890c39d95f7963eda1a947aa75c1e171

Sharing

Copy URL Twitter E-mail

General

Target

890c39d95f7963eda1a947aa75c1e171
Size

1.1MB
MD5

890c39d95f7963eda1a947aa75c1e171
SHA1

87ba036d85572613cd3528516e209ba8e7b582a0
SHA256

35eff29e09e3eac28b82f38ff36d7c9c0df8b51507f7d002a33a4fae1519fa7c
SHA512

ad5f70a4031872041fd605c32b37ab4a12cc5770b273e1690f56c9ad37d92759030e71801d680b100b1d804b93a41131b10bd19e7c8f101df9fa072baad5f6f7
SSDEEP

24576:d772ThxkSrABgfVSwsRSU54ujBMpPiKoZilkr:d7KTHkSrABuVVOSU4gokr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
890c39d95f7963eda1a947aa75c1e171

Files

890c39d95f7963eda1a947aa75c1e171
.dll windows:6 windows x86 arch:x86

eb8ebf1fa276939da2ff4ab757ae96d1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetConsoleScreenBufferInfo
SetConsoleDisplayMode
CallNamedPipeW
CreateSemaphoreExW
SetLastError
GetPhysicallyInstalledSystemMemory
GetProfileSectionW
SetConsoleTextAttribute
GetCommProperties
FindFirstFileNameW
AddDllDirectory
RtlCaptureContext
EnterCriticalSection
VirtualFree
GetCommandLineW
GetHandleInformation
CreateTapePartition
SetConsoleActiveScreenBuffer
IsThreadpoolTimerSet
EnumCalendarInfoExEx
IsDBCSLeadByteEx
SetSystemPowerState
FindNextFileW
FindNLSString
GetCurrentProcess
lstrlenW
GetStdHandle
GetThreadErrorMode
GetProcessDEPPolicy
EnumCalendarInfoW
ReleaseSemaphore
GetCPInfo
SetDynamicTimeZoneInformation
CreateFileMappingNumaW
WriteFile
TzSpecificLocalTimeToSystemTimeEx
GetThreadIdealProcessorEx
lstrcpynW
TryAcquireSRWLockExclusive
CheckTokenMembershipEx
DeleteTimerQueue
RegisterWaitForSingleObject
GetModuleHandleExW
SetTimeZoneInformation
ExpandEnvironmentStringsW
GetSystemDefaultUILanguage
CreatePrivateNamespaceW
UnregisterWait
GetShortPathNameW
GetDiskFreeSpaceW
GetAppContainerNamedObjectPath
GetConsoleCursorInfo
SetCurrentConsoleFontEx
GetTimeFormatEx
GetPrivateProfileIntW
OutputDebugStringA
RtlPcToFileHeader
GetStringTypeExW
SetFileBandwidthReservation
DeviceIoControl
VirtualAlloc
AssignProcessToJobObject
GetNumberOfConsoleMouseButtons
WaitForDebugEvent
RemoveDirectoryW
GetProfileIntW
GetFinalPathNameByHandleW
PrefetchVirtualMemory
WakeAllConditionVariable
HeapLock
GetProcessIdOfThread
SetThreadpoolWaitEx
DisassociateCurrentThreadFromCallback
AddSecureMemoryCacheCallback
WakeConditionVariable
FindFirstStreamTransactedW
CreateThreadpoolIo
PurgeComm
CreateNamedPipeW
GetSystemTimes
InitializeProcThreadAttributeList
GetCommModemStatus
GetConsoleHistoryInfo
GetConsoleCP
GetThreadLocale
SetProcessShutdownParameters
GetGeoInfoW
AddScopedPolicyIDAce
SetThreadUILanguage
GetLocaleInfoEx
SetConsoleWindowInfo
GetNumaProcessorNodeEx
CheckTokenCapability
LocalHandle
GetProcessId
SignalObjectAndWait
DeleteTimerQueueEx
