74ad787595e02691ea1d578cf2a18c496cbb0934a30ca00ab29aafdf56ec7e1a

Sharing

Copy URL Twitter E-mail

General

Target

74ad787595e02691ea1d578cf2a18c496cbb0934a30ca00ab29aafdf56ec7e1a
Size

706KB
MD5

dbefb3d8050835e6456c810fa91cb867
SHA1

84d3171e5f966f7d59db7d4b30e3b85e0e65e5d0
SHA256

74ad787595e02691ea1d578cf2a18c496cbb0934a30ca00ab29aafdf56ec7e1a
SHA512

7b0d76421982a5c90219898459524a2461dd72d2ba39be289050647ec0bce296c44813f7e8eed369fe356f954b432ed8f07a7ef282ea28502cd108cc1808b927
SSDEEP

12288:ZG9KhysJcIYNHub1kFaiIhRTUbCW4zfOm/iS1ErZLYMIJZSKcTMld/BkZp/qNZPO:l1aIYlubuFaiIhTz5qSGFLYMIJZx/Bkf

Score

N/A

Malware Config

Signatures

Files

74ad787595e02691ea1d578cf2a18c496cbb0934a30ca00ab29aafdf56ec7e1a
.dll windows x86

a2258ef64b15de056eb6de2edca36eee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

WaitForMultipleObjects
PulseEvent
ReleaseMutex
CreateMutexA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcess
OpenProcess
TerminateProcess
CreateProcessW
HeapAlloc
GetProcessHeap
HeapFree
GetExitCodeProcess
WriteFile
CreateFileA
SleepEx
MapViewOfFile
OpenMutexA
OpenFileMappingA
CreateMailslotA
GetMailslotInfo
GlobalFree
ReadFile
GlobalAlloc
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FindFirstFileA
FindNextFileA
CopyFileExA
SetFileAttributesA
IsBadStringPtrA
RemoveDirectoryA
GetFileAttributesA
GetSystemDirectoryA
FindFirstFileW
FindNextFileW
FindClose
ExpandEnvironmentStringsA
SetEvent
WaitForSingleObject
TerminateThread
ResetEvent
GetCurrentThread
ResumeThread
SuspendThread
DeleteFileA
CreateDirectoryA
GetWindowsDirectoryA
Sleep
GetTickCount
GetModuleFileNameA
GetCurrentProcessId
OutputDebugStringA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFileEx
GetVersionExA
GetModuleHandleA
GetACP
SetLastError
CreateEventA
CloseHandle
FreeLibrary
CreateProcessA
LoadLibraryA
GetProcAddress
lstrlenW
WideCharToMultiByte
GetCurrentThreadId
lstrlenA
IsBadCodePtr
MultiByteToWideChar
GetLastError
GetLongPathNameW
InterlockedCompareExchange
GetStringTypeExW
SetEnvironmentVariableA
CompareStringW
SetEndOfFile
CreateFileW
SetFilePointer
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetDriveTypeW
GetCurrentDirectoryW
SetStdHandle
WriteConsoleW
LoadLibraryW
InterlockedExchange
RaiseException
InitializeCriticalSectionAndSpinCount
HeapDestroy
HeapReAlloc
HeapSize
RtlUnwind
DecodePointer
GetCommandLineA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
InterlockedDecrement
InterlockedIncrement
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetFullPathNameW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCPInfo
GetOEMCP
IsValidCodePage
LCMapStringW
HeapCreate
ExitProcess
GetStdHandle
GetModuleFileNameW
IsProcessorFeaturePresent
SetHandleCount
GetFileType
GetStartupInfoW
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetUserDefaultLCID
GetLocaleInfoW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
FlushFileBuffers

user32

TranslateAcceleratorA
LoadStringW
GetWindowTextA
IsWindow
GetClassNameA
LoadIconA
SendMessageA
GetWindowLongA
WaitForInputIdle
keybd_event
PostMessageA
SetForegroundWindow
EnumWindows
MsgWaitForMultipleObjects
PeekMessageA
TranslateMessage
DispatchMessageA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
GetFocus
GetWindow

advapi32

GetUserNameA
CryptCreateHash
CryptReleaseContext
CryptHashData
CryptDeriveKey
CryptDestroyHash
CryptDestroyKey
CryptDecrypt
CryptEncrypt
CryptAcquireContextA
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExA
RegQueryValueExW
SetSecurityDescriptorDacl
GetSecurityDescriptorLength
MakeSelfRelativeSD
InitializeSecurityDescriptor
GetSecurityDescriptorOwner
GetSecurityDescriptorGroup
GetSecurityDescriptorDacl
GetSecurityDescriptorSacl
MakeAbsoluteSD
GetSecurityDescriptorControl
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA

shell32

SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc

ole32

CoInitializeEx
CoInitialize
CoCreateInstance
CoUninitialize

oleaut32

SysAllocStringLen
SysStringLen
SysFreeString

shlwapi

PathAppendW
PathFileExistsA
PathStripPathW
PathAppendA
PathRemoveArgsW
PathRemoveFileSpecW
PathUnquoteSpacesW
PathFindOnPathA
PathCanonicalizeA
PathCanonicalizeW
PathFileExistsW
PathGetDriveNumberA
PathIsDirectoryA
PathIsFileSpecA
PathIsFileSpecW
PathIsRelativeA
PathIsRelativeW
PathIsRootA
PathIsRootW
PathIsUNCA
PathIsUNCW
PathQuoteSpacesA
PathRemoveBackslashA
PathSkipRootA
PathSkipRootW
PathStripPathA
PathUnquoteSpacesA
PathGetCharTypeW
PathAddBackslashW

Exports

Exports

AddAlert
CanUnload
ChangeCount
Initialize
RemoveAlert
SetAppID
Shutdown

Sections

.text
Size: 435KB - Virtual size: 434KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2258ef64b15de056eb6de2edca36eee

Headers

DLL Characteristics

File Characteristics

Imports

version

kernel32

user32

advapi32

shell32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 435KB - Virtual size: 434KB

.rdata Size: 130KB - Virtual size: 130KB

.data Size: 78KB - Virtual size: 85KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 60KB - Virtual size: 59KB

.text
Size: 435KB - Virtual size: 434KB

.rdata
Size: 130KB - Virtual size: 130KB

.data
Size: 78KB - Virtual size: 85KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 60KB - Virtual size: 59KB