61db6982e74f98dac3647178d53a7ab24466764c08767ad38fc2eb3d35cb761f

Sharing

Copy URL Twitter E-mail

General

Target

61db6982e74f98dac3647178d53a7ab24466764c08767ad38fc2eb3d35cb761f
Size

849KB
MD5

097591a0152d337ba8052dce6c9e99f0
SHA1

6b262690db30e80b1945dfb51036acd5a1d3e82a
SHA256

61db6982e74f98dac3647178d53a7ab24466764c08767ad38fc2eb3d35cb761f
SHA512

dd2773e38d12bd2faa2de9aa416cd425b7d86aaf0bfce253e98ef29a4e2c4a00babc680ed64cb5c739075687a042b1cfe36a075614579a0561f4824bf56b0d2a
SSDEEP

12288:Fs63XjHs6S/S0L7Adp+6FQCMjN5ipDA1RIZOUmkvsWij+u8iydy6QBktNIFx1o1w:FPHrsbrLv66ZSVmkXijnodNyktK

Score

N/A

Malware Config

Signatures

Files

61db6982e74f98dac3647178d53a7ab24466764c08767ad38fc2eb3d35cb761f
.dll windows x86

6d91a7d20401fe8af2a0df94a8f8b234

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
SetFilePointer
GetCommandLineA
MulDiv
GetProcessHeap
UnhandledExceptionFilter
GetCommandLineW
GetCurrentThread
GetStdHandle
GetEnvironmentStrings
ReadFile
GetCurrentThreadId
GlobalLock
SetLastError
HeapReAlloc
LoadResource
InterlockedIncrement
SetStdHandle
LCMapStringA
SetUnhandledExceptionFilter
GetStartupInfoA
GlobalFree
GlobalReAlloc
GetVersion
FreeLibrary
GetConsoleCP
SetEnvironmentVariableA
FindClose
LocalFileTimeToFileTime
GlobalUnlock
RaiseException
GlobalHandle
DeleteCriticalSection
GetCurrentProcessId
GlobalDeleteAtom
FlushFileBuffers
GetModuleFileNameA
GetSystemDirectoryA
TlsFree
LockFile
SetHandleCount
WriteFile
LocalReAlloc
CloseHandle
FreeEnvironmentStringsA
GetStringTypeA
InterlockedDecrement
GetVersionExA
GetTimeZoneInformation
FreeResource
UnlockFile
VirtualQuery
GetFileSize
lstrlenA
CompareStringA
HeapSize
FileTimeToSystemTime
ExitProcess
DuplicateHandle
GetWindowsDirectoryA
GetFileType
lstrcmpA
HeapAlloc
GetSystemTimeAsFileTime
IsDebuggerPresent
RtlUnwind
VirtualFree
GetConsoleMode
GetLastError
TerminateProcess
SizeofResource
SystemTimeToFileTime
SetFileTime
GetConsoleOutputCP
ConvertDefaultLocale
HeapFree
InterlockedExchange
CreateFileA
GlobalFlags
GetFileTime
EnterCriticalSection
LockResource
GetSystemInfo
LeaveCriticalSection
GetLocaleInfoA
Sleep
TlsGetValue
EnumResourceLanguagesW
SetEndOfFile
GetACP
GetThreadLocale
InitializeCriticalSection
QueryPerformanceCounter
FileTimeToLocalFileTime
TlsSetValue
HeapCreate
SetErrorMode
TlsAlloc
HeapDestroy
VirtualProtect
LocalFree
GetModuleHandleA
GetOEMCP
FindAtomA
AddAtomA
LocalAlloc
WriteConsoleA
LoadLibraryA
GetProcAddress
ReadConsoleInputA
GlobalAlloc
GetTickCount

