646a8e5e7330ab733e69fe2197d1aa4300d6da1fa98e9fb1ea7d19e59efbcc1e

Sharing

Copy URL Twitter E-mail

General

Target

646a8e5e7330ab733e69fe2197d1aa4300d6da1fa98e9fb1ea7d19e59efbcc1e
Size

218KB
MD5

50d6bdaa31be402188899ecb099b56d0
SHA1

69e6e4548e6e1a7213962a5780ff3f0d11fcb876
SHA256

646a8e5e7330ab733e69fe2197d1aa4300d6da1fa98e9fb1ea7d19e59efbcc1e
SHA512

03291ee92c0165b5b2f0e15b160276ddd257485e75167b1829a9bc8da2986ef8ab26af124b5219c59f8b5ec880a8c367f7b88c9bde4285d96d2b0b2bfbf8c6ec
SSDEEP

6144:IrJwDiql8HuF37cXuzQ9uIRZESso0GHn77Fi1SyN:IbrHs37cQQ9u5Sp77a

Score

N/A

Malware Config

Signatures

Files

646a8e5e7330ab733e69fe2197d1aa4300d6da1fa98e9fb1ea7d19e59efbcc1e
.dll windows x86

c32b617c3ca5446cd6431b4cfed6cb4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

shlwapi

PathAppendA
PathIsPrefixW

kernel32

SetCurrentDirectoryW
SetConsoleTitleW
GetFileTime
WaitForDebugEvent
OpenEventW
DuplicateHandle
GetPrivateProfileSectionW
TryEnterCriticalSection
GetLocaleInfoA
FreeLibrary
ScrollConsoleScreenBufferW
GetProcessHeap
GetWindowsDirectoryA
lstrcpynW
FindNextVolumeW
GetEnvironmentVariableA
GetACP
LCMapStringA
GetConsoleOutputCP
WritePrivateProfileStringA
CreateFileMappingW
DeviceIoControl
FindFirstVolumeMountPointA
WriteProfileStringW
OpenFileMappingA
SuspendThread
lstrcpyW
SetFileAttributesW
GetVolumeInformationW
FindResourceExW
SearchPathW
GetConsoleAliasesLengthW
LoadResource
SetVolumeMountPointW
ReadConsoleW
LoadLibraryW
GetConsoleAliasExesLengthW
LeaveCriticalSection
GetExitCodeProcess
EnumSystemCodePagesA
GetBinaryTypeW
FindFirstFileA
PostQueuedCompletionStatus
EnumResourceTypesW
OutputDebugStringA
OpenSemaphoreW
CloseHandle
DeleteFileW
lstrcpyA
SetConsoleCtrlHandler
GetTempFileNameW
CreateMutexW
FindFirstFileW
lstrcpynA
CreateProcessW
SetWaitableTimer
GetCurrentThread
ExpandEnvironmentStringsA
SetFileTime
EnumResourceTypesA
GetDriveTypeA
InitializeCriticalSection
GetPriorityClass
GetVolumePathNameW
FindResourceExA
FormatMessageW
GetFileAttributesA
SetConsoleCursorPosition
LocalReAlloc
ExitThread
GetStartupInfoW
GetPrivateProfileIntW
SetCurrentDirectoryA
GetStartupInfoA
GetLastError
MoveFileW
GetDiskFreeSpaceW
CreateSemaphoreW
MoveFileA
LockResource

