4482e74fe8a1dcdebf8191f32dc2c2c332e1520ea2dd5c992fdd656f2d86b5bb

Sharing

Copy URL

Twitter E-mail

General

Target

4482e74fe8a1dcdebf8191f32dc2c2c332e1520ea2dd5c992fdd656f2d86b5bb
Size

3.4MB
MD5

fe5c5e87664ad4b8607d2d2a4a380255
SHA1

902211c9bd39d1aff0767bc4c0cca48f7347a38c
SHA256

4482e74fe8a1dcdebf8191f32dc2c2c332e1520ea2dd5c992fdd656f2d86b5bb
SHA512

24a20c911e53347eacfcd41475c3113fe81afb9ecf6bff4d29712a7a039b78d57e95bd62d77a61055e805c7df982ff7463bfba46e656b5f79b5d412dcdbf436e
SSDEEP

98304:SSZbqmdhibNUIlh7TbMUlRTw1R4uFFUH3P1A7OLk1VvN6r:SS5qmvibNUIlh3bxRTw12uEd8cr

Score

1^/10

Malware Config

Signatures

Files

4482e74fe8a1dcdebf8191f32dc2c2c332e1520ea2dd5c992fdd656f2d86b5bb
.dll windows x86

35e46c4774c900f14561fc97dd18a492

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGenerateMessage
ImmReSizeIMCC
ImmUnlockIMCC
ImmLockIMCC
ImmCreateIMCC
ImmUnlockIMC
ImmLockIMC

shlwapi

PathFileExistsA
PathFileExistsW

kernel32

SetFileAttributesW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindNextFileW
CopyFileW
MoveFileExW
MultiByteToWideChar
WideCharToMultiByte
SetUnhandledExceptionFilter
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
OpenFileMappingW
LockResource
LoadResource
SizeofResource
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
TlsGetValue
TlsSetValue
FindResourceW
MulDiv
lstrcpyW
LCMapStringW
GetCurrentThread
GetThreadContext
SuspendThread
ResumeThread
TerminateProcess
ReadProcessMemory
DecodePointer
HeapDestroy
HeapReAlloc
HeapSize
RaiseException
InitializeCriticalSectionAndSpinCount
GetPrivateProfileStringA
SetEndOfFile
SetFilePointerEx
CreateFileA
DeleteFileA
GetStdHandle
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
GetCurrentDirectoryW
WriteConsoleW
SetStdHandle
GetTimeZoneInformation
GetACP
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
PeekNamedPipe
GetDriveTypeW
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetFileType
GetModuleHandleExW
RtlUnwind
CreateTimerQueue
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
DuplicateHandle
VirtualProtect
VirtualFree
VirtualAlloc
LoadLibraryExW
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
ExitProcess
GetSystemTime
FormatMessageA
LoadLibraryA
GetFullPathNameW
GetFullPathNameA
GetTempPathA
GetFileAttributesA
UnlockFile
LockFileEx
LockFile
FlushFileBuffers
SetFilePointer
AreFileApisANSI
InterlockedIncrement
FindResourceExW
OutputDebugStringW
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
GetLocaleInfoW
CompareStringW
GetSystemTimeAsFileTime
TlsFree
TlsAlloc
CreateEventW
SetLastError
EncodePointer
TryEnterCriticalSection
GetProcAddress
HeapAlloc
HeapFree
GetProcessHeap
GetLastError
GetModuleHandleW
GetCurrentProcessId
CloseHandle
LoadLibraryW
GetModuleFileNameW
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
CreateDirectoryW
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
InitializeCriticalSection
EnterCriticalSection
CreateFileW
RemoveDirectoryW
GetWindowsDirectoryW
GetTempPathW
CreateProcessW
GetModuleFileNameA
lstrcmpiW
GetTickCount
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetSystemInfo
FindClose
ReadFile
WriteFile
GetFileSize
WaitForSingleObject
GetCurrentThreadId
GetExitCodeProcess
GetCurrentProcess
OpenProcess
LocalFree
LocalAlloc
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
GetLocalTime
Sleep
TerminateThread
CreateThread
DeleteCriticalSection
LeaveCriticalSection
ResetEvent

