 9KB - Virtual size: 9KB