d73994828a52029a69a7352547122fe7353d0ce273c4683c9bada5fe56e5e16e

Sharing

Copy URL Twitter E-mail

General

Target

d73994828a52029a69a7352547122fe7353d0ce273c4683c9bada5fe56e5e16e
Size

424KB
MD5

4701a84997a125a197c652d9971426d8
SHA1

f02e7b3f095ae282a21a520d126b505d020f59a3
SHA256

d73994828a52029a69a7352547122fe7353d0ce273c4683c9bada5fe56e5e16e
SHA512

d610a571e6b2b489b363b0939bc5c090925616698884ae23b1d3e1477b24ef0ab258c41cc432a01ee84598770936a45c9ae96620a63738861b877ad9cf5473a4
SSDEEP

6144:dJw5P0mR1bHI01J/LW3w7RUw50j6fbnFNr/GwgSMsn5HIQ/bSBBMxM6Qb:7wVv1W3xwdbn3rHgGO8SLT6

Score

1^/10

Malware Config

Signatures

Files

d73994828a52029a69a7352547122fe7353d0ce273c4683c9bada5fe56e5e16e
.dll windows x86

8fc8d2aeb26153e5af5a4b8dcc7deaa0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
CreateFileMappingA
DeleteCriticalSection
EnterCriticalSection
GetFileAttributesA
GetFileAttributesExA
GetFullPathNameA
GetLastError
GetLongPathNameA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetSystemWindowsDirectoryA
GetTempPathA
InitializeCriticalSection
InterlockedExchange
IsDBCSLeadByteEx
LeaveCriticalSection
MapViewOfFile
MultiByteToWideChar
Sleep
UnmapViewOfFile
WideCharToMultiByte

Exports

Exports

BcAtomicCreate
BcAtomicDeleteNew
BcAtomicDestroy
BcAtomicLock
BcAtomicNewFile
BcAtomicOrigFile
BcAtomicReplaceOrig
BcAtomicUnlock
BcBlanksAdd
BcBlanksCreate
BcBlanksDestroy
BcBlanksIsMember
BcCacheCopySet
BcCacheDir
BcCacheNumFont
BcCacheNumSubdir
BcCacheSubdir
BcCharSetAddChar
BcCharSetCopy
BcCharSetCount
BcCharSetCoverage
BcCharSetCreate
BcCharSetDestroy
BcCharSetEqual
BcCharSetFirstPage
BcCharSetHasChar
BcCharSetIntersect
BcCharSetIntersectCount
BcCharSetIsSubset
BcCharSetMerge
BcCharSetNew
BcCharSetNextPage
BcCharSetSubtract
BcCharSetSubtractCount
BcCharSetUnion
BcConfigAppFontAddDir
BcConfigAppFontAddFile
BcConfigAppFontClear
BcConfigBuildFonts
BcConfigCreate
BcConfigDestroy
BcConfigEnableHome
BcConfigFilename
BcConfigGetBlanks
BcConfigGetCache
BcConfigGetCacheDirs
BcConfigGetConfigDirs
BcConfigGetConfigFiles
BcConfigGetCurrent
BcConfigGetFontDirs
BcConfigGetFonts
BcConfigGetRescanInterval
BcConfigGetRescanInverval
BcConfigHome
BcConfigParseAndLoad
BcConfigReference
BcConfigSetCurrent
BcConfigSetRescanInterval
BcConfigSetRescanInverval
BcConfigSubstitute
BcConfigSubstituteWithPat
BcConfigUptoDate
BcDefaultSubstitute
BcDirCacheLoad
BcDirCacheLoadFile
BcDirCacheRead
BcDirCacheUnlink
BcDirCacheUnload
BcDirCacheValid
BcDirSave
BcDirScan
BcFileIsDir
BcFileScan
BcFini
BcFontList
BcFontMatch
BcFontRenderPrepare
BcFontSetAdd
BcFontSetCreate
BcFontSetDestroy
BcFontSetList
BcFontSetMatch
BcFontSetPrint
BcFontSetSort
BcFontSetSortDestroy
BcFontSort
BcFreeTypeCharIndex
BcFreeTypeCharSet
BcFreeTypeCharSetAndSpacing
BcFreeTypeQuery
BcFreeTypeQueryFace
BcGetLangs
BcGetVersion
BcInit
BcInitBringUptoDate
BcInitLoadConfig
BcInitLoadConfigAndFonts
BcInitReinitialize
BcLangGetCharSet
BcLangSetAdd
BcLangSetCompare
BcLangSetContains
BcLangSetCopy
BcLangSetCreate
BcLangSetDestroy
BcLangSetEqual
BcLangSetGetLangs
BcLangSetHasLang
BcLangSetHash
BcMatrixCopy
BcMatrixEqual
BcMatrixMultiply
BcMatrixRotate
BcMatrixScale
BcMatrixShear
BcNameConstant
BcNameGetConstant
BcNameGetObjectType
BcNameParse
BcNameRegisterConstants
BcNameRegisterObjectTypes
BcNameUnparse
BcNameUnregisterConstants
BcNameUnregisterObjectTypes
BcObjectSetAdd
BcObjectSetBuild
BcObjectSetCreate
BcObjectSetDestroy
BcObjectSetVaBuild
BcPatternAdd
BcPatternAddBool
BcPatternAddCharSet
BcPatternAddDouble
BcPatternAddFTFace
BcPatternAddInteger
BcPatternAddLangSet
BcPatternAddMatrix
BcPatternAddString
BcPatternAddWeak
BcPatternBuild
BcPatternCreate
BcPatternDel
BcPatternDestroy
BcPatternDuplicate
BcPatternEqual
BcPatternEqualSubset
BcPatternFilter
BcPatternFormat
BcPatternGet
BcPatternGetBool
BcPatternGetCharSet
BcPatternGetDouble
BcPatternGetFTFace
BcPatternGetInteger
BcPatternGetLangSet
BcPatternGetMatrix
BcPatternGetString
BcPatternHash
BcPatternPrint
BcPatternReference
BcPatternRemove
BcPatternVaBuild
BcStrBasename
BcStrCmp
BcStrCmpIgnoreCase
BcStrCopy
BcStrCopyFilename
BcStrDirname
BcStrDowncase
BcStrFree
BcStrListCreate
BcStrListDone
BcStrListNext
BcStrPlus
BcStrSetAdd
BcStrSetAddFilename
BcStrSetCreate
BcStrSetDel
BcStrSetDestroy
BcStrSetEqual
BcStrSetMember
BcStrStr
BcStrStrIgnoreCase
BcUcs4ToUtf8
BcUtf16Len
BcUtf16ToUcs4
BcUtf8Len
BcUtf8ToUcs4
BcValueDestroy
BcValueEqual
BcValuePrint
GL70