user32

SetMenuInfo
GetKeyState
CharNextW
FindWindowW
PostMessageW
GetWindowThreadProcessId
SetWindowPos
IsWindow
IsWindowVisible
BringWindowToTop
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
CharLowerW
GetFocus
keybd_event
GetSystemMetrics
GetForegroundWindow
GetWindowTextW
GetWindowRect
GetWindowLongW
SetWindowLongW
GetDesktopWindow
GetParent
FindWindowExW
GetClassNameW
SetTimer
KillTimer
SetRect
SendMessageW
DestroyWindow
RegisterWindowMessageW
DefWindowProcW
RegisterClassExW
CreateWindowExW
LoadCursorW
GetDC
ReleaseDC
PtInRect
SystemParametersInfoW
MonitorFromPoint
GetMonitorInfoW
EnumDisplayMonitors
ClientToScreen
WindowFromPoint
SendMessageTimeoutW
DialogBoxParamW
EndDialog
GetDlgItem
SetDlgItemTextW
SetWindowTextW
SetCursor
ShowWindow
IsIconic
InvalidateRect
CallWindowProcW
MoveWindow
GetDlgItemTextW
SetFocus
MessageBoxW
SetDlgItemInt
GetDlgItemInt
GetAsyncKeyState
ReleaseCapture
MessageBeep
ToAscii
SetCapture
OffsetRect
UpdateLayeredWindow
BeginPaint
EndPaint
ScreenToClient
SetRectEmpty
UnionRect
DrawTextW
GetCaretPos
GetGUIThreadInfo
GetClientRect
FillRect
GetCursorPos
CreateMenu
CreatePopupMenu
DestroyMenu
TrackPopupMenu
DeleteMenu
RemoveMenu
ModifyMenuW
InsertMenuW
EnableMenuItem

gdi32

SelectObject
GetObjectW
GetDIBits
CreateDCW
BitBlt
CreateDIBSection
SetTextColor
SetBkMode
GetDeviceCaps
CreateBitmap
MoveToEx
LineTo
CreatePen
TextOutW
GetTextExtentPoint32W
GetTextExtentPointW
ExcludeClipRect
CreateSolidBrush
CreateFontW
EnumFontsW
CreateICW
GetPixel
CreateCompatibleBitmap
DeleteObject
DeleteDC
CreateCompatibleDC
GetStockObject

advapi32

LookupAccountNameW
GetLengthSid
InitializeAcl
GetAclInformation
AddAce
GetAce
AddAccessAllowedAce
InitializeSecurityDescriptor
GetSecurityDescriptorControl
SetSecurityDescriptorDacl
GetSecurityDescriptorDacl
RegCloseKey
ImpersonateLoggedOnUser
RevertToSelf
SetSecurityInfo
SetNamedSecurityInfoW
ConvertStringSecurityDescriptorToSecurityDescriptorW
RegCreateKeyExW
DuplicateTokenEx
LookupAccountSidW
GetSecurityDescriptorSacl
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
EqualSid

shell32

SHAppBarMessage
ShellExecuteW
SHGetSpecialFolderPathW
SHGetFolderPathW

ole32

CreateStreamOnHGlobal

gdiplus

GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipCreateStringFormat
GdipDrawImageRectI
GdipCloneFont
GdipGetFontCollectionFamilyList
GdipCloneFontFamily
GdipFillRectangleI
GdipGetGenericFontFamilySansSerif
GdipCloneBitmapAreaI
GdipCreateBitmapFromStream
GdipGetImageRawFormat
GdipDisposeImage
GdipCloneImage
GdipFillPath
GdipDrawPath
GdipDrawLineI
GdipSetImageAttributesColorKeys
GdipBitmapSetPixel
GdipBitmapGetPixel
GdipSetPenDashStyle
GdipAddPathArcI
GdipAddPathLineI
GdipDeleteFont
GdipCreateFont
GdipCreateFontFamilyFromName
GdipDrawString
GdipDrawImageRectRectI
GdipSetImageAttributesColorMatrix
GdipCreateImageAttributes
GdipGetImageHeight
GdipGetImageWidth
GdipDeleteGraphics
GdipCreateFromHDC
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAlloc
GdipDisposeImageAttributes
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipPrivateAddFontFile
GdipGetFontCollectionFamilyCount
GdipDeletePrivateFontCollection
GdipNewPrivateFontCollection
GdipNewInstalledFontCollection
GdipFree
GdipSetStringFormatFlags
GdipCloneStringFormat
GdipDeleteStringFormat
GdipStringFormatGetGenericTypographic
GdipMeasureString
GdipGetFontSize
GdipGetFamily
GdipDeleteFontFamily
GdipDeletePath
GdipCreatePath
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipDrawLine

psapi

GetModuleFileNameExW

dbghelp

SymInitialize
SymGetModuleBase64
StackWalk64
EnumerateLoadedModules64
SymFunctionTableAccess64

Exports

Exports

CandWndProc
CompWndProc
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
StatusWndProc
UIWndProc

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 360KB - Virtual size: 359KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 804KB - Virtual size: 804KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

35e46c4774c900f14561fc97dd18a492

Headers

DLL Characteristics

File Characteristics

Imports

imm32

shlwapi

kernel32

user32

gdi32

advapi32

shell32

ole32

gdiplus

psapi

dbghelp

Exports

Exports

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 360KB - Virtual size: 359KB

.data Size: 56KB - Virtual size: 103KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 804KB - Virtual size: 804KB

.reloc Size: 87KB - Virtual size: 87KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 360KB - Virtual size: 359KB

.data
Size: 56KB - Virtual size: 103KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 804KB - Virtual size: 804KB

.reloc
Size: 87KB - Virtual size: 87KB