GetUserDefaultUILanguage
GetProductInfo
GetConsoleFontSize
CompareStringOrdinal
SetSystemFileCacheSize
DnsHostnameToComputerNameW
InitializeCriticalSectionAndSpinCount
GetThreadPreferredUILanguages
DeleteAtom
GetDynamicTimeZoneInformation
CreatePipe
Wow64GetThreadContext
SetSystemTime
SetErrorMode
LeaveCriticalSectionWhenCallbackReturns
InitializeConditionVariable
SetFilePointer
InitOnceInitialize
GetProcessMitigationPolicy
TryAcquireSRWLockShared
EnumUILanguagesW
GetNumaAvailableMemoryNode
GetQueuedCompletionStatus
GetCompressedFileSizeW
GetFileMUIPath
GetNumaProcessorNode
FlsGetValue
OpenFileById
GetEnvironmentVariableW
SetEndOfFile
GetSystemPowerStatus
FindFirstFileTransactedW
WaitForThreadpoolIoCallbacks
EnumResourceNamesW
UnlockFileEx
FlushProcessWriteBuffers
CreateBoundaryDescriptorW
FatalExit
GetTempPathW
GetWriteWatch
CreateMutexW
TrySubmitThreadpoolCallback
GetPrivateProfileSectionW
WaitForThreadpoolTimerCallbacks
SystemTimeToTzSpecificLocalTimeEx
CreateHardLinkW
GetConsoleScreenBufferInfoEx
FindClose
GetLocaleInfoW
WaitForSingleObject
GetCommMask
LocalAlloc
CreateFileW
GetDateFormatEx
GetFileAttributesW
FreeLibraryAndExitThread
GetCurrentThreadId
UnregisterBadMemoryNotification
GetFileAttributesTransactedW
OpenJobObjectW
MapViewOfFileExNuma
DebugActiveProcessStop
GetVersionExW
EnumSystemCodePagesW
GetThreadDescription
GetPrivateProfileSectionNamesW
WriteTapemark
UnregisterApplicationRecoveryCallback
OpenFileMappingW
CancelThreadpoolIo
GetUserPreferredUILanguages
WaitForThreadpoolWorkCallbacks
GetCommTimeouts
ApplicationRecoveryFinished
GetSystemDirectoryW
FreeEnvironmentStringsW
HeapWalk
CallbackMayRunLong
QueryMemoryResourceNotification
GlobalDeleteAtom
GetUILanguageInfo
ContinueDebugEvent
Wow64EnableWow64FsRedirection
GetAtomNameW
MapUserPhysicalPages
GlobalGetAtomNameW
GetApplicationRecoveryCallback
DuplicateHandle
HeapValidate
GetStringScripts
IsProcessInJob
GetModuleHandleA
GetSystemDefaultLangID
PrepareTape
DisconnectNamedPipe
RtlCaptureStackBackTrace
FreeResource
GlobalAddAtomW
FindFirstChangeNotificationW
LCIDToLocaleName
OpenProcess
HeapSize
GetVersion
SetProcessMitigationPolicy
CloseThreadpoolWait
ApplicationRecoveryInProgress
SwitchToFiber
PostQueuedCompletionStatus
CancelWaitableTimer
GetVolumeNameForVolumeMountPointW
QueueUserWorkItem
ClosePrivateNamespace
SetFileAttributesW
CloseThreadpoolCleanupGroup
EndUpdateResourceW
CreateEventW
SetFileAttributesTransactedW
ConvertThreadToFiberEx
MultiByteToWideChar
CloseThreadpoolCleanupGroupMembers
GetPrivateProfileStringW
Sleep
SetVolumeLabelW
GetConsoleMode
GetFileInformationByHandle
SetTapeParameters
LoadPackagedLibrary
QueryThreadProfiling
BuildCommDCBAndTimeoutsW
GetTempPathA
