afbce9372250dd93a04633c8d8d2f9c40d7d96023aa763c7eced10da5e18457e

Sharing

Copy URL Twitter E-mail

General

Target

afbce9372250dd93a04633c8d8d2f9c40d7d96023aa763c7eced10da5e18457e
Size

359KB
MD5

6329e75500a0745a174fc37dcfefd9e5
SHA1

e6d8babb2d380c667e533dd48a6312c5975d22c8
SHA256

afbce9372250dd93a04633c8d8d2f9c40d7d96023aa763c7eced10da5e18457e
SHA512

1f616f389b03b5dfda94321452d69c38fb32ad65f777bcd228b2ae77dd92794b9925e289ecb8bad1926873d1601570e2c46050152dfbf281745c930f63c185f4
SSDEEP

6144:mAc3T6mZty9/UOt/VUE7U9VL8p3dpxksK2CgFkDjLsP5pQt21SMoJsRB:mAc3TnZtw/UOFVUK+YpDuT2C4QLT2oLU

Score

N/A

Malware Config

Signatures

Files

afbce9372250dd93a04633c8d8d2f9c40d7d96023aa763c7eced10da5e18457e
.dll windows x86

9153aa16a34a359c1c1dc03fb5ddbd31

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtol
wcsstr
wcslen
memcmp
_snprintf
memset
_adjust_fdiv
free
_CxxThrowException
_except_handler3
??3@YAXPAX@Z
_purecall
??1type_info@@UAE@XZ
memmove
__CxxFrameHandler
realloc
??2@YAPAXI@Z
wcsncpy
_ftol
_vsnwprintf
_onexit
__dllonexit
wcscpy
malloc
?terminate@@YAXXZ
_initterm

kernel32

CompareStringW
InterlockedCompareExchange
GetUserDefaultUILanguage
LocalFree
FormatMessageW
GetNumberFormatW
CloseHandle
WaitForSingleObject
SetEvent
CreateTimerQueueTimer
DeleteTimerQueueTimer
LoadLibraryA
ResetEvent
OpenEventW
CreateEventW
GetPrivateProfileStringW
LoadLibraryW
FileTimeToSystemTime
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetFileAttributesW
GetVersionExA
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
UnmapViewOfFile
VirtualAlloc
IsBadReadPtr
FreeLibrary
MapViewOfFile
CreateFileMappingA
GetSystemDirectoryW
GetVersion
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameW
lstrcpynW
lstrcmpiW
InterlockedDecrement
InterlockedIncrement
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
GetVersionExW
GetThreadLocale
GetModuleHandleA
GetLocaleInfoA
GetACP
InterlockedExchange
CreateProcessW
GetProcAddress
Sleep
CreateDirectoryW
SetLastError
CreateFileW
WriteFile
FlushFileBuffers
GetSystemTime
GetFileSize
CreateFileMappingW
SetFilePointer
SetEndOfFile
ReleaseMutex
CreateMutexW
ExpandEnvironmentStringsW
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
lstrcatW
lstrcpyW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
GetCurrentThread
MultiByteToWideChar
VerifyVersionInfoW
HeapReAlloc
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapAlloc
HeapFree
GetSystemInfo

comctl32

InitCommonControlsEx

advapi32

RegOpenKeyW
RegDeleteKeyW
RegDeleteValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
InitiateSystemShutdownExW
RegQueryValueExW
ImpersonateSelf
CopySid
GetLengthSid
IsValidSid
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
InitializeAcl
GetUserNameW
OpenThreadToken
RevertToSelf
SetThreadToken
GetTokenInformation
DuplicateTokenEx
CheckTokenMembership
AllocateAndInitializeSid
FreeSid
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey

user32

SetCapture
ScreenToClient
ReleaseCapture
InvalidateRect
EndPaint
BeginPaint
SetCursor
LoadCursorW
FillRect
PtInRect
DrawFocusRect
GetFocus
GetSysColor
ExitWindowsEx
GetDlgItemTextW
IsWindow
IsDlgButtonChecked
KillTimer
EnableWindow
ShowScrollBar
EndDialog
SetWindowTextW
IsWindowVisible
GetWindowTextLengthW
LockWindowUpdate
RedrawWindow
SetTimer
ShowWindow
SetWindowPos
SendMessageW
LoadStringW
DestroyWindow
GetWindowLongW
SetWindowLongW
SetFocus
GetDlgItem
GetParent
PostMessageW
CharNextW
SetDlgItemTextW
DialogBoxParamW
CreateDialogParamW
DefWindowProcW
CreateWindowExW
MapWindowPoints
GetWindowRect
ReleaseDC
DrawTextW
CopyRect
GetDC
GetClientRect
SystemParametersInfoW
GetWindow
GetWindowTextW

ole32

CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
CoCreateFreeThreadedMarshaler
StringFromGUID2
CoCreateInstance
CoDisconnectObject
CoQueryProxyBlanket
CoInitializeEx
CoUninitialize
CoWaitForMultipleHandles
CoSetProxyBlanket

rpcrt4

UuidCreateNil
UuidCompare
UuidFromStringW
UuidToStringW
UuidCreate
RpcStringFreeW

crypt32

CryptProtectData
CryptUnprotectData

ntdll

VerSetConditionMask

gdi32

GetTextExtentPoint32W
GetTextMetricsW
GetObjectW
CreateFontIndirectW
SetBkMode
DeleteObject
SetTextColor
SelectObject

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 229KB - Virtual size: 237KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9153aa16a34a359c1c1dc03fb5ddbd31

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

comctl32

advapi32

user32

ole32

rpcrt4

crypt32

ntdll

gdi32

Sections

.text Size: 71KB - Virtual size: 71KB

.rdata Size: 48KB - Virtual size: 47KB

.data Size: 229KB - Virtual size: 237KB

.bss Size: - Virtual size: 10KB

.rsrc Size: 5KB - Virtual size: 5KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 71KB - Virtual size: 71KB

.rdata
Size: 48KB - Virtual size: 47KB

.data
Size: 229KB - Virtual size: 237KB

.bss
Size: - Virtual size: 10KB

.rsrc
Size: 5KB - Virtual size: 5KB

.reloc
Size: 4KB - Virtual size: 4KB