6df2514d176b24bae3c9d1b887045e66a579d5cf3baa9dfc09cc1e795df07b73

Sharing

Copy URL

Twitter E-mail

General

Target

6df2514d176b24bae3c9d1b887045e66a579d5cf3baa9dfc09cc1e795df07b73
Size

185KB
MD5

05e78191bb6842e5f4c031fa1f6b6530
SHA1

2854ac7385492e4dacef1bc68997252704c3c241
SHA256

6df2514d176b24bae3c9d1b887045e66a579d5cf3baa9dfc09cc1e795df07b73
SHA512

627a0c927c9cba059b22fe000a22edea9a0fa2393e3aa22b6e4bbf14f2a37f7e631a77da44c24194fde3fbf8962b37c86ec2d7b4717e5b2cf7f9fd05d5d47ffe
SSDEEP

3072:8u5X/dqq3zJdcXm9dnoiy4nKM7JZkMKoDY/PRaWeWWy4T/9rJYm:DBJdcX8dnhHkMKz3MWKy4T/92

Score

N/A

Malware Config

Signatures

Files

6df2514d176b24bae3c9d1b887045e66a579d5cf3baa9dfc09cc1e795df07b73
.dll windows x86

6600154a7243f843a4debcee5ec62446

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comdlg32

CommDlgExtendedError

shell32

SHGetSpecialFolderPathA
SHGetSpecialFolderLocation
ShellExecuteW

gdi32

GetPolyFillMode
GetNearestPaletteIndex
GetBitmapBits
ColorCorrectPalette
CloseEnhMetaFile

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
RevertToSelf
RegSetValueExA
RegQueryValueExA
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
AddAccessAllowedAce
AdjustTokenPrivileges
AllocateAndInitializeSid
CloseServiceHandle
ControlService
DeleteService
FreeSid
GetLengthSid
GetUserNameA
ImpersonateSelf
InitializeAcl
IsValidSecurityDescriptor
LookupPrivilegeValueA
OpenProcessToken
OpenSCManagerA
OpenServiceA
OpenThreadToken
QueryServiceStatus
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA

user32

CreateCursor
CopyRect
DialogBoxParamA
EnableWindow
EndDialog
GetDlgItem
GetParent
GetSystemMetrics
GetWindowInfo
GetWindowRect
IsDlgButtonChecked
LoadStringA
MessageBoxA
SendMessageA
SetCapture
SetDlgItemTextA
SetWindowPos

kernel32

VirtualAlloc
VirtualFree
WaitForSingleObject
WinExec
CreateProcessA
UnmapViewOfFile
TerminateProcess
Sleep
SetLastError
SetFilePointer
SetFileAttributesA
SetEnvironmentVariableA
SetEndOfFile
SetCurrentDirectoryA
RemoveDirectoryA
Process32Next
Process32First
OpenProcess
OpenFile
MultiByteToWideChar
MoveFileExA
MapViewOfFile
LocalAlloc
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateFileMappingA
GetWindowsDirectoryA
CreateToolhelp32Snapshot
DeleteFileA
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
FreeLibrary
GetComputerNameA
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
GetFileSize
GetFullPathNameA
GetLastError
GetModuleHandleA
GetPrivateProfileStringA
GetProcAddress
GetShortPathNameA
GetStartupInfoA
GetSystemDirectoryA
GetUserDefaultLangID
GetVersionExA

setupapi

SetupDiCreateDeviceInfoA
SetupDiBuildDriverInfoList
SetupDiSetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDriverInfoA
SetupDiDestroyDriverInfoList
SetupDiCreateDeviceInfoList
SetupDiCallClassInstaller
SetupDiClassGuidsFromNameA
CM_Is_Dock_Station_Present_Ex

ole32

CoInitialize
CoUninitialize

shlwapi

PathIsDirectoryA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

Exports

Exports

HrLPSZToBSTR
HrVerifyCertEnhKeyUsage
HriCopyStreamCB
IsDigit
PszDupLenA
SetQoSql
UpdateRebarBandColors

Sections

.text
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6600154a7243f843a4debcee5ec62446

Headers

DLL Characteristics

File Characteristics

Imports

comdlg32

shell32

gdi32

advapi32

user32

kernel32

setupapi

ole32

shlwapi

version

Exports

Exports

Sections

.text Size: 49KB - Virtual size: 48KB

.rdata Size: 112KB - Virtual size: 111KB

.data Size: 14KB - Virtual size: 15KB

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 49KB - Virtual size: 48KB

.rdata
Size: 112KB - Virtual size: 111KB

.data
Size: 14KB - Virtual size: 15KB

.rsrc
Size: 9KB - Virtual size: 8KB