FormatMessageW
WritePrivateProfileStructW
CancelSynchronousIo
GetTimeZoneInformation
LocalFileTimeToFileTime
SetConsoleScreenBufferInfoEx
EnumSystemLanguageGroupsW
PowerCreateRequest
GetDevicePowerState
GetTickCount64
BuildCommDCBW
VerifyScripts
LCMapStringEx
SetCalendarInfoW
Wow64RevertWow64FsRedirection
GetLastError
GetLargestConsoleWindowSize
WaitForThreadpoolWaitCallbacks
EnumSystemLocalesEx
SetUserGeoID
CreateFileTransactedW
UpdateProcThreadAttribute
GetConsoleAliasesLengthW
TzSpecificLocalTimeToSystemTime
SetConsoleCursorInfo
GetLogicalProcessorInformationEx
GetFileAttributesExW
ReleaseSRWLockExclusive
SetCriticalSectionSpinCount
GetConsoleDisplayMode
GetConsoleProcessList
AddResourceAttributeAce
SetFileInformationByHandle
OutputDebugStringW
GetMaximumProcessorGroupCount
ConvertDefaultLocale
FindNextVolumeMountPointW
FillConsoleOutputCharacterW
ReadConsoleInputW
SetThreadpoolTimerEx
FlushViewOfFile
GlobalSize
GetThreadUILanguage
GetUserDefaultLCID
GetLogicalProcessorInformation
CloseThreadpoolTimer
GetNamedPipeHandleStateW
GetDiskFreeSpaceExW
GetSystemFileCacheSize
DisableThreadLibraryCalls
GetCurrentThread
VirtualProtect
AcquireSRWLockExclusive
TerminateThread
GetActiveProcessorGroupCount
EnumDateFormatsExEx
FindCloseChangeNotification
GetTapeParameters
WaitForSingleObjectEx
SetWaitableTimerEx
DefineDosDeviceW
ReclaimVirtualMemory
ClearCommBreak
QueryPerformanceFrequency
EnumResourceNamesExW
GetCommState
GlobalFlags
CreateHardLinkTransactedW
DeleteFileW
OpenSemaphoreW
InterlockedPushListSListEx
TransmitCommChar
GetSystemDEPPolicy
HeapReAlloc
CloseHandle
SetProcessPreferredUILanguages
WriteConsoleOutputAttribute
CreateThreadpoolCleanupGroup
GetProcessIoCounters
SetThreadpoolTimer
ReleaseSRWLockShared
ReleaseMutexWhenCallbackReturns
GetNativeSystemInfo
AllocateUserPhysicalPagesNuma
CompareStringEx
GetNumberFormatW
EnumResourceLanguagesW
FindNLSStringEx
RaiseException
FreeConsole
CreateSymbolicLinkTransactedW
GetProcessHeaps
BindIoCompletionCallback
SetThreadpoolWait
QueryProcessCycleTime
ReadFileEx
CreateThreadpoolTimer
LoadLibraryW
CancelIoEx
HeapSetInformation
FindResourceExW
GetActiveProcessorCount
LoadResource
DeleteProcThreadAttributeList
DiscardVirtualMemory
FindResourceW
EnumDateFormatsExW
GlobalFindAtomW
HeapAlloc
WriteConsoleInputW
Wow64SuspendThread
GetCurrencyFormatW
ClearCommError
DeleteSynchronizationBarrier
FatalAppExitW
GetLocalTime
GetConsoleOriginalTitleW
GetDefaultCommConfigW
GetUserGeoID
GetNLSVersionEx
GetCurrentDirectoryW
FillConsoleOutputAttribute
GetProcessPreferredUILanguages
UpdateResourceW
GetCurrentConsoleFontEx
CloseThreadpoolIo
HeapCompact
SwitchToThread
FindNextChangeNotification
AddSIDToBoundaryDescriptor
