ad62b416a3b7f7c869d80c401d780c43a44c587f6a578d436fe59b2e25979734

Sharing

Copy URL

Twitter E-mail

General

Target

ad62b416a3b7f7c869d80c401d780c43a44c587f6a578d436fe59b2e25979734
Size

1.7MB
MD5

37a4a82a8a903671f4fe02de0fed911f
SHA1

fc7236ef2272cbd20c2561d5facc66ce8d40e9ac
SHA256

ad62b416a3b7f7c869d80c401d780c43a44c587f6a578d436fe59b2e25979734
SHA512

3fbbb6520eccf473646ba9ccd0d9d48d6fa143a7cdde171165dfaa275a07d70ce8156917be6abfcad46fb20d162b758fe6336056aaffa1f7e573dd2f9b1df559
SSDEEP

24576:yPb9vOQ4NeotYKcC24RjvqbWRRU+N7OPoO9H8paaT2B5OxEqH:yzNCMotYhC2cibWRtCd9cCB58EqH

Score

1^/10

Malware Config

Signatures

Files

ad62b416a3b7f7c869d80c401d780c43a44c587f6a578d436fe59b2e25979734
.dll windows x64

dc2dcc51fd453a7bd634092f5d9c046d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

OpenThread
OpenProcess
GetThreadContext
Sleep
GetCurrentProcessId
IsDebuggerPresent
SearchPathA
GlobalUnlock
GlobalLock
CreateThread
lstrlenW
UnmapViewOfFile
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateDirectoryW
GetFullPathNameW
SetFilePointer
ReadFile
ReadProcessMemory
GetFullPathNameA
HeapFree
HeapAlloc
GetProcessHeap
QueryDosDeviceA
GetLogicalDriveStringsA
TerminateProcess
WriteFile
GetPrivateProfileIntA
DeviceIoControl
CreateFileW
SetUnhandledExceptionFilter
GetFileSizeEx
DeleteFileA
IsBadReadPtr
QueryDosDeviceW
GetEnvironmentVariableA
GetShortPathNameW
GetTickCount
GetVolumeInformationW
lstrcatA
OpenEventA
OpenFileMappingA
LoadLibraryW
CreateEventA
GetVolumeInformationA
FindNextFileW
DeleteFileW
RemoveDirectoryW
FindFirstFileW
GetFileAttributesW
GetLongPathNameW
GetLongPathNameA
FindNextFileA
SetLastError
LocalFree
LocalAlloc
WTSGetActiveConsoleSessionId
GetModuleHandleW
SetEvent
GetWindowsDirectoryW
GetTempPathW
GetTempPathA
CancelIo
WaitNamedPipeA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesExA
GetModuleFileNameW
VirtualProtect
GetPrivateProfileSectionA
GetUserDefaultUILanguage
VirtualQuery
CreateMutexA
ReleaseMutex
WaitForMultipleObjects
GetCurrentThread
VirtualAlloc
GetSystemInfo
VirtualFree
ResumeThread
SuspendThread
SetThreadPriority
GetThreadPriority
FlushInstructionCache
VirtualProtectEx
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
CompareStringW
CompareStringA
SetEndOfFile
InitializeCriticalSectionAndSpinCount
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoA
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
SetHandleCount
FlushFileBuffers
GetStringTypeW
GetStringTypeA
HeapCreate
HeapSetInformation
ExitProcess
GetConsoleMode
GetConsoleCP
IsValidCodePage
GetOEMCP
GetACP
FlsAlloc
FlsFree
FlsGetValue
DecodePointer
EncodePointer
GetCPInfo
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
FlsSetValue
DebugBreak
GetStdHandle
GetFileType
WriteConsoleW
GetTimeZoneInformation
GetTimeFormatA
GetDateFormatA
GetSystemTimeAsFileTime
RtlCaptureContext
RtlVirtualUnwind
UnhandledExceptionFilter
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
VirtualAllocEx
lstrlenA
WriteProcessMemory
CreateRemoteThread
GetExitCodeThread
VirtualFreeEx
WaitForSingleObject
Module32First
Module32Next
CreateToolhelp32Snapshot
Process32First
Process32Next
GetLastError
ExpandEnvironmentStringsA
GetCommandLineA
TerminateThread
GetSystemDirectoryA
GetLocalTime
GetPrivateProfileStringA
OutputDebugStringA
GetModuleFileNameA
LoadLibraryA
WritePrivateProfileStringA
FreeLibrary
lstrcpyA
MultiByteToWideChar
EnterCriticalSection
GetCurrentThreadId
CopyFileA
CreateFileA
CloseHandle
MoveFileA
LeaveCriticalSection
FindFirstFileA
FindClose
WideCharToMultiByte
GetWindowsDirectoryA
FindResourceExA
FindResourceA
LoadResource
LockResource
SizeofResource
CreateDirectoryA
GetFileAttributesA
GetVersionExA
GetDriveTypeA
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceExA
GetCurrentProcess

