f4df8c9d37a76eadf1125a74865032d83920123b

Resubmissions

16/02/2023, 08:59

230216-kxtbsage6w 1

04/02/2023, 19:39

230204-ycymnahf7x 1

Sharing

Copy URL Twitter E-mail

General

Target

f4df8c9d37a76eadf1125a74865032d83920123b
Size

291KB
MD5

6b1e64957316e65198e3a1f747402bd6
SHA1

f4df8c9d37a76eadf1125a74865032d83920123b
SHA256

fbad60002286599ca06d0ecb3624740efbf13ee5fda545341b3e0bf4d5348cfe
SHA512

dfc44776ec1bef64531228f9894e22a6f84a3009382044265ae51fb9cc664e8565516a3c969860548256a225902a2129709859269121f6c1ee784fc56194d2ff
SSDEEP

6144:DaP0aNyfRYkalElFD5EX7ZEL1PJ07ohmfTSf420:DU0aYRrzDSX7JoU20

Score

1^/10

Malware Config

Signatures

Files

f4df8c9d37a76eadf1125a74865032d83920123b
.dll windows x64

b1c714163a3d228e61ff045c9924482c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetLastError
GetLargePageMinimum
GetEnvironmentStringsW
GetUserDefaultLangID
IsSystemResumeAutomatic
GetUserDefaultUILanguage
GetErrorMode
GetOEMCP
GetThreadUILanguage
GetCurrentThreadId
GetACP
UnregisterApplicationRestart
GetThreadLocale
GetCommandLineA
GetTickCount
VirtualAlloc
UnregisterApplicationRecoveryCallback
SetFileApisToOEM
GetLogicalDrives
RaiseException
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
SizeofResource
FindResourceW
GetModuleHandleW
GetProcAddress
GetCurrentProcess
GetModuleFileNameW
lstrcmpiW
FreeLibrary
CreateFileW
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetCommandLineW
IsValidCodePage
FindFirstFileExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
ReadConsoleW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
WriteFile
GetProcessHeap
GetSystemDefaultUILanguage
CloseHandle
ReadFile
FindClose
FindNextFileA
GetTickCount64
LoadLibraryExW
FlushFileBuffers
HeapReAlloc
RtlUnwind
HeapSize
GetFileType
GetStdHandle
HeapAlloc
HeapFree
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList

user32

GetShellWindow
CountClipboardFormats
GetDesktopWindow
GetClipboardViewer
GetProcessWindowStation
CloseClipboard
DestroyCaret
GetActiveWindow
CreateMenu
InSendMessage
IsProcessDPIAware
SetProcessDPIAware
GetCursor
EmptyClipboard
CharNextW
GetMessageExtraInfo
GetKBCodePage
GetOpenClipboardWindow
GetMessageTime
GetClipboardSequenceNumber
GetCapture
GetForegroundWindow

gdi32

GdiFlush

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

ole32

OleUninitialize
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries

oleaut32

VarUI4FromStr

Exports

Exports

PluginInit
aeiuoowsmg
apflathuoiw
arqezsoyuugnreok
aytsztygyotr
bcfyuse
bgwzesxbanuvbtod
bhowuuamntatw
bpdcrzoctdtaq
ckwtyqbkqdrdhgtf
cspqonxpjx
ctgazyffh
czbwwmpfidjammz
cznabdwszdl
doqileluhsa
dwdyykkmx
dxpynqihnfxpjiuag
ekovbodspdzwqe
eswpaqoephkkwjms
euoclmu
fbxriqukgmibvicbs
fgbixrpsmaan
flmowkthennl
fvitdndhtsfnmo
gbityruububke
gjfhubur
hhhfttazl
jczknmu
kffzqygkeh
ladahzhabvejrxgk
lgpputcvabtbp
loncdieikghxre
lpbpyspfewftvgog
lqspzhpsm
lugclhpvj
lxoooiz
lyhtviuoskoojqwu
lzxmggpkusy
mjyjdvfzeoid
msflihuaxemzzf
npobivqiq
nrjghrue
ntycysevfdslj
ofjrguac
ogxsotujdkbglms
oivpepdhybvu
omqjvudipadubnl
pfxggermfuxspo
pkzwutevppmwzfnq
pmhfrpxwxjn
ptegxsovqx
qxcjpvolwrfsup
rjfugndudsukfuuo
rznwrcl
svtyukipgy
sxsncndawzgsvjcey
tflhwentvgthjg
ukzuvleoghyhwpci
uqurwxpimiyzl
uuxailsocgbonfylt
vaactyamkhkfimb
vfruhzziwd
vgmbtrlghevelvzv
vrtsfuhwkom
wavaeraleatlnxglb
wsarcpqopnrfzlk
wvxzxmv
xeiidejvivoazwx
xfinrnru
xiotpetg
xjtidpts
xlkpwntfrvhpwq
xxrdurpudke
xygkamokfo
yjydxdj
ymievgcghbyvg
yqhpnnxy
yqtssobe
zfharfpykbrohcqyd
znyxenxbwmelmrbn
zpaffrzesadxz
zxwftbgkcuwoewr
zycgmgwjhrungnox

Sections

.text
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 82KB - Virtual size: 81KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

b1c714163a3d228e61ff045c9924482c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 174KB - Virtual size: 174KB

.rdata Size: 82KB - Virtual size: 81KB

.data Size: 5KB - Virtual size: 11KB

.pdata Size: 9KB - Virtual size: 9KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 16KB - Virtual size: 15KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 174KB - Virtual size: 174KB

.rdata
Size: 82KB - Virtual size: 81KB

.data
Size: 5KB - Virtual size: 11KB

.pdata
Size: 9KB - Virtual size: 9KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 16KB - Virtual size: 15KB

.reloc
Size: 2KB - Virtual size: 2KB