walpoleanAfghanets[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

walpoleanAfghanets.dll
Size

263KB
MD5

39332d5ae3d37b3b6a398d08d09a727e
SHA1

51d88840bfa568139255c4442ff0f5ee5d15cd34
SHA256

635178b2a4f8644dd13d05d65c33ff801a5fda38bffaae838e2f6f994f48ded6
SHA512

772ba50e4ccf07ea0a474c68c27f0b4e0ec4e4ae986c9bb5eb9912dc2541320146ea021043ac6d646656c042d089d3abbf4f9cd89e834a1a18d6708a612b8fde
SSDEEP

6144:woGZATIJ/rRDAmZ0CI1jp8qTiAS1fW0PBJ+Y:woGGTM/hnZ0VayYv+Y

Score

1^/10

Malware Config

Signatures

Files

walpoleanAfghanets.dll
.dll windows x86

ecf8c50c00e92a66342ac4c56bc8d1f7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetAsyncKeyState
GetKeyState
VkKeyScanExW
MapVirtualKeyW
CallNextHookEx
GetKeyNameTextW
GetKeyboardLayout
UnhookWindowsHookEx
SetWindowsHookExW

kernel32

GetStringTypeW
CreateFileW
DecodePointer
WriteConsoleW
CloseHandle
SetFilePointerEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetConsoleCP
GetACP
HeapAlloc
LCMapStringW
HeapFree
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStdHandle
GetFileType
HeapSize
HeapReAlloc
SetStdHandle
WriteFile
FlushFileBuffers
GetConsoleMode

Exports

Exports

ExecuteBang
Finalize
GL70
Update

Sections

.text
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 152KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ecf8c50c00e92a66342ac4c56bc8d1f7

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

Exports

Exports

Sections

.text Size: 95KB - Virtual size: 94KB

.data Size: 152KB - Virtual size: 154KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 95KB - Virtual size: 94KB

.data
Size: 152KB - Virtual size: 154KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 4KB