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/14
Size: 512B - Virtual size: 160B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/29
Size: 512B - Virtual size: 222B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/71
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/83
Size: 512B - Virtual size: 216B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/96
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/107
Size: 512B - Virtual size: 336B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fc8d2aeb26153e5af5a4b8dcc7deaa0

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 128KB

.data Size: 2KB - Virtual size: 2KB

.rdata Size: 56KB - Virtual size: 56KB

/4 Size: 512B - Virtual size: 172B

.bss Size: - Virtual size: 3KB

.edata Size: 5KB - Virtual size: 5KB

.idata Size: 3KB - Virtual size: 3KB

.reloc Size: 4KB - Virtual size: 4KB

/14 Size: 512B - Virtual size: 160B

/29 Size: 512B - Virtual size: 222B

/45 Size: 6KB - Virtual size: 5KB

/57 Size: 2KB - Virtual size: 1KB

/71 Size: 1KB - Virtual size: 1KB

/83 Size: 512B - Virtual size: 216B

/96 Size: 152KB - Virtual size: 149KB

/107 Size: 512B - Virtual size: 336B

.text
Size: 128KB - Virtual size: 128KB

.data
Size: 2KB - Virtual size: 2KB

.rdata
Size: 56KB - Virtual size: 56KB

/4
Size: 512B - Virtual size: 172B

.bss
Size: - Virtual size: 3KB

.edata
Size: 5KB - Virtual size: 5KB

.idata
Size: 3KB - Virtual size: 3KB

.reloc
Size: 4KB - Virtual size: 4KB

/14
Size: 512B - Virtual size: 160B

/29
Size: 512B - Virtual size: 222B

/45
Size: 6KB - Virtual size: 5KB

/57
Size: 2KB - Virtual size: 1KB

/71
Size: 1KB - Virtual size: 1KB

/83
Size: 512B - Virtual size: 216B

/96
Size: 152KB - Virtual size: 149KB

/107
Size: 512B - Virtual size: 336B