General

Malware Config

Signatures

Files

• NeedChanges.patch

  .dll regsvr32 windows x86

  2c461743fb5800404c94c6ee9384cf09

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  kernel32

  GetUserDefaultLangID

  GetThreadErrorMode

  GetEnvironmentStringsW

  SwitchToThread

  GetCommandLineW

  GetLargePageMinimum

  GetSystemDefaultUILanguage

  GetCommandLineA

  GetUserDefaultUILanguage

  UnregisterApplicationRestart

  AreFileApisANSI

  GetErrorMode

  GetOEMCP

  TlsAlloc

  IsDebuggerPresent

  GetThreadUILanguage

  GetCurrentThread

  UnregisterApplicationRecoveryCallback

  VirtualAlloc

  GetACP

  GetLastError

  GetCurrentProcess

  SetFileApisToOEM

  RaiseException

  InitializeCriticalSectionEx

  DeleteCriticalSection

  DecodePointer

  MultiByteToWideChar

  LoadResource

  SizeofResource

  GetLogicalDrives

  GetModuleHandleW

  GetProcAddress

  LoadLibraryExW

  GetModuleFileNameW

  lstrcmpiW

  FreeLibrary

  CreateFileW

  WriteConsoleW

  ReadConsoleW

  SetStdHandle

  FreeEnvironmentStringsW

  IsValidCodePage

  FindFirstFileExA

  EnumSystemLocalesW

  GetUserDefaultLCID

  IsValidLocale

  SetFilePointerEx

  GetConsoleMode

  GetConsoleCP

  WriteFile

  FlushFileBuffers

  GetProcessHeap

  IsSystemResumeAutomatic

  CloseHandle

  ReadFile

  FindClose

  FindNextFileA

  GetTickCount64

  FindResourceW

  HeapSize

  GetFileType

  GetStdHandle

  HeapFree

  HeapReAlloc

  HeapAlloc

  GetModuleFileNameA

  GetModuleHandleExW

  ExitProcess

  InterlockedFlushSList

  RtlUnwind

  OutputDebugStringW

  GetCPInfo

  GetStringTypeW

  GetLocaleInfoW

  LCMapStringW

  TlsFree

  TlsSetValue

  TlsGetValue

  EnterCriticalSection

  LeaveCriticalSection

  SetEvent

  ResetEvent

  WaitForSingleObjectEx

  CreateEventW

  IsProcessorFeaturePresent

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  GetStartupInfoW

  QueryPerformanceCounter

  GetCurrentProcessId

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  InitializeSListHead

  TerminateProcess

  WideCharToMultiByte

  EncodePointer

  SetLastError

  InitializeCriticalSectionAndSpinCount

  user32

  CloseClipboard

  CountClipboardFormats

  GetProcessWindowStation

  InSendMessage

  GetForegroundWindow

  GetMessageExtraInfo

  GetActiveWindow

  GetCursor

  GetShellWindow

  AnyPopup

  IsProcessDPIAware

  SetProcessDPIAware

  IsWow64Message

  GetDesktopWindow

  CreateMenu

  CharNextW

  GetDialogBaseUnits

  GetClipboardViewer

  GetCapture

  DestroyCaret

  GetMenuCheckMarkDimensions

  gdi32

  GdiFlush

  advapi32

  RegSetValueExW

  RegEnumKeyExW

  RegCloseKey

  RegDeleteValueW

  RegDeleteKeyW

  RegCreateKeyExW

  RegOpenKeyExW

  RegQueryInfoKeyW

  shell32

  InitNetworkAddressControl

  ole32

  CoTaskMemFree

  CoCreateInstance

  CoTaskMemRealloc

  CoTaskMemAlloc

  CoUninitialize

  OleUninitialize

  CoFreeUnusedLibraries

  oleaut32

  VarUI4FromStr

  Exports

  Exports

  DllInstall

  DllRegisterServer

  bcormhu

  bmdulnytbdcp

  bqkqzndgatiyjxhh

  emzyidsbyz

  eujlrxxyrate

  gagbogswwksrhkdo

  hsjouegqlibljdvyw

  jmzetnoeants

  kydczkxut

  lojbawtoiwxrbeej

  ltpmdolnixh

  mabobdjuhehddboej

  mwsbgeu

  nerxxznypyqq

  nqmenfgbgt

  oibqqpmzgrmb

  osdufsunvd

  ovtidlbsqzldfzfc

  ovwslcd

  ppohrzdgslxuov

  qbhlapaovkgdvpnjj

  qrntxvemqn

  tjdqzskmuvpjnctcw

  uldbgef

  uvszceqatpthwubun

  vqlgvgqskp

  wslvbcwjpmqjobdcd

  xjhegtzafexbsjeng

  ycdeuvkoyhwrw

  ychjlhg

  yejphkyqthzsk

  ygwymrwzvyoldrduo

  yhvtxpmefkckt

  yrysrabodiqpqnrz

  ytegrhsa

  zzyfjnjkadfccltso

  Sections

  .text

  Size: 131KB - Virtual size: 131KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 59KB - Virtual size: 59KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 4KB - Virtual size: 7KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .tls

  Size: 512B - Virtual size: 9B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .gfids

  Size: 1024B - Virtual size: 732B

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .rsrc

  Size: 161KB - Virtual size: 160KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 9KB - Virtual size: 8KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