user32

SetParent
DestroyWindow
BringWindowToTop
GetMenuState
InflateRect
GetWindowPlacement
ScreenToClient
CopyRect
GetTopWindow
TrackPopupMenu
GetWindowRect
SetWindowContextHelpId
GetKeyState
GetWindowRgn
GetMenuCheckMarkDimensions
SetWindowPos
SetScrollPos
SetScrollRange
DeferWindowPos
LockWindowUpdate
UpdateWindow
DestroyIcon
IntersectRect
FillRect
GetLastActivePopup
SetWindowRgn
SetActiveWindow
OffsetRect
GetSysColorBrush
BeginDeferWindowPos
UnhookWindowsHookEx
CheckMenuItem
SetMenu
ClientToScreen
SendDlgItemMessageA
KillTimer
GetFocus
DeleteMenu
CreatePopupMenu
CallNextHookEx
PtInRect
ValidateRect
GetWindowThreadProcessId
GetMessagePos
GetDlgItem
IsRectEmpty
GetScrollRange
DestroyMenu
InvalidateRect
ShowWindow
EnableMenuItem
InvalidateRgn
GetWindow
SetTimer
GetNextDlgTabItem
GetMessageTime
IsZoomed
GetWindowDC
GetClientRect
BeginPaint
RedrawWindow
ReuseDDElParam
AdjustWindowRectEx
EndDeferWindowPos
GetMenu
GetDC
EndDialog
SetCapture
UnregisterClassA
GetDesktopWindow
GetMenuItemCount
GetSysColor
GetMenuItemID
IsWindow
MessageBeep
GetScrollInfo
WindowFromPoint
MapWindowPoints
MapDialogRect
SetRect
GetActiveWindow
ShowOwnedPopups
IsChild
SetForegroundWindow
GetSystemMenu
GetSubMenu
ScrollWindow
GetDCEx
ReleaseDC
GetCapture
DrawIcon
GetNextDlgGroupItem
GetCursorPos
GetParent
SetCursor
ReleaseCapture
GetScrollPos
EqualRect
SetRectEmpty
GetDlgCtrlID
EndPaint
UnpackDDElParam
SystemParametersInfoA
PostQuitMessage
SetFocus
ShowScrollBar
GetForegroundWindow
MoveWindow
IsWindowVisible
SetScrollInfo
TranslateMessage
IsWindowEnabled
SetMenuItemBitmaps
wsprintfA
GetSystemMetrics
IsIconic

gdi32

ScaleWindowExtEx
GetBkColor
RestoreDC
SetBkMode
SetBkColor
SaveDC
CreateCompatibleBitmap
GetClipBox
GetStockObject
IntersectClipRect
DeleteDC
SetMapMode
CreateSolidBrush
GetTextColor
DeleteObject
SelectObject
GetDeviceCaps
OffsetRgn
GetWindowExtEx
ExtSelectClipRgn
ExcludeClipRect
CreateBitmap
CreateEllipticRgn
BitBlt
CreateCompatibleDC
CreateRectRgn
PatBlt
SetWindowExtEx
StretchDIBits
RectVisible
SetViewportOrgEx
Ellipse
SetViewportExtEx
CreateRectRgnIndirect
SelectClipRgn
ScaleViewportExtEx
GetMapMode
CreatePatternBrush
GetPixel
Escape
DPtoLP
PtVisible
OffsetViewportOrgEx
SetRectRgn
CombineRgn
GetRgnBox
SetTextColor

advapi32

RegCloseKey
SetFileSecurityW

shell32

DragFinish

ole32

CoFreeUnusedLibraries
OleInitialize
CoRegisterMessageFilter
CoRevokeClassObject
CoGetClassObject
CreateStreamOnHGlobal
CLSIDFromString
CreateILockBytesOnHGlobal
CoCreateInstance
CLSIDFromProgID
OleUninitialize
OleFlushClipboard
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
StgOpenStorageOnILockBytes

oleaut32

VariantTimeToSystemTime
SysStringLen
SafeArrayDestroy
VariantCopy
VariantClear
OleLoadPicture
VariantChangeType
SysAllocStringLen
OleCreateFontIndirect
VariantInit
SysAllocString
SysFreeString
SystemTimeToVariantTime

comctl32

ImageList_LoadImageW

shlwapi

PathIsUNCW
PathRemoveExtensionW
PathFindExtensionW
PathStripToRootW
PathFileExistsW
PathFindFileNameW

wldap32

ord201

userenv

UnloadUserProfile

Sections

.text
Size: 474KB - Virtual size: 473KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 343KB - Virtual size: 365KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6d91a7d20401fe8af2a0df94a8f8b234

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

shlwapi

wldap32

userenv

Sections

.text Size: 474KB - Virtual size: 473KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 343KB - Virtual size: 365KB

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 474KB - Virtual size: 473KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 343KB - Virtual size: 365KB

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 3KB - Virtual size: 3KB