61045fd1ee415947f9263b7e4caba7c25ff74fd28d1e5b856f72e5da11c38952

Sharing

Copy URL Twitter E-mail

General

Target

61045fd1ee415947f9263b7e4caba7c25ff74fd28d1e5b856f72e5da11c38952
Size

1.5MB
MD5

2e4e3b7f489d8fe98414879909271cb1
SHA1

0c83ef55523336490b3e00b9e1fde7d108e8c4d0
SHA256

61045fd1ee415947f9263b7e4caba7c25ff74fd28d1e5b856f72e5da11c38952
SHA512

1664e2b984284e09f85d361dd32ab0014bf7b6c55adc3cae1ed20ca61828f5cd0477783fccce180d0d609b425b4b42659312298d7a457d01eb29f031b5780e26
SSDEEP

24576:vWLgVHqmqfe08yTd7J3qVH2TBRj5VvTLvFL:8mqm4J79qVoBtTLtL

Score

1^/10

Malware Config

Signatures

Files

61045fd1ee415947f9263b7e4caba7c25ff74fd28d1e5b856f72e5da11c38952
.dll windows x86

26ac9dc7352a114ca6cca6c9549e49c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SleepEx
GetSystemDirectoryA
GetModuleHandleA
VerifyVersionInfoA
WaitForSingleObject
PeekNamedPipe
WaitForMultipleObjects
ExpandEnvironmentStringsA
GetDriveTypeW
GetFileInformationByHandle
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
LoadLibraryW
InitializeCriticalSection
CreateProcessW
OutputDebugStringW
ReadFile
GetFileSize
GetTempPathA
CreateFileA
Sleep
GetProcAddress
GetModuleHandleW
GetNativeSystemInfo
GetLocalTime
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
CloseHandle
CreateFileW
GetCurrentDirectoryW
WideCharToMultiByte
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetVersionExW
DeleteFileW
DeleteFileA
FormatMessageA
CreateDirectoryW
LeaveCriticalSection
LocalFree
EncodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
FreeLibrary
LoadLibraryA
GetACP
VerSetConditionMask
MulDiv
VerifyVersionInfoW
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceW
GlobalLock
GlobalUnlock
GetTickCount
lstrlenW
GetModuleFileNameW
GlobalAlloc
ExitProcess
WriteFile
SetFilePointer
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesW
FormatMessageW
lstrcmpiW
lstrcpynW
InterlockedIncrement
InterlockedDecrement
lstrcpyW
RtlUnwind
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetStdHandle
GetFileType
GetTimeZoneInformation
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetFileSizeEx
FlushFileBuffers
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
SetEndOfFile
WriteConsoleW
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetLastError
RaiseException
DecodePointer
EnterCriticalSection
OutputDebugStringA
GetFullPathNameW

user32

GetPropW
CharPrevW
DrawTextW
FillRect
SetRect
SetWindowRgn
UpdateLayeredWindow
MoveWindow
GetWindowRgn
CreatePopupMenu
DestroyMenu
EnableMenuItem
AppendMenuW
TrackPopupMenu
CreateCaret
GetCaretBlinkTime
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
ClientToScreen
IsWindowEnabled
UpdateWindow
EqualRect
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
wsprintfA
DrawTextA
CreateAcceleratorTableW
InvalidateRgn
GetGUIThreadInfo
GetKeyboardLayout
GetKeyNameTextW
MapVirtualKeyExW
GetActiveWindow
IsZoomed
IsIconic
IsWindowVisible
CreateWindowExW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
MonitorFromPoint
OffsetRect
UnionRect
InflateRect
PostMessageW
PostQuitMessage
IsWindow
DestroyWindow
SetFocus
GetDC
GetWindowLongW
SetWindowLongW
SetPropW
EnableWindow
GetClassInfoExW
RegisterClassExW
RegisterClassW
CallWindowProcW
DefWindowProcW
ShowWindow
SetForegroundWindow
GetMonitorInfoW
MonitorFromWindow
LoadImageW
GetFocus
GetParent
wsprintfW
LoadCursorW
PtInRect
MessageBoxW
SetWindowPos
SetTimer
KillTimer
SwitchToThisWindow
ReleaseDC
GetClientRect
SetCapture
ReleaseCapture
IsRectEmpty
GetSysColor
MapWindowPoints
GetCursorPos
GetUpdateRect
CharNextW
SetParent
IntersectRect
ScreenToClient
SetCursor
BeginPaint
GetKeyState
EndPaint
GetWindow
InvalidateRect
GetWindowRect
MessageBoxA

