80518e4d2aefb2c2f551b8bc7f20eae5d0c8cb673e475825e5a38bcdd821f714

Sharing

Copy URL Twitter E-mail

General

Target

80518e4d2aefb2c2f551b8bc7f20eae5d0c8cb673e475825e5a38bcdd821f714
Size

772KB
MD5

1eef6fb2cff48668ac96df6ee92376a0
SHA1

c35b58d68022779813e1ffd61e8bfff6b873e8fb
SHA256

80518e4d2aefb2c2f551b8bc7f20eae5d0c8cb673e475825e5a38bcdd821f714
SHA512

7e7b90a43ecfec44c21b5b6d1af6d4b0d47767ca986083762e67d0f014f931667280cb57b13b8211da92fb62adee49ae10abed4f210e0c22e8a14f13181c0829
SSDEEP

6144:fcvGTzsMDjVOo5jBrXu4gEDkIiyQzC/Re4:QG3NxO6l7tDkLyYm1

Score

N/A

Malware Config

Signatures

Files

80518e4d2aefb2c2f551b8bc7f20eae5d0c8cb673e475825e5a38bcdd821f714
.dll windows x86

db7e9c3142c46cbc185e03d7864011f5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTempFileNameW
GetTempPathW
CreateFileW
SetFilePointer
ReadFile
WriteFile
GetVersionExA
GetModuleHandleA
FindResourceExA
LoadResource
FreeResource
LockResource
ExitProcess
GetCommandLineA
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
GetDriveTypeW
FindFirstFileW
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetTempPathA
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
HeapReAlloc
HeapSize
VirtualAlloc
IsBadWritePtr
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFullPathNameW
LoadLibraryA
InterlockedExchange
VirtualQuery
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualProtect
GetSystemInfo
GetCurrentDirectoryW
SetStdHandle
FlushFileBuffers
SetConsoleCtrlHandler
GetLocaleInfoA
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProcAddress
GetTempFileNameA
MoveFileW
MoveFileA
DeleteFileW
AreFileApisANSI
DeleteFileA
WideCharToMultiByte
GetVersion
UnmapViewOfFile
CloseHandle
SetErrorMode
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetModuleFileNameA
FindFirstFileA
FindClose
MultiByteToWideChar
GlobalLock
GlobalUnlock
GlobalFree
GlobalReAlloc
GlobalAlloc
HeapDestroy

user32

UpdateWindow
GetParent
SetParent
GetFocus
SetWindowLongA
GetWindowLongA
GetClassNameA
SetWindowsHookExA
GetWindowLongW
SetWindowsHookExW
SetWindowLongW
DefDlgProcA
DefDlgProcW
TranslateAcceleratorA
CallNextHookEx
DialogBoxParamA
DialogBoxParamW
CreateDialogParamA
CreateDialogParamW
PostMessageA
EndDialog
UnhookWindowsHookEx
GetDlgItem
DefWindowProcA
DefWindowProcW
CallWindowProcA
CallWindowProcW
SetWindowTextW
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
GetWindowTextW
GetWindowTextLengthW
SendMessageW
FillRect
GetSysColor
DrawFocusRect
DrawTextA
DrawTextW
EnumChildWindows
LoadBitmapA
DestroyCursor
LoadIconA
DestroyIcon
LoadMenuA
DestroyMenu
IsWindow
SystemParametersInfoA
GetDesktopWindow
SetWindowPos
ShowWindow
DestroyWindow
OemToCharBuffA
CharToOemA
GetClientRect
InvalidateRect
WinHelpA
RegisterClassW
LoadCursorA
RegisterClassA
GetSystemMetrics
ScreenToClient
IsRectEmpty
GetWindowRect
IsWindowUnicode
CreateWindowExW
CreateWindowExA
SetRect
EnableWindow
SetFocus
GetDlgItemInt
IsWindowEnabled
SetDlgItemInt
IsWindowVisible
SetForegroundWindow
BringWindowToTop
CopyRect
GetDC
ReleaseDC
SendMessageA

gdi32

CreatePen
CreateSolidBrush
GetTextColor
GetBkColor
GetTextExtentPoint32W
SetBkColor
TextOutA
TextOutW
DeleteDC
BitBlt
CreateCompatibleDC
CreateBitmap
Rectangle
GetTextExtentPointA
SetTextColor
GetObjectA
EnumFontFamiliesExA
CreateFontIndirectA
GetTextMetricsA
GetStockObject
GetTextExtentPoint32A
SelectObject
GetCurrentObject
DeleteObject

advapi32

GetSecurityInfo
InitializeAcl
GetAce
AddAce
RegSetValueExW
RegSetValueExA
RegQueryValueExW
RegCloseKey
RegOpenKeyExA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegCreateKeyExA
RegQueryValueExA

Exports

Exports

EXPLAINLISTPROC
GramAddStats
GramCheck
GramCloseMdt
GramCloseUdr
GramExplainDlg
GramFreeGrb
GramGetError
GramIgnoreRule
GramInit
GramInitStats
GramIsRuleIgnored
GramOpenMdt
GramOpenUdr
GramOptionsDlg
GramResetOptions
GramResetRule
GramSaveRule
GramStats
GramStatsDlg
GramTerminate
GramUseOptions
GramVersion
GramWriteOptions
MyFontEnumFunc

Sections

.text
Size: 668KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db7e9c3142c46cbc185e03d7864011f5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Exports

Exports

Sections

.text Size: 668KB - Virtual size: 664KB

.rdata Size: 48KB - Virtual size: 45KB

.data Size: 20KB - Virtual size: 36KB

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 20KB - Virtual size: 19KB

.text
Size: 668KB - Virtual size: 664KB

.rdata
Size: 48KB - Virtual size: 45KB

.data
Size: 20KB - Virtual size: 36KB

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 20KB - Virtual size: 19KB