913b44178a582a8dc75880c821d369e0[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

913b44178a582a8dc75880c821d369e0.dll
Size

1.2MB
MD5

913b44178a582a8dc75880c821d369e0
SHA1

766df9f8333f754570041b12e0dce3a6a0381e57
SHA256

7fc55a3bdf0ee36bcdfcfb8f2f99ee844773d5bf78b7c2988d6f718a9f322b16
SHA512

19b5d73a4d51a9b1de1e271f84b44cac599034fe7cef0085833dd11beb19705c0258f460ba69ba006572d074e880cce3633b76c1e3da0aa1556d392fd34e0e54
SSDEEP

24576:2IZPtfPTxcWyDpIgED5kG6x5/6LcC46VS:NPNqprDGh

Score

1^/10

Malware Config

Signatures

Files

913b44178a582a8dc75880c821d369e0.dll
.dll windows x86

fe7baf9cdd2f9b8be85bbfac12dffca5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
SetHandleCount
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetStdHandle
GetProfileStringA
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
IsBadWritePtr
HeapSize
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
GetCommandLineA
GetFileType
PeekNamedPipe
GetFileInformationByHandle
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
RtlUnwind
GetTickCount
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
GetShortPathNameA
GetStringTypeExA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
DuplicateHandle
GetThreadLocale
GetCurrentDirectoryA
SizeofResource
GetOEMCP
GetCPInfo
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
GetProcessVersion
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLastError
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetFullPathNameA
GetTempFileNameA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
FormatMessageA
LocalFree
GlobalFree
GlobalReAlloc
lstrcpynA
lstrcmpA
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalAlloc
GlobalLock
GlobalUnlock
GetModuleFileNameA
CreateFileA
WriteFile
CloseHandle
VirtualFree
Sleep
VirtualAlloc
GetProcAddress
GetProcessHeap
lstrcatA
lstrlenA
WinExec
lstrcpyA
GetWindowsDirectoryA
LoadLibraryA
IsBadReadPtr
FreeLibrary

user32

SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
SetFocus
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
PostMessageA
SetForegroundWindow
GetWindow
GetWindowLongA
IsDialogMessageA
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetSystemMetrics
GetDlgCtrlID
IsIconic
GetFocus
IsChild
AdjustWindowRectEx
FillRect
SetTimer
GetKeyState
OpenClipboard
SetClipboardData
CloseClipboard
GetCursorPos
HideCaret
SetMenu
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
SendMessageA
SetWindowTextA
MoveWindow
AnimateWindow
UpdateWindow
LoadBitmapA
LoadIconA
LoadCursorA
CopyIcon
GetWindowRect
GetDC
ReleaseDC
InflateRect
GetSysColor
IsWindow
PtInRect
ReleaseCapture
RedrawWindow
GetForegroundWindow
SetDlgItemTextA
SetCapture
SetCursor
SetWindowLongA
GetClientRect
MessageBeep
EnableWindow
LoadMenuA
GetSubMenu
GetParent
InvalidateRect
ShowWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
PostThreadMessageA
RegisterClipboardFormatA
GetTabbedTextExtentA
CharUpperA
DestroyIcon
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetMenuStringA
InsertMenuA
LockWindowUpdate
GetDCEx
InvertRect
FindWindowA
KillTimer
GetClassNameA
GetSysColorBrush
EmptyClipboard
LoadStringA
SetRect
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
GetSystemMenu
DeleteMenu
AppendMenuA
IsRectEmpty
SetParent
DestroyCursor
SetCursorPos
IsZoomed
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
GrayStringA
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
EndDialog
CreateDialogIndirectParamA
WindowFromPoint
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetDesktopWindow
SetWindowPos
DestroyMenu

gdi32

ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
DeleteObject
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreatePen
CreateSolidBrush
SetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
CreateRectRgnIndirect
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
CreateFontA
GetTextMetricsA
Rectangle
DPtoLP
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
GetMapMode
SetRectRgn
CombineRgn
LPtoDP
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
SelectObject
RestoreDC
SaveDC
StartDocA
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateCompatibleDC
BitBlt
GetTextExtentPoint32A
GetObjectA
CreateFontIndirectA
CreatePatternBrush
CreateDIBitmap
GetTextExtentPointA
GetStockObject

comdlg32

GetOpenFileNameA
GetSaveFileNameA
PrintDlgA
CommDlgExtendedError
GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

GetFileSecurityA
RegQueryValueA
RegOpenKeyExA
RegEnumKeyA
RegOpenKeyA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegSetValueA
RegCreateKeyA
RegCloseKey
SetFileSecurityA
RegDeleteValueA

shell32

ExtractIconA
DragQueryFileA
DragFinish
ShellExecuteA
SHGetFileInfoA

comctl32

ord17
ImageList_Destroy
ImageList_LoadImageA

oledlg

ord8

ole32

OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysFreeString
SysAllocStringLen
VariantClear
VariantCopy
SysAllocString
SysAllocStringByteLen
VariantChangeType
VariantTimeToSystemTime

odbc32

ord4
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord41
ord2
ord1
ord50
ord45
ord51
ord15
ord9
ord14
ord3
ord11
ord18
ord13
ord61
ord16
ord5
ord10
ord72

Exports

Exports

PacketAllocatePacket
PacketCloseAdapter
PacketFreePacket
PacketGetAdapterNames
PacketGetAirPcapHandle
PacketGetDriverVersion
PacketGetNetInfoEx
PacketGetNetType
PacketGetReadEvent
PacketGetStats
PacketGetStatsEx
PacketGetVersion
PacketInitPacket
PacketIsDumpEnded
PacketLibraryVersion
PacketOpenAdapter
PacketReceivePacket
PacketRequest
PacketSendPacket
PacketSendPackets
PacketSetBpf
PacketSetBuff
PacketSetDumpName
PacketSetHwFilter
PacketSetLoopbackBehavior
PacketSetMinToCopy
PacketSetMode
PacketSetNumWrites
SetCOMProfile
WSCreateInstance

Sections

.text
Size: 300KB - Virtual size: 299KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 380KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 40KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe7baf9cdd2f9b8be85bbfac12dffca5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

odbc32

Exports

Exports

Sections

.text Size: 300KB - Virtual size: 299KB

.rdata Size: 76KB - Virtual size: 72KB

.data Size: 380KB - Virtual size: 395KB

.rsrc Size: 400KB - Virtual size: 400KB

.reloc Size: 40KB - Virtual size: 37KB

.text
Size: 300KB - Virtual size: 299KB

.rdata
Size: 76KB - Virtual size: 72KB

.data
Size: 380KB - Virtual size: 395KB

.rsrc
Size: 400KB - Virtual size: 400KB

.reloc
Size: 40KB - Virtual size: 37KB