15178b445bbf5781a6e9d71746665e1a8ec54d117019974bc1f55710f7a61032

Sharing

Copy URL

Twitter E-mail

General

Target

15178b445bbf5781a6e9d71746665e1a8ec54d117019974bc1f55710f7a61032
Size

263KB
MD5

76ab00722a816e3a1d225c00efe2c480
SHA1

5aa8f0d18a4807ae3157b50872ea7c6b7dca6e08
SHA256

15178b445bbf5781a6e9d71746665e1a8ec54d117019974bc1f55710f7a61032
SHA512

4172b04dc14c1cc26bf49407af52120bf8cf770c7f443b3d496e88c6a0c1570834c70ddf51136111f423330fd6eae490d56fba40b410bb09b3d24595e5d6c9e8
SSDEEP

6144:7nKFUt/N2xgqOV5jEr2+kI0+LTGpBytOuzzyYGYyG:7Ixo5IC+kP+LsytOuzAG

Score

N/A

Malware Config

Signatures

Files

15178b445bbf5781a6e9d71746665e1a8ec54d117019974bc1f55710f7a61032
.dll windows x86

4f7803049f7dfd9d2b28f62fe955231a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

StgCreatePropStg
CoTaskMemFree
CoInitializeEx
CoGetCallContext
CLSIDFromString

kernel32

CloseHandle
DebugBreak
DeleteCriticalSection
DeleteTimerQueueTimer
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FlushFileBuffers
FormatMessageA
FormatMessageW
GetACP
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
GetFileSize
GetLastError
GetLocalTime
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetProcAddress
GetProcessHeap
GetProcessPriorityBoost
GetStartupInfoA
GetStdHandle
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetVersion
GlobalAlloc
GlobalFree
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
WriteFile
HeapReAlloc
HeapUnlock
HeapWalk
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedExchangeAdd
InterlockedIncrement
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalReAlloc
MultiByteToWideChar
OutputDebugStringA
QueryPerformanceCounter
ReadFile
RtlUnwind
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
Sleep
TerminateProcess
UnhandledExceptionFilter
VerifyVersionInfoW
VirtualAlloc
VirtualProtect
WaitForSingleObject
WideCharToMultiByte
HeapLock

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey
DeregisterEventSource

oleaut32

VarCyFromI2
VarI4FromI1
VarUI2FromUI4
VariantInit
VarBstrFromCy
SysAllocString

Exports

Exports

ActViewfinderAutoFunctions
AddPicture2
CreateIsoItemOfSize
D3D10ResourceGetMappedArray
FreeHost
GetDevicePropertyCount
GetMCCustomItemDataCount
Memcpy2DAsync
SetDesiredUDFRevision
StreamDestroy
WriteDevParamToRAW

Sections

.text
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 61KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f7803049f7dfd9d2b28f62fe955231a

Headers

DLL Characteristics

File Characteristics

Imports

ole32

kernel32

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 37KB - Virtual size: 37KB

.rdata Size: 61KB - Virtual size: 61KB

.data Size: 1024B - Virtual size: 34KB

.rsrc Size: 161KB - Virtual size: 160KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 37KB - Virtual size: 37KB

.rdata
Size: 61KB - Virtual size: 61KB

.data
Size: 1024B - Virtual size: 34KB

.rsrc
Size: 161KB - Virtual size: 160KB

.reloc
Size: 1KB - Virtual size: 1KB