gdi32

SetWindowOrgEx
CombineRgn
CreatePenIndirect
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
GetCharABCWidthsW
GetTextExtentPoint32W
LineTo
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
SetTextColor
GetTextMetricsW
MoveToEx
TextOutW
GdiFlush
CreateRectRgn
PtInRegion
CreatePatternBrush
GetTextExtentPointA
GetClipBox
CreateDIBSection
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetBitmapBits
SetBitmapBits
PlayEnhMetaFile
CreateCompatibleBitmap
GetEnhMetaFileHeader
CreateEnhMetaFileW
RestoreDC
GetObjectW
SaveDC
Rectangle
RemoveFontMemResourceEx
AddFontMemResourceEx
GetStockObject
CreatePen
CreateFontIndirectW
CreateDIBitmap
CloseEnhMetaFile
GetObjectA
GetDeviceCaps

shell32

ShellExecuteW
SHGetSpecialFolderPathA
SHGetSpecialFolderPathW
DragQueryFileW
ShellExecuteA

ole32

CoInitialize
CoCreateGuid
CoUninitialize
DoDragDrop
OleDuplicateData
CreateStreamOnHGlobal
ReleaseStgMedium
CLSIDFromString
CLSIDFromProgID
OleLockRunning
CoCreateInstance

oleaut32

VariantInit
VariantClear
SysFreeString
SysAllocString

shlwapi

PathFileExistsA
PathFileExistsW

wininet

InternetCloseHandle
InternetOpenUrlW
InternetOpenW

dbghelp

MiniDumpWriteDump

ws2_32

sendto
recvfrom
listen
accept
ntohl
getsockname
ioctlsocket
gethostbyname
gethostname
WSAStartup
freeaddrinfo
getaddrinfo
WSAIoctl
socket
setsockopt
ntohs
htons
getsockopt
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSACleanup
WSAGetLastError
htonl

comctl32

InitCommonControlsEx
_TrackMouseEvent
ord17

gdiplus

GdipAddPathLine
GdipCreatePath
GdipRotateWorldTransform
GdipTranslateWorldTransform
GdipDrawImageRectI
GdipAddPathArc
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipAlloc
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
GdipSetStringFormatTrimming
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeletePath
GdipImageSelectActiveFrame
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipDrawString
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipFillPath
GdipFillRectangleI
GdipDrawPath
GdipDrawRectangleI
GdipSetInterpolationMode
GdipSetTextRenderingHint
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipSetPenMode
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdiplusShutdown
GdipFree

imm32

ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext

advapi32

CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
CryptAcquireContextA
CryptGenRandom

crypt32

CertFreeCertificateContext

wldap32

ord143
ord46
ord301
ord200
ord30
ord79
ord35
ord33
ord32
ord27
ord26
ord22
ord41
ord50
ord60
ord211

Exports

Exports

HuDun_AsynchUserInfo
HuDun_Authenticate
HuDun_BuyVip
HuDun_CloseDialog
HuDun_EnableAutoDump
HuDun_Exception
HuDun_FreeUI
HuDun_GetUserInfo
HuDun_InitHWnd
HuDun_InitProduct
HuDun_InitSensors
HuDun_InitUI
HuDun_IsVIP
HuDun_LoginTips
HuDun_Logout
HuDun_MsgReturnFunction
HuDun_QuickLogin
HuDun_RegUserInfo
HuDun_ShowAsynUserInfo
HuDun_ShowUserGuide
HuDun_ShowUserInfo
HuDun_TextToVoice
HuDun_UpdateTips
HuDun_UpdateUserInfo
HuDun_VoiceToText
HuDun_setExternalRealize
Hudun_GetAvailableDomain
Hudun_GetSensors

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 328KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26ac9dc7352a114ca6cca6c9549e49c2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

shlwapi

wininet

dbghelp

ws2_32

comctl32

gdiplus

imm32

advapi32

crypt32

wldap32

Exports

Exports

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 328KB - Virtual size: 328KB

.data Size: 10KB - Virtual size: 36KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 69KB - Virtual size: 69KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 328KB - Virtual size: 328KB

.data
Size: 10KB - Virtual size: 36KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 69KB - Virtual size: 69KB