1bbc3bdfbebd329cb39d2e8f6874620a0fb00d8bc4abf91591ce9e92941cd6e4

Sharing

Copy URL Twitter E-mail

General

Target

1bbc3bdfbebd329cb39d2e8f6874620a0fb00d8bc4abf91591ce9e92941cd6e4
Size

156KB
MD5

55ac675dd6221c84e5da106c53b3a2a2
SHA1

ec03f871f1e35ddee8c2720fb8214e9e6f7bc6d3
SHA256

1bbc3bdfbebd329cb39d2e8f6874620a0fb00d8bc4abf91591ce9e92941cd6e4
SHA512

78902987876ba484d3c0ffefafdac8bbc42d8d7ccdebd2c6c227603b11f56fcf8ec35cde411212854b21e7bdbdeb88633c64261b47868a1cc5a188839f7a5522
SSDEEP

3072:80cJO8p79orXTrQ8zUOid5VX/W3Jj/kWmZYSvVSGUkpsrz7GGcCdQOGaz8R:8dO8pJSXTrlze/X/W3JjcWmqSvPUkyzX

Score

N/A

Malware Config

Signatures

Files

1bbc3bdfbebd329cb39d2e8f6874620a0fb00d8bc4abf91591ce9e92941cd6e4
.dll windows x86

e2833879362df90d1ea69e47e2f1bafe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsA

shell32

SHCreateDirectoryExW

ole32

CoBuildVersion
SNB_UserMarshal
CoGetCancelObject
HMENU_UserFree

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
LsaQuerySecret

user32

SetThreadDesktop
SetKeyboardState
GetWindowPlacement
GetIconInfo
GetCursorInfo
GetClipboardSequenceNumber
SetTimer
EnumThreadWindows
EndPaint
DdeSetUserHandle
ChildWindowFromPointEx
CallNextHookEx
BeginPaint
GetAsyncKeyState
ShowCursor

kernel32

GetModuleHandleA
GetFileAttributesA
lstrlenA
lstrcpyA
VirtualProtect
VirtualFree
VirtualAlloc
SetCurrentDirectoryA
LocalFree
LoadLibraryA
GetVersionExA
GetSystemDirectoryA
GetCurrentProcess
CreateDirectoryA
ExitProcess
FindClose
FindFirstFileA
FreeLibrary
GetCurrentDirectoryA
GetProcAddress

gdi32

DeleteObject
GetBitmapBits
GetObjectA
SelectObject
SetStretchBltMode
StretchBlt
CreateDCA
CreateCompatibleDC
DeleteDC
CreateDIBitmap
CreateCompatibleBitmap

Exports

Exports

AClose
ADeviceStopPlay
AHeartbeat
CopyRegistry
GotoPosition
HrIStreamToBSTR
PVGetCertificateParam
ResetCounter
WriteStreamToFileW

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2833879362df90d1ea69e47e2f1bafe

Headers

DLL Characteristics

File Characteristics

Imports

setupapi

shell32

ole32

advapi32

user32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 85KB - Virtual size: 85KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 85KB - Virtual size: 85KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 1KB - Virtual size: 1KB