905ca0466d00745f152236c7fa69512d7c4b4006ddf08d98f20a6145c344d6f0

Sharing

Copy URL Twitter E-mail

General

Target

905ca0466d00745f152236c7fa69512d7c4b4006ddf08d98f20a6145c344d6f0
Size

848KB
MD5

219f2d4960ca27871ae61b08402f3c50
SHA1

c10096127ee2789d5f3b8a22fbb631acc89b75c0
SHA256

905ca0466d00745f152236c7fa69512d7c4b4006ddf08d98f20a6145c344d6f0
SHA512

d9c83551ac5a287c1f3036c460f4c2bebc83fb31e4434616fe43c12774a74adb3fecdb0d811d712c5af64bab9d21e4d7c64e2cc91e0984b3d79d3fe346d76f92
SSDEEP

12288:JNpslhSdiV7y2fTWGHL3mEgONGGGjJUisrJ0v2Behe1LAqvbsRNqfdAAVebwoM/4:JNudVXHmE/G1Uisy2rWAINq+AV6I/+a

Score

N/A

Malware Config

Signatures

Files

905ca0466d00745f152236c7fa69512d7c4b4006ddf08d98f20a6145c344d6f0
.dll windows x86

3febbb282ca4d470262cbadee298d132

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetEnvironmentVariableA
LockResource
GetVersionExA
GetACP
WriteConsoleA
FreeEnvironmentStringsA
FileTimeToSystemTime
GlobalFree
GetCurrentThread
VirtualFree
GetConsoleMode
HeapDestroy
InterlockedDecrement
GetSystemInfo
DuplicateHandle
LeaveCriticalSection
FreeResource
WriteFile
UnhandledExceptionFilter
SizeofResource
GetLastError
GetStartupInfoA
GetThreadLocale
GlobalReAlloc
FileTimeToLocalFileTime
InterlockedExchange
GetWindowsDirectoryA
GetVersion
CloseHandle
GetFileTime
LCMapStringA
LocalReAlloc
UnlockFile
GetLocaleInfoA
QueryPerformanceCounter
SetLastError
FlushFileBuffers
EnterCriticalSection
InterlockedIncrement
TlsFree
RaiseException
TerminateProcess
SetFileTime
GlobalUnlock
GetCommandLineA
FindClose
LoadResource
GlobalLock
VirtualQuery
MulDiv
lstrlenA
CreateFileA
SetFilePointer
GlobalDeleteAtom
GlobalHandle
GetProcessHeap
ExitProcess
GetModuleFileNameA
SetStdHandle
GetSystemDirectoryA
EnumResourceLanguagesW
Sleep
TlsAlloc
GlobalFlags
GetConsoleOutputCP
GlobalAlloc
SetEndOfFile
SystemTimeToFileTime
HeapReAlloc
HeapFree
GetFileType
lstrcmpA
RtlUnwind
SetHandleCount
GetTimeZoneInformation
GetStdHandle
ReadFile
SetErrorMode
HeapAlloc
GetSystemTimeAsFileTime
FreeLibrary
HeapCreate
GetStringTypeA
ConvertDefaultLocale
GetConsoleCP
LockFile
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentThreadId
IsDebuggerPresent
GetCurrentProcessId
DeleteCriticalSection
TlsGetValue
GetEnvironmentStrings
LocalFileTimeToFileTime
HeapSize
CompareStringA
GetCommandLineW
TlsSetValue
lstrcpyA
LocalFree
GetModuleHandleA
GetOEMCP
FindAtomA
AddAtomA
LocalAlloc
LoadLibraryA
GetProcAddress
lstrcatA
GetFileSize
GetTickCount