SetVolumeMountPointW
SetThreadIdealProcessor
GetNamedPipeClientSessionId
LocalSize
GetCurrentProcessorNumber
GetDurationFormatEx
GetThreadContext
ReadDirectoryChangesW
SubmitThreadpoolWork
SetLocaleInfoW
SetThreadGroupAffinity
GetWindowsDirectoryW
PeekConsoleInputW
WriteConsoleW
SetThreadPriorityBoost
VirtualLock
Beep
GlobalLock
UnregisterApplicationRestart
SetFilePointerEx
VirtualAllocEx
CreateMutexExW
DebugActiveProcess
FindFirstFileNameTransactedW
HeapQueryInformation
GetTimeFormatW
MoveFileExW
GetThreadId
GetProcessorSystemCycleTime
SetFileApisToOEM
LockFileEx
AcquireSRWLockShared
SetThreadStackGuarantee
GetFileSize
SetDefaultCommConfigW
CreateMemoryResourceNotification
DeleteCriticalSection
ExitProcess
FindAtomW
LCMapStringW
ReadProcessMemory
GetComputerNameW
SetProtectedPolicy
FindVolumeClose
DisableThreadProfiling
SetConsoleCP
FindFirstStreamW
GetCurrentProcessId
CopyFile2
GetProcessHeap
SystemTimeToFileTime
GetNumberOfConsoleInputEvents
SetThreadExecutionState
IsValidLocale
FreeLibrary
SetFirmwareEnvironmentVariableExW
CreateSemaphoreW
IsValidLanguageGroup
TransactNamedPipe
CopyFileW
FlushInstructionCache
GetProfileStringW
WideCharToMultiByte
CreateSymbolicLinkW
GetConsoleWindow
lstrcpyW
GetLongPathNameTransactedW
DeleteBoundaryDescriptor
RemoveVectoredContinueHandler
LocaleNameToLCID
VerifyVersionInfoW
GetThreadTimes
BeginUpdateResourceW
SystemTimeToTzSpecificLocalTime
FreeUserPhysicalPages
QueryFullProcessImageNameW
ReadConsoleOutputCharacterW
GetTempFileNameW
SetConsoleOutputCP
GetSystemTimeAsFileTime
GetFileType
AddAtomW
EnumSystemGeoID
TerminateJobObject
DeleteTimerQueueTimer
QueryIdleProcessorCycleTime
Wow64GetThreadSelectorEntry
GlobalMemoryStatus
GetFirmwareType
DeleteVolumeMountPointW
ReleaseSemaphoreWhenCallbackReturns
SetThreadErrorMode
VirtualFreeEx
CopyFileExW
CreateWaitableTimerExW
DebugBreak
SetProcessWorkingSetSize
GetTapeStatus
InterlockedPushEntrySList
SetConsoleCursorPosition
DosDateTimeToFileTime
SetThreadPreferredUILanguages
MapViewOfFile
GetProcessPriorityBoost
GetNumaNodeProcessorMaskEx
SetThreadContext
SetFileValidData
IsValidLocaleName
lstrcmpiW
GetProcessGroupAffinity
GetNLSVersion
CreateMailslotW
GetStringTypeW
InitializeSListHead
FreeLibraryWhenCallbackReturns
CreateIoCompletionPort
OpenMutexW
FindNextStreamW
SetCommTimeouts
GetTickCount
WaitNamedPipeW
CreateFiberEx
GetTimeZoneInformationForYear
GlobalUnlock
FlsFree
SetCommState
SetDllDirectoryW
SetCommConfig
GetCalendarInfoEx
ConvertThreadToFiber
SetTapePosition
lstrcmpW
GetProcessHandleCount
FlsAlloc
MulDiv
LocalUnlock
MapViewOfFileEx
GetFirmwareEnvironmentVariableW
MoveFileW
RegisterApplicationRestart
IsWow64Process
CheckNameLegalDOS8Dot3W
GetVolumeInformationByHandleW