user32

CallWindowProcA
ClientToScreen
SetClipboardViewer
GetWindowRect
GetParent
GetCursorPos
GetDlgCtrlID
GetActiveWindow
IsWindowVisible
GetWindowThreadProcessId
EnumChildWindows
EnumWindows
GetForegroundWindow
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
FindWindowExA
SetCursorPos
EnumThreadWindows
wsprintfW
PostQuitMessage
DestroyWindow
DispatchMessageA
TranslateMessage
ShowWindow
SetWindowPos
GetSystemMetrics
CreateDialogParamA
GetWindowLongPtrA
FindWindowA
GetDlgItem
mouse_event
SendMessageA
EndDialog
CountClipboardFormats
IsClipboardFormatAvailable
GetClipboardData
SetWindowLongPtrA
GetClassNameA
GetWindowTextA
MessageBoxA
OpenClipboard
GetMessageA
DefWindowProcA
CloseClipboard
keybd_event
wsprintfA
GetWindowTextW
GetClipboardSequenceNumber
DialogBoxParamA
IsCharAlphaA

advapi32

RegQueryInfoKeyW
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegFlushKey
RegDeleteValueA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegNotifyChangeKeyValue
CryptReleaseContext
CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
RegEnumKeyW
RegOpenKeyExW
RegCloseKey
RegEnumKeyExW
RegQueryValueExW
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityInfo
CryptAcquireContextA

ole32

PropVariantClear
CoCreateInstance

gdi32

SetPixel
GetBkColor
GetDeviceCaps
CreateCompatibleDC
DeleteDC
SelectObject
SetDIBColorTable
GetObjectA
DeleteObject
CreateDIBSection
StretchBlt
SetStretchBltMode
CreateDCW
SetDCBrushColor

gdiplus

GdipCloneBrush
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipMeasureString
GdipDrawString
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipResetWorldTransform
GdipSetTextRenderingHint
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipCloneImage
GdipDrawImageRectRect
GdipDrawImageI
GdipSetPageUnit
GdipSetInterpolationMode
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipSetImageAttributesColorMatrix
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipLoadImageFromFile
GdipDeleteGraphics
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipAlloc
GdipFree

msimg32

AlphaBlend

setupapi

SetupDiGetDeviceInterfaceDetailA
CM_Get_Child
CM_Get_Sibling
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo
SetupDiEnumDeviceInterfaces
CM_Get_Device_ID_Size
CM_Get_Device_IDW
CM_Get_DevNode_Registry_PropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceRegistryPropertyW
CM_Locate_DevNodeW
SetupDiDestroyDeviceInfoList