user32

EnumDesktopsW
GrayStringA
ExitWindowsEx
FindWindowW
OpenInputDesktop
CharPrevW
AttachThreadInput
IsClipboardFormatAvailable
LoadBitmapA
SetForegroundWindow
PostMessageW
LoadImageW
GetClassInfoExA
wvsprintfW
TrackPopupMenu
ScreenToClient
TranslateAcceleratorW
CharLowerW
DdeSetQualityOfService
CreateDesktopW
DdeAbandonTransaction
ValidateRect
GetDialogBaseUnits
SetScrollInfo
MessageBoxExW
SendMessageW
CharToOemBuffW
IsWindowVisible
UnhookWindowsHookEx
FlashWindow
GetClassInfoA
EnumWindowStationsW
EnumChildWindows
SendMessageTimeoutA
PeekMessageW
SetUserObjectSecurity
SystemParametersInfoW
GetWindowLongW
EnumClipboardFormats
GetClientRect
GetMenuStringW
ReplyMessage
GetMessageExtraInfo
SetActiveWindow
GetWindow
SetCaretPos
BeginDeferWindowPos
ScrollWindowEx
IsWindow
IsHungAppWindow
IsChild
EnumDisplaySettingsW
TranslateMDISysAccel
GetClipboardOwner
LoadImageA
OpenClipboard
SetWindowsHookExW
SetMenuDefaultItem
RemoveMenu
PostMessageA
CreateCaret
EnableScrollBar
ShowWindow
DdeCmpStringHandles
GetDlgItem
SetScrollPos
GetClassInfoExW
PtInRect
DdeQueryStringW
CharPrevA
CreateMenu
DrawIcon
CharUpperA
CallNextHookEx
LoadCursorW
ReuseDDElParam
GetSubMenu
DialogBoxIndirectParamW
TabbedTextOutW
KillTimer
DrawTextW
DdeGetLastError
FillRect
GetWindowDC
PostQuitMessage
RegisterClassExA
CharUpperBuffW
wsprintfW
CreateIconIndirect
GetKeyboardLayoutNameW
GetCapture
LoadIconW
GetWindowPlacement
OpenWindowStationA
AppendMenuW
CharLowerA
PeekMessageA
CharUpperW
SetWindowsHookExA
BroadcastSystemMessageW
DestroyCaret
SendDlgItemMessageW
SwitchDesktop
SetThreadDesktop
wvsprintfA
GetKeyboardType
InsertMenuA
SetDlgItemTextW
SetClipboardData
EndDeferWindowPos
DrawFrameControl
SetMenuItemInfoW
SetDlgItemTextA
GetScrollPos
ModifyMenuA
CallWindowProcW
DefWindowProcW
GetMessageTime
mouse_event
SetFocus

gdi32

AddFontResourceA
CreateFontA
PtVisible
GetTextExtentPointW
CreateFontW
StretchDIBits
MoveToEx
DeleteEnhMetaFile
SetWindowExtEx
SetPaletteEntries
EnumFontFamiliesExW
GetObjectA
GetTextExtentPoint32W
WidenPath
SetBrushOrgEx
SetBkColor
RemoveFontResourceW
SetAbortProc
CopyMetaFileW
SetRectRgn
CreatePenIndirect
CombineRgn
SetMapMode
Rectangle
CreateMetaFileW
SelectPalette
CreateEllipticRgnIndirect
TextOutW
CloseEnhMetaFile
ScaleWindowExtEx
PatBlt
GetROP2

ole32

CoBuildVersion
CoInitialize
OleIsCurrentClipboard

Exports

Exports

?EideVitamailHilivineus@@YGEIPCUtagMSG@@ACUDyedHaesBakealb@@H@Z

Sections

.itext
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 140B

IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mov
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.asm
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.call
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c32b617c3ca5446cd6431b4cfed6cb4e

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

shlwapi

kernel32

user32

gdi32

ole32

Exports

Exports

Sections

.itext Size: 16KB - Virtual size: 15KB

.text Size: 512B - Virtual size: 140B

.data Size: 109KB - Virtual size: 108KB

.rdata Size: 35KB - Virtual size: 34KB

.mov Size: 14KB - Virtual size: 14KB

.asm Size: 18KB - Virtual size: 17KB

.call Size: 8KB - Virtual size: 7KB

.rsrc Size: 10KB - Virtual size: 10KB

.reloc Size: 5KB - Virtual size: 5KB

.itext
Size: 16KB - Virtual size: 15KB

.text
Size: 512B - Virtual size: 140B

.data
Size: 109KB - Virtual size: 108KB

.rdata
Size: 35KB - Virtual size: 34KB

.mov
Size: 14KB - Virtual size: 14KB

.asm
Size: 18KB - Virtual size: 17KB

.call
Size: 8KB - Virtual size: 7KB

.rsrc
Size: 10KB - Virtual size: 10KB

.reloc
Size: 5KB - Virtual size: 5KB