user32

DestroyCursor
SetThreadDesktop
GetWindowPlacement
RegisterClassExW
GetShellWindow
SetMenuItemBitmaps
ArrangeIconicWindows
SetWindowTextW
GetSystemMetrics
RemovePropW
WaitForInputIdle
CreateWindowExW
FillRect
SetUserObjectInformationW
MonitorFromWindow
MonitorFromRect
CopyImage
GetPropW
keybd_event
MessageBoxW
CloseWindowStation
DeregisterShellHookWindow
DdeUnaccessData
GetDC
SetLastErrorEx
GetFocus
GetWindowRect
SetProcessDefaultLayout
MapVirtualKeyW
OpenIcon
GetMessageExtraInfo
UnregisterHotKey
ScrollDC
EnumWindowStationsW
SubtractRect
EnumDesktopsW
GetSystemMenu
DefWindowProcW
TabbedTextOutW
DeferWindowPos
CharPrevExA
GetMessageW
GetWindowTextLengthW
GetWindowLongW
GetThreadDesktop
InSendMessage
GetListBoxInfo
ChangeDisplaySettingsW
GetRawInputDeviceInfoW
GetCapture
DispatchMessageW
SetTimer
RedrawWindow
IsDialogMessageW
DestroyIcon
CopyRect
CreateIconIndirect
DefDlgProcW
GetSubMenu
EmptyClipboard
EnumDisplaySettingsExW
ExitWindowsEx
PeekMessageW
CreateCaret
UnregisterPowerSettingNotification
RegisterClassW
MapWindowPoints
CallMsgFilterW
SetWindowPlacement
GetDoubleClickTime
DdeDisconnectList
GetKeyboardLayout
GetKBCodePage
SetWindowDisplayAffinity
SetPhysicalCursorPos
EnumPropsW
LoadKeyboardLayoutW
IsProcessDPIAware
SetMenuDefaultItem
DrawFocusRect
RegisterHotKey
DialogBoxIndirectParamW
RegisterSuspendResumeNotification
SetProcessWindowStation
EnumWindows
WinHelpW
GetMessageTime
DestroyMenu
ChangeWindowMessageFilter
IsRectEmpty
GetWindowRgnBox
SetFocus
GetMenuStringW
BringWindowToTop
OpenInputDesktop
SetPropW
TranslateMessage
ScrollWindowEx
ChangeWindowMessageFilterEx
EnumDesktopWindows
CharToOemW
LoadCursorW
GetProcessDefaultLayout
DestroyCaret
GetClassNameW
SetParent
SetCapture
GetWindowDC
SetRectEmpty
EnableScrollBar
ExcludeUpdateRgn
SwitchDesktop
FlashWindowEx
GetDlgItemInt
SetWindowLongW
TrackPopupMenuEx
GetComboBoxInfo
CheckMenuItem
GetClientRect
ShowWindow
CloseClipboard
GetDlgItem
GetMenuInfo
AddClipboardFormatListener
GetClassLongW
DdeAbandonTransaction
DrawTextW
PostThreadMessageW
SetRect
LookupIconIdFromDirectoryEx
DrawCaption
PostQuitMessage
EnumDisplaySettingsW
DdeDisconnect
DdeGetData
DdeEnableCallback
GetSysColorBrush
CreateDialogIndirectParamW
RegisterPointerInputTargetEx
EnableMenuItem
SetDlgItemInt
SetProcessDPIAware
CreateMenu
IsWindowUnicode
GetParent
RegisterWindowMessageW
DialogBoxParamW
CascadeWindows
GetDCEx
SetCursorPos
SetUserObjectSecurity
BeginPaint
CharNextExA
GetNextDlgTabItem
EndPaint
SendMessageCallbackW
RegisterDeviceNotificationW

