64ab5be4decde2f4fab6b9fcad83f01ab9f11030737b63dc9cd08729d249cee7

Sharing

Copy URL Twitter E-mail

General

Target

64ab5be4decde2f4fab6b9fcad83f01ab9f11030737b63dc9cd08729d249cee7
Size

132KB
MD5

e7b8e07ea8c2a212ded9eb037786044e
SHA1

c65a2326f607e9b403c9fb276848c03526e2935d
SHA256

64ab5be4decde2f4fab6b9fcad83f01ab9f11030737b63dc9cd08729d249cee7
SHA512

6c959afcf16f92e0fdeb77ab51595c7df0be667e8ca83974ebed604e49e7ed0325b50af5fc708fbf57c09dee3b76f6fbab668c9669d6db8f69b5a19da6fc73b5
SSDEEP

3072:+ybmNxmM14xaD2Bxd2BQ74uEGQpm0m8j3EgorOTgiY+y28m9g3:as3B/2BLuEJbm8ICTu2e

Score

N/A

Malware Config

Signatures

Files

64ab5be4decde2f4fab6b9fcad83f01ab9f11030737b63dc9cd08729d249cee7
.dll windows x86

3ae67ca0971d32d6d47c7280b97b26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisconnectNamedPipe
AddConsoleAliasA
GetProfileIntW
GetTempFileNameW
CloseHandle
IsDBCSLeadByteEx
GetTapeStatus
GetLogicalDriveStringsA
ReadConsoleOutputAttribute
LoadLibraryA
GetModuleHandleA
GetProcAddress
Heap32Next
GetSystemTime
HeapDestroy
EnumCalendarInfoExA
GetVersion
GetHandleInformation
IsValidLocale
VirtualAlloc

user32

ToAscii
SetDebugErrorLevel
CloseDesktop
CreateCaret
GetMessageW
GetCursorPos
DdeQueryNextServer
GetWindowModuleFileNameA
DrawTextExW
GetDialogBaseUnits
ToUnicodeEx
SetScrollInfo
DdeQueryStringA
SetCaretPos
BlockInput
SetMenuItemBitmaps
ActivateKeyboardLayout
PtInRect
InvalidateRgn
SetMenuContextHelpId
SetDlgItemTextW
SetDeskWallpaper
GetTabbedTextExtentW
GetAncestor
CharLowerBuffA
SendMessageA
DrawFrameControl
ReuseDDElParam
EnumWindows
SetClassLongA
IntersectRect
GetSystemMenu
CloseWindow
ImpersonateDdeClientWindow
FindWindowExA
GetAltTabInfoW
SetWindowWord
UnhookWindowsHookEx
TileChildWindows
GetClassInfoA
SendMessageW
EnumDisplaySettingsExA
LoadMenuIndirectW
GetScrollInfo
CopyAcceleratorTableW
InvalidateRect
DdeDisconnect
GetParent
CharPrevExA
DdeCmpStringHandles
ScreenToClient
GetMenuInfo
CloseClipboard
DlgDirSelectExW
GetOpenClipboardWindow
DrawTextExA
InSendMessage
CharLowerW
GetWindowContextHelpId
MessageBoxA

gdi32

SetBoundsRect
CreateEllipticRgn
GetClipRgn
SetBitmapBits
PolyPolygon
SetTextAlign
CreateRoundRectRgn
GdiPlayDCScript
SetMapperFlags
EnumObjects
CloseFigure
GetPaletteEntries
GetLogColorSpaceW
ExtEscape
GdiGetDevmodeForPage
GetDeviceGammaRamp
SetWindowExtEx
SelectPalette
GetGlyphOutlineA
SetICMProfileA
GdiPlayEMF
CreateMetaFileW
AngleArc
GetTextAlign
UnrealizeObject
GdiArtificialDecrementDriver
GetKerningPairsA
SelectClipPath
SetTextJustification
EnumEnhMetaFile
CloseEnhMetaFile
GetOutlineTextMetricsA
SetPixelFormat
GetDIBColorTable
SetROP2
GetGraphicsMode
CreateSolidBrush
GetICMProfileW
AddFontResourceExA
SwapBuffers
PolyDraw
SetPixelV
CreateDIBSection
GetClipBox
CopyMetaFileW
GetMetaFileA
PolyBezierTo
CreateFontIndirectExA
CreatePolygonRgn
RemoveFontResourceExA
ResetDCW
DrawEscape
StrokeAndFillPath
GdiEndPageEMF
GetKerningPairsW
SetTextCharacterExtra
GetEnhMetaFileHeader
CreateBitmapIndirect

advapi32

RegDeleteKeyW
CreateProcessAsUserW
CreatePrivateObjectSecurityEx
RegSetValueExW
BuildImpersonateTrusteeA
ConvertStringSidToSidA
AccessCheckByTypeResultListAndAuditAlarmA
AddAccessDeniedAce
FreeEncryptionCertificateHashList
RegSetValueExA
AddAccessDeniedObjectAce
QueryServiceConfig2A
LsaNtStatusToWinError
LookupPrivilegeNameA
CryptVerifySignatureW
CreateRestrictedToken
LsaEnumeratePrivilegesOfAccount
RegEnumKeyA
GetTrusteeFormA
CryptDecrypt
AddAuditAccessObjectAce
ElfClearEventLogFileW
CreatePrivateObjectSecurity
DecryptFileW
ChangeServiceConfig2W
MakeAbsoluteSD
LsaSetQuotasForAccount
LsaCreateAccount
NotifyBootConfigStatus
CryptSetHashParam
SystemFunction004
OpenEventLogW
QueryServiceStatus
AbortSystemShutdownW
CryptGetKeyParam
SetNamedSecurityInfoW
CryptGetHashParam
GetSecurityDescriptorControl
ElfReadEventLogW
AbortSystemShutdownA
RegOpenKeyExW
LsaGetRemoteUserName
RegQueryInfoKeyA
ConvertSecurityDescriptorToStringSecurityDescriptorA
AccessCheckByTypeResultList
GetServiceKeyNameW
LsaCreateTrustedDomain
GetSecurityDescriptorLength
QueryServiceConfig2W
SetSecurityInfo
AddAccessDeniedAceEx
IsValidSecurityDescriptor
DeregisterEventSource
CryptHashSessionKey
LsaQueryInfoTrustedDomain
RegCreateKeyExA
CryptDuplicateKey

