1293051600e212c03d747fa576bb9a86f627e8f195df18695e0717152cc08162

Sharing

Copy URL Twitter E-mail

General

Target

1293051600e212c03d747fa576bb9a86f627e8f195df18695e0717152cc08162
Size

148KB
MD5

1fe616c522b8b310405012861df85050
SHA1

05dec314a7ae09442aab322f673493227976d7d7
SHA256

1293051600e212c03d747fa576bb9a86f627e8f195df18695e0717152cc08162
SHA512

2d084d27c071d7425db79fd480be779db3aeb20ef4618f179f34577bdf51d0a332c2fb6c0cec9bac62228bff73db273a795638910101c88a030b88571fef31ed
SSDEEP

3072:Ojli3tIwkVCWq+TyEcvzGuzqZQNylm1MeSYqzGH:OJidIFCQyP/8Qkg1MeS7k

Score

N/A

Malware Config

Signatures

Files

1293051600e212c03d747fa576bb9a86f627e8f195df18695e0717152cc08162
.dll windows x86

c942c5e5dffeb969430d176a0dd33ddf

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExpandEnvironmentStringsW
GetVersionExW
FindFirstFileW
lstrcpynW
GetFileAttributesW
GetCommandLineW
LocalAlloc
LocalFree
VerSetConditionMask
VerifyVersionInfoW
GetModuleHandleW
MultiByteToWideChar
GetStdHandle
GetFileType
WriteConsoleW
SetLastError
GetConsoleOutputCP
HeapReAlloc
VirtualFree
GetStringTypeW
VirtualQuery
GetSystemInfo
VirtualProtect
SetErrorMode
LCMapStringW
GetLastError
WideCharToMultiByte
LCMapStringA
QueryPerformanceCounter
GetModuleHandleA
GlobalAddAtomA
SetThreadContext
GetThreadContext
WaitForDebugEvent
ContinueDebugEvent
WaitForSingleObject
OpenFile
GetProcessHeap
HeapAlloc
DisableThreadLibraryCalls
OpenProcess
CloseHandle
ReadProcessMemory
lstrcmpiW
FreeLibrary
LeaveCriticalSection
MapViewOfFile
OpenMutexW
OpenEventW
EnterCriticalSection
UnmapViewOfFile
SetEvent
InterlockedIncrement
IsBadReadPtr
ReleaseMutex
InterlockedDecrement
MulDiv
WaitForMultipleObjects
InitializeCriticalSection
CreateFileW
SetFilePointer
ReadFile
GlobalFree
GlobalUnlock
GetProfileStringW
lstrcpyW
GetCurrentDirectoryW
Sleep
ExitThread

user32

SetWindowLongW
GetParent
RegisterClassW
GetWindow
EnumChildWindows
EndDialog
IsDlgButtonChecked
InvalidateRect
SetFocus
GetDC
ExitWindowsEx
LoadStringW
GetWindowThreadProcessId
FindWindowExA
ShowWindow
FillRect
EndPaint
IsWindowVisible
DefWindowProcW
DialogBoxParamW
GetActiveWindow
DestroyWindow
WinHelpW
GetWindowLongW
CreateWindowExW
GetDlgCtrlID
ChildWindowFromPointEx
GetSystemMetrics
SetWindowTextW
GetWindowRect
GetWindowTextW
ReleaseDC
SetActiveWindow
SetCursor
LoadCursorW
EndDeferWindowPos
BeginDeferWindowPos
SetDlgItemTextW
GetClientRect
EnableWindow
ClientToScreen
SetClassLongW
CheckDlgButton
DeferWindowPos

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

SetSecurityDescriptorDacl
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
InitializeAcl
AddAuditAccessAceEx
AddAccessDeniedAceEx
GetSecurityDescriptorSacl
CopySid
GetSidLengthRequired
GetSidSubAuthorityCount
FreeSid
AllocateAndInitializeSid
ChangeServiceConfigW
CloseServiceHandle
CreateServiceW
OpenServiceW
OpenSCManagerW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegSetKeySecurity
RegCreateKeyExW
ChangeServiceConfig2W
SetSecurityDescriptorSacl

msvcrt

vswprintf
fwprintf
setlocale
exit
wcstok
wcslen
wcscpy
malloc
free

winmm

DefDriverProc

Exports

Exports

AnyAccesses
DirectlyWithoutServerTheTo
InstancesSoftware
OtherwiseOrDoOrAdminister
YouToInstancesIdentified

Sections

.text
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 874B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c942c5e5dffeb969430d176a0dd33ddf

Headers

File Characteristics

Imports

kernel32

user32

comdlg32

advapi32

msvcrt

winmm

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 24KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 20KB - Virtual size: 142KB

.rsrc Size: 12KB - Virtual size: 11KB

.reloc Size: 4KB - Virtual size: 874B

.text
Size: 28KB - Virtual size: 24KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 20KB - Virtual size: 142KB

.rsrc
Size: 12KB - Virtual size: 11KB

.reloc
Size: 4KB - Virtual size: 874B