gdi32

GetObjectType
GetMapMode
CombineRgn
ArcTo
CreateEllipticRgn
CreateSolidBrush
DeleteObject
GetSystemPaletteUse
GetGlyphOutlineW
RestoreDC
Ellipse
GetViewportExtEx
SetMetaFileBitsEx
SelectClipRgn
SetViewportOrgEx
CreateDiscardableBitmap
LineTo
GetEnhMetaFilePaletteEntries
CreateFontIndirectExW
SetBkMode
GetRegionData
AngleArc
SetMapperFlags
SetTextColor
ExtEscape
GetBoundsRect
PolyTextOutW
SetViewportExtEx
EnumFontFamiliesW
SetMiterLimit
GetWindowOrgEx
GetRgnBox
GetDCBrushColor
PolyDraw
PolyBezier
GetEnhMetaFileHeader
CreateRectRgnIndirect
OffsetClipRgn
GetNearestPaletteIndex
GetFontLanguageInfo
CreateEllipticRgnIndirect
SetWindowOrgEx
CreateFontW
SetLayout
SetSystemPaletteUse
GetCharWidth32W
GetPaletteEntries
EndDoc
CreateBrushIndirect
GetCharWidthFloatW
AbortDoc
GetTextCharacterExtra
StretchBlt
PatBlt
GetTextExtentExPointW
CloseMetaFile
GetBkMode
CreateDIBSection
StartPage
SelectObject
SaveDC
EnumEnhMetaFile
SetRectRgn
GetBkColor
CreateMetaFileW
WidenPath
GetWinMetaFileBits
GetViewportOrgEx
GetROP2