user32

UnhookWindowsHookEx
CreatePopupMenu
SetCapture
EqualRect
GetWindowRgn
InvalidateRgn
GetActiveWindow
SetWindowPos
BeginPaint
TrackPopupMenu
SendDlgItemMessageA
GetMessageTime
DestroyWindow
SetWindowRgn
ReleaseCapture
KillTimer
ScreenToClient
OffsetRect
GetWindowPlacement
SetScrollPos
SetTimer
UnregisterClassA
ShowOwnedPopups
GetTopWindow
GetCapture
SetScrollInfo
GetWindowThreadProcessId
GetMessagePos
IsWindowEnabled
DestroyMenu
GetMenuItemID
ScrollWindow
GetNextDlgGroupItem
InflateRect
GetMenuCheckMarkDimensions
ShowWindow
ReleaseDC
GetMenuItemCount
SetForegroundWindow
SetRectEmpty
EndDialog
GetScrollPos
SetRect
LockWindowUpdate
MapDialogRect
GetDesktopWindow
GetKeyState
EnableMenuItem
GetDlgCtrlID
GetClientRect
WindowFromPoint
GetLastActivePopup
PostQuitMessage
CallNextHookEx
SetFocus
PtInRect
SetCursor
GetWindowRect
GetNextDlgTabItem
GetDC
GetWindow
SetActiveWindow
ValidateRect
SystemParametersInfoA
ClientToScreen
DeleteMenu
SetMenu
GetMenuState
IsWindowVisible
TranslateMessage
GetFocus
CopyRect
IntersectRect
UnpackDDElParam
GetMenu
CheckMenuItem
GetCursorPos
GetWindowDC
BeginDeferWindowPos
GetSubMenu
GetForegroundWindow
UpdateWindow
FillRect
IsWindow
AdjustWindowRectEx
GetScrollRange
MapWindowPoints
IsZoomed
IsRectEmpty
GetDlgItem
GetSysColorBrush
SetWindowContextHelpId
DrawIcon
MessageBeep
MoveWindow
GetScrollInfo
EndPaint
RedrawWindow
GetSystemMenu
BringWindowToTop
GetSysColor
GetDCEx
GetParent
IsIconic
SetParent
InvalidateRect
DeferWindowPos
ShowScrollBar
EndDeferWindowPos
DestroyIcon
ReuseDDElParam
IsChild
SetScrollRange
GetSystemMetrics
SetMenuItemBitmaps

gdi32

GetDeviceCaps
SelectClipRgn
CombineRgn
BitBlt
GetPixel
PatBlt
SetViewportExtEx
CreateCompatibleBitmap
ScaleViewportExtEx
IntersectClipRect
GetClipBox
PtVisible
RestoreDC
SetTextColor
CreateSolidBrush
SetBkMode
SetWindowExtEx
CreateRectRgnIndirect
CreatePatternBrush
DPtoLP
ExtSelectClipRgn
GetTextColor
CreateEllipticRgn
DeleteDC
RectVisible
CreateBitmap
SetRectRgn
GetStockObject
Ellipse
ScaleWindowExtEx
Escape
CreateCompatibleDC
SelectObject
GetRgnBox
OffsetRgn
GetMapMode
DeleteObject
OffsetViewportOrgEx
GetBkColor
SetBkColor
StretchDIBits
SaveDC
CreateRectRgn
ExcludeClipRect
SetViewportOrgEx
SetMapMode
GetWindowExtEx

advapi32

RegCloseKey
SetFileSecurityW

shell32

DragFinish

ole32

OleInitialize
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleFlushClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
CLSIDFromString
CoCreateInstance
CoGetClassObject
CoRegisterMessageFilter
OleUninitialize
CreateStreamOnHGlobal
CLSIDFromProgID

oleaut32

VariantInit
SysAllocString
OleCreateFontIndirect
VariantTimeToSystemTime
SafeArrayDestroy
SysFreeString
SystemTimeToVariantTime
SysAllocStringLen
VariantCopy
SysStringLen
VariantClear
OleLoadPicture
VariantChangeType

comctl32

ImageList_LoadImageW

shlwapi

PathRemoveExtensionW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
PathIsUNCW

wldap32

ord201

userenv

UnloadUserProfile

Sections

.text
Size: 473KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3febbb282ca4d470262cbadee298d132

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

userenv

Sections

.text Size: 473KB - Virtual size: 473KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 343KB - Virtual size: 366KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 473KB - Virtual size: 473KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 343KB - Virtual size: 366KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 3KB - Virtual size: 3KB