comctl32

ord3
ImageList_LoadImageA
FlatSB_SetScrollInfo
ImageList_SetBkColor
ImageList_SetDragCursorImage
PropertySheetW
FlatSB_GetScrollPos
ord15
ImageList_AddIcon
ord7
FlatSB_ShowScrollBar
ord4
ImageList_GetImageCount
ImageList_Duplicate
ord17
ImageList_DragShowNolock
ImageList_DrawIndirect
FlatSB_SetScrollProp
ImageList_Destroy
ord8
DestroyPropertySheetPage
ImageList_Create
ord6

opengl32

glGetDoublev
glLightf
glGetError
wglShareLists
glCallList
glGetMaterialiv
glDeleteLists
GlmfEndPlayback
glColorPointer
glIndexi
glTexCoord1i
glScissor
glMaterialf
glIndexdv
glColor3ub
glTexCoord2s
glGetLightiv
glStencilFunc
glEvalCoord2dv
glFrustum
glRasterPos4dv
glTexCoord3dv
glMap1d
glDisableClientState
GlmfPlayGlsRecord
glPixelMapusv
glLineStipple
glNormal3dv
glRasterPos4i
glPixelZoom
glGetPointerv
glEdgeFlagv
glEdgeFlagPointer
glPixelStoref
glTexCoord1fv
glTexCoord2sv
glRectiv
glPopName
glIsEnabled
glMatrixMode
glMultMatrixd
glIndexsv
glIndexf
glVertex3sv
glTexCoord3s
glNormal3b
glRasterPos2f
glEvalCoord2f
glGetFloatv
wglCreateLayerContext
glRasterPos4f
glColor3d
glGetTexGenfv
glGetLightfv
glTexEnvfv
glTexGenf
glTexCoord2fv

shell32

SHInvokePrinterCommandA
StrRStrIW
DragQueryFileAorW
ExtractAssociatedIconExA
StrRChrIA
InternalExtractIconListA
ExtractIconExA
CheckEscapesW
SHFileOperationW
StrCmpNA
StrRChrIW
StrCmpNIW
SheChangeDirExW
ord179
SHEmptyRecycleBinA
DragAcceptFiles
SHBrowseForFolderW
StrStrIA
StrRChrW
RealShellExecuteExW
SHLoadInProc
ShellExecuteA
ExtractAssociatedIconW
StrRChrA
SHGetSpecialFolderLocation
StrStrW
StrCmpNIA
ShellAboutA
FreeIconList

shlwapi

PathRemoveBlanksW
PathGetArgsW
PathIsUNCServerShareW
PathRenameExtensionA
PathGetCharTypeW
UrlIsNoHistoryW
UrlUnescapeA
UrlCreateFromPathA
SHRegWriteUSValueA
SHGetValueW
PathQuoteSpacesA
PathUnquoteSpacesA
HashData
StrToIntW
SHRegCreateUSKeyA
StrSpnW
SHRegSetUSValueA
PathIsUNCServerA
UrlCompareA
SHRegDeleteEmptyUSKeyA
PathMakeSystemFolderW
PathStripPathW
SHSetValueW
PathUnquoteSpacesW
GetMenuPosFromID
SHOpenRegStreamW
PathRemoveFileSpecA
SHRegCloseUSKey
UrlCanonicalizeW
StrCSpnIA
SHRegEnumUSKeyW

winmm

waveOutGetVolume
midiOutReset

winspool.drv

DeleteMonitorW
WaitForPrinterChange
AddPrintProvidorA
DeletePrinterIC
DeletePortA
EnumFormsA
ord212
StartDocPrinterW
EnumMonitorsA
DeletePrinterKeyA
DeletePrinterDriverExA
ord206
SetPrinterA
DevQueryPrint
AddPortW

msvcrt

_mbscspn
wcsstr
fwprintf
_except_handler2
feof
fsetpos
fread
printf
ftell
_wcslwr
_ismbcsymbol
_scalb
_unlink
difftime
fputwc
_loaddll
ferror
_strncoll
fprintf
fopen
fputs
_wexecvpe
_flushall
_wtempnam
memset
fseek
_chmod
_ftol
fwrite
_winver
fclose
fputc
wcsftime
_wstati64
_mbctohira
_wsopen
iswdigit
wctomb
_stat
wcsrchr
sprintf

Exports

Exports

Duli
Esczs
Pdatcrgz
Qiprytre
Rdfg
Upvtvwughl
Vhhcu
Vpujzv
Wdljbsp

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3ae67ca0971d32d6d47c7280b97b26eb

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

opengl32

shell32

shlwapi

winmm

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 52KB - Virtual size: 50KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 52KB - Virtual size: 50KB

.reloc
Size: 12KB - Virtual size: 8KB