Exports

Exports

DoJob
GetHookHandle
GetShareData
MyAbortDoc
MyBitBlt
MyCloseHandle
MyCloseSocket
MyCoCreateInstance
MyConnect
MyConnectEx
MyCopyFileA
MyCopyFileExA
MyCopyFileExW
MyCopyFileW
MyCopyItem
MyCopyItems
MyCreateFileA
MyCreateFileW
MyCreateProcessW
MyDecryptFileW
MyDeleteFileA
MyDeleteFileW
MyDeleteItems
MyDeviceIoControl
MyDoDragDrop
MyDocumentPropertiesW
MyDragAcceptFiles
MyDragFinish
MyEncryptFileW
MyEndDoc
MyEndDocPrinter
MyEndPage
MyExitProcess
MyFileEncryptionStatusW
MyFindFirstChangeNotificationW
MyFindFirstFileExW
MyGetAddrInfoExW
MyGetAddrInfoW
MyGetBinaryTypeW
MyGetClipboardData
MyGetCompressedFileSizeW
MyGetFileAttributesExW
MyGetFileAttributesW
MyGetFileSecurityW
MyGetLongPathNameW
MyGetOpenFileNameA
MyGetOpenFileNameW
MyGetPrinterDriverW
MyGetResult
MyGetResults
MyGetSaveFileNameW
MyGetShortPathNameW
MyGetaddrinfo
MyGethostbyname
MyHttpOpenRequestA
MyHttpOpenRequestW
MyHttpSendRequestA
MyHttpSendRequestW
MyInternetCloseHandle
MyInternetConnectA
MyInternetConnectW
MyInternetReadFile
MyInternetWriteFile
MyKBCreateProcessInternalW
MyLoadLibraryExW
MyMoveFileA
MyMoveFileExA
MyMoveFileExW
MyMoveFileW
MyMoveFileWithProgressA
MyMoveFileWithProgressW
MyMoveItems
MyNetShareAdd
MyNtCreateFile
MyNtDeviceIoControlFile
MyNtOpenFile
MyNtSetSystemTime
MyOpenEncryptedFileRawW
MyOpenPrinter2W
MyOpenPrinterW
MyPageSetupDlgW
MyPerformOperations
MyRasDialW
MyReadDirectoryChangesW
MyRegCreateKeyA
MyRegCreateKeyExA
MyRegCreateKeyExW
MyRegCreateKeyW
MyRegOpenKeyA
MyRegOpenKeyExA
MyRegOpenKeyExW
MyRegOpenKeyW
MyRegisterDragDrop
MyRemoveDirectoryW
MyRenameItem
MyReplaceFileW
MySHBindToObject
MySHBrowseForFolderW
MySHChangeNotifyRegister
MySHCreateStreamOnFileEx
MySHCreateStreamOnFileW
MySHFileOperationA
MySHFileOperationW
MySHGetPathFromIDListW
MySend
MySendto
MySetClipboardData
MySetComputerNameExW
MySetComputerNameW
MySetFileSecurityW
MySetJobW
MySetLocalTime
MySetupDiSetClassInstallParamsW
MyShowWindow
MyStartDocA
MyStartDocPrinterA
MyStartDocPrinterW
MyStartDocW
MyStartPage
MyWSAConnect
MyWSASend
MyWSASendTo
MyWriteFile
MyWritePrinter
MyZwSetInformationFile
StartStopHook
WSACleanup
WSAIoctl
WSASocketA
WSAStartup
closesocket
gethostbyname
gethostname
getpeername
htonl
inet_addr
inet_ntoa
ntohs

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 201KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VRVPRT
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc2dcc51fd453a7bd634092f5d9c046d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

ole32

gdi32

gdiplus

msimg32

setupapi

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 279KB - Virtual size: 278KB

.data Size: 201KB - Virtual size: 1.5MB

.pdata Size: 82KB - Virtual size: 81KB

.VRVPRT Size: 28KB - Virtual size: 27KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 279KB - Virtual size: 278KB

.data
Size: 201KB - Virtual size: 1.5MB

.pdata
Size: 82KB - Virtual size: 81KB

.VRVPRT
Size: 28KB - Virtual size: 27KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 12KB - Virtual size: 11KB