4edcdf8dab37736ece5d02928c479bf7b3656ad0f79bedee4f136816e62895cc

Sharing

Copy URL Twitter E-mail

General

Target

4edcdf8dab37736ece5d02928c479bf7b3656ad0f79bedee4f136816e62895cc
Size

578KB
MD5

73697eaf38dee1627da329c363746a10
SHA1

5a0f2c5f753c272eabd99a7d48217d876851510c
SHA256

4edcdf8dab37736ece5d02928c479bf7b3656ad0f79bedee4f136816e62895cc
SHA512

d9269d10aac82b112921aedbb034560414622031d8f68da0f46baa386e23b704cbc33a04ca4db523b7cc7cddb7f453a49c96561150062c4a97b7e1bd412b50a3
SSDEEP

12288:uoMlqWBzZ8rxJxVRp9IkNAXWwg7QG6g+6ET/93:iUsEPz9IU7bj6

Score

N/A

Malware Config

Signatures

Files

4edcdf8dab37736ece5d02928c479bf7b3656ad0f79bedee4f136816e62895cc
.dll windows x86

3aa0495fdd79ded6399d42b949e3e074

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_amsg_exit
_initterm
free
malloc
_XcptFilter
_errno
_vsnprintf
wcsncmp
memcpy
memset
memmove

kernel32

FormatMessageA
GetSystemDefaultLangID
FindAtomA
GetLastError
ReadFile
WriteFile
CloseHandle
SetFilePointer
GetFileType
IsValidCodePage
GetThreadLocale
lstrcmpiA
HeapFree
HeapAlloc
HeapCreate
HeapReAlloc
MulDiv
GetVersionExA
lstrcmpiW
GlobalAlloc
GlobalFree
GlobalFlags
GlobalReAlloc
GlobalSize
GlobalLock
GlobalHandle
GlobalUnlock
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
GetModuleHandleA
GetModuleFileNameA
GetModuleFileNameW
GetACP
GetStringTypeExA
GetStringTypeExW
CreateFileA
CreateFileW
CompareStringW
GetProfileSectionA
GetProfileSectionW
LoadLibraryA
LoadLibraryW
FindAtomW
GetProfileIntA
GetUserDefaultLCID
LocalAlloc
InterlockedExchange
RaiseException
InterlockedCompareExchange
OutputDebugStringA
RtlUnwind
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetVersion
HeapDestroy
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LocalFree
CompareStringA
GetLocaleInfoW
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
GetSystemDefaultLCID
GetLocaleInfoA
MultiByteToWideChar
WideCharToMultiByte
Sleep
GetTickCount
GetCurrentThreadId
FreeLibrary
lstrlenA

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey

user32

PtInRect
InflateRect
GetKeyState
GetWindowRect
ScreenToClient
GetCursorPos
ReleaseDC
FrameRect
GetDCEx
GetDC
GetSystemMetrics
DrawFocusRect
UpdateWindow
SetWindowPos
ShowWindow
EndPaint
FillRect
BeginPaint
MoveWindow
GetSysColor
SetParent
CreateWindowExA
CreateWindowExW
EnableWindow
IsWindowUnicode
GetFocus
SetCapture
ReleaseCapture
GetCapture
ActivateKeyboardLayout
CopyRect
OffsetRect
GetMessagePos
GetMessageTime
GetAsyncKeyState
IntersectRect
TrackPopupMenu
GetParent
RegisterClipboardFormatA
MessageBeep
DestroyMenu
WindowFromDC
SetFocus
DestroyCaret
IsIconic
SetScrollRange
SetScrollPos
MapWindowPoints
CreateCaret
HideCaret
ShowCaret
SetCaretPos
SetTimer
KillTimer
SetForegroundWindow
SetScrollInfo
GetDlgItem
GetWindow
IsWindow
GetDesktopWindow
SystemParametersInfoW
WindowFromPoint
GetForegroundWindow
IsChild
IsWindowEnabled
GetCaretPos
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
OpenClipboard
GetClipboardOwner
GetClipboardData
ShowScrollBar
EnableScrollBar
DefWindowProcA
DefWindowProcW
GetWindowLongA
GetWindowLongW
GetClassLongA
GetClassLongW
LoadBitmapA
LoadBitmapW
LoadCursorA
LoadCursorW
SetWindowLongA
SetWindowLongW
PostMessageA
PostMessageW
PeekMessageA
PeekMessageW
InvertRect
GetKeyboardLayout
SystemParametersInfoA
SendMessageA
FindWindowA
RegisterWindowMessageA
SendMessageW
GetKeyboardLayoutList
CharLowerA
CharLowerBuffW
CharUpperA
CharUpperBuffW
UnregisterClassA
UnregisterClassW
RegisterClassA
RegisterClassW
GetDoubleClickTime
IsWindowVisible
GetClientRect
InvalidateRect
ScrollWindowEx
DrawFrameControl
SetCursor
GetCursor
DestroyWindow
NotifyWinEvent
MessageBoxA
ClientToScreen

gdi32

CreateFontIndirectA
GetTextFaceW
GetTextFaceA
GetKerningPairsA
GetCharWidthA
GetCharWidthW
SetTextAlign
EnumFontFamiliesExW
LPtoDP
CreatePalette
GetObjectType
Escape
ExtTextOutA
GetOutlineTextMetricsA
CreateMetaFileA
CloseMetaFile
CreatePatternBrush
EnumMetaFile
GetMetaFileBitsEx
CreateBitmap
SetMetaFileBitsEx
CreatePen
Polyline
CreateCompatibleBitmap
DPtoLP
BitBlt
GetBkMode
CreateFontIndirectW
DeleteMetaFile
GetPixel
SetWindowOrgEx
SetWindowExtEx
ExtTextOutW
GetDeviceCaps
CreateCompatibleDC
StretchBlt
DeleteDC
CreateDIBSection
SetROP2
GetStockObject
Rectangle
GetCurrentObject
GetTextCharsetInfo
TranslateCharsetInfo
SelectPalette
SaveDC
RestoreDC
SetBkMode
SelectObject
PatBlt
SetBkColor
SetTextColor
IntersectClipRect
CreateSolidBrush
DeleteObject
GetObjectA
GetObjectW
GetTextMetricsA
GetTextMetricsW
CreateICA
CreateICW
GetOutlineTextMetricsW
RealizePalette

Exports

Exports

CreateTextServices
DllGetVersion
IID_IRichEditOle
IID_IRichEditOleCallback
IID_ITextHost
IID_ITextHost2
IID_ITextServices
REExtendedRegisterClass
RichComboBoxWndProc
RichEdit10ANSIWndProc
RichEditANSIWndProc
RichEditWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx

Sections

.text
Size: 517KB - Virtual size: 516KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3aa0495fdd79ded6399d42b949e3e074

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

advapi32

user32

gdi32

Exports

Exports

Sections

.text Size: 517KB - Virtual size: 516KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 44KB - Virtual size: 44KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 517KB - Virtual size: 516KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 44KB - Virtual size: 44KB

.reloc
Size: 12KB - Virtual size: 11KB