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

shell32

SHGetFolderPathW

Exports

Exports

_gcry_mpi_get_const
asifwfuy_fsfiaufw
assuan_begin_confidential
assuan_check_version
assuan_client_parse_response
assuan_client_read_response
assuan_close_input_fd
assuan_close_output_fd
assuan_command_parse_fd
assuan_ctx_set_system_hooks
assuan_end_confidential
assuan_fdopen
assuan_free
assuan_get_active_fds
assuan_get_assuan_log_prefix
assuan_get_command_name
assuan_get_data_fp
assuan_get_flag
assuan_get_gpg_err_source
assuan_get_input_fd
assuan_get_log_cb
assuan_get_malloc_hooks
assuan_get_output_fd
assuan_get_peercred
assuan_get_pid
assuan_get_pointer
assuan_init_pipe_server
assuan_init_socket_server
assuan_inquire
assuan_inquire_ext
assuan_new
assuan_new_ext
assuan_pending_line
assuan_pipe_connect
assuan_process
assuan_process_done
assuan_process_next
assuan_read_line
assuan_receivefd
assuan_register_bye_notify
assuan_register_cancel_notify
assuan_register_command
assuan_register_input_notify
assuan_register_option_handler
assuan_register_output_notify
assuan_register_post_cmd_notify
assuan_register_pre_cmd_notify
assuan_register_reset_notify
assuan_release
assuan_send_data
assuan_sendfd
assuan_set_assuan_log_prefix
assuan_set_assuan_log_stream
gcry_calloc
gcry_calloc_secure
gcry_check_version
gcry_cipher_algo_info
gcry_cipher_algo_name
gcry_cipher_authenticate
gcry_cipher_checktag
gcry_cipher_close
gcry_cipher_ctl
gcry_cipher_decrypt
gcry_cipher_encrypt
gcry_cipher_get_algo_blklen
gcry_cipher_get_algo_keylen
gcry_cipher_gettag
gcry_cipher_info
gcry_cipher_map_name
gcry_cipher_mode_from_oid
gcry_cipher_open
gcry_cipher_setctr
gcry_cipher_setiv
gcry_cipher_setkey
gcry_control
gcry_create_nonce
gcry_ctx_release
gcry_err_code_from_errno
gcry_err_code_to_errno
gcry_err_make_from_errno
gcry_error_from_errno
gcry_free
gcry_get_config
gcry_is_secure
gcry_kdf_derive
gcry_log_debug
gcry_log_debughex
gcry_log_debugmpi
gcry_log_debugpnt
gcry_log_debugsxp
gcry_mac_algo_info
gcry_mac_algo_name
gcry_mac_close
gcry_mac_ctl
gcry_mac_get_algo
gcry_mac_get_algo_keylen
gcry_mac_get_algo_maclen
gcry_mac_map_name
gcry_mac_open
gcry_mac_read
gcry_mac_setiv
gcry_mac_setkey
gcry_mac_verify
gcry_mac_write
gcry_malloc
gcry_malloc_secure
gcry_md_algo_info
gcry_md_algo_name
gcry_md_close
gcry_md_copy
gcry_md_ctl
gcry_md_debug
gcry_md_enable
gcry_md_extract
gcry_md_get_algo
gcry_md_get_algo_dlen
gcry_md_hash_buffer
gcry_md_hash_buffers
gcry_md_info
gcry_md_is_enabled
gcry_md_is_secure
gcry_md_map_name
gcry_md_open
gcry_md_read
gcry_md_reset
gcry_md_setkey
gcry_md_write
gcry_mpi_abs
gcry_mpi_add
gcry_mpi_add_ui
gcry_mpi_addm
gcry_mpi_aprint
gcry_mpi_clear_bit
gcry_mpi_clear_flag
gcry_mpi_clear_highbit
gcry_mpi_cmp
gcry_mpi_cmp_ui
gcry_mpi_copy
gcry_mpi_div
gcry_mpi_dump
gcry_mpi_ec_add
gcry_mpi_ec_curve_point
gcry_mpi_ec_decode_point
gcry_mpi_ec_dup
gcry_mpi_ec_get_affine
gcry_mpi_ec_get_mpi
gcry_mpi_ec_get_point
gcry_mpi_ec_mul
gcry_mpi_ec_new
gcry_mpi_ec_set_mpi
gcry_mpi_ec_set_point
gcry_mpi_ec_sub
gcry_mpi_gcd
gcry_mpi_get_flag
gcry_mpi_get_nbits
gcry_mpi_get_opaque
gcry_mpi_invm
gcry_mpi_is_neg
gcry_mpi_lshift
gcry_mpi_mod
gcry_mpi_mul
gcry_mpi_mul_2exp
gcry_mpi_mul_ui
gcry_mpi_mulm
gcry_mpi_neg
gcry_mpi_new
gcry_mpi_point_copy
gcry_mpi_point_get
gcry_mpi_point_new
gcry_mpi_point_release
gcry_mpi_point_set
gcry_mpi_point_snatch_get
gcry_mpi_point_snatch_set
gcry_mpi_powm
gcry_mpi_print
gcry_mpi_randomize
gcry_mpi_release
gcry_mpi_rshift
gcry_mpi_scan
gcry_mpi_set
gcry_mpi_set_bit
gcry_mpi_set_flag
gcry_mpi_set_highbit
gcry_mpi_set_opaque
gcry_mpi_set_opaque_copy
gcry_mpi_set_ui
gcry_mpi_snatch
gcry_mpi_snew
gcry_mpi_sub
gcry_mpi_sub_ui
gcry_mpi_subm
gcry_mpi_swap
gcry_mpi_test_bit
gcry_pk_algo_info
gcry_pk_algo_name
gcry_pk_ctl
gcry_pk_decrypt
gcry_pk_encrypt
gcry_pk_genkey
gcry_pk_get_curve
gcry_pk_get_keygrip
gcry_pk_get_nbits
gcry_pk_get_param
gcry_pk_map_name
gcry_pk_sign
gcry_pk_testkey
gcry_pk_verify
gcry_prime_check
gcry_prime_generate
gcry_prime_group_generator
gcry_prime_release_factors
gcry_pubkey_get_sexp
gcry_random_add_bytes
gcry_random_bytes
gcry_random_bytes_secure
gcry_randomize
gcry_realloc
gcry_set_allocation_handler
gcry_set_fatalerror_handler
gcry_set_gettext_handler
gcry_set_log_handler
gcry_set_outofcore_handler
gcry_set_progress_handler
gcry_sexp_alist
gcry_sexp_append
gcry_sexp_build
gcry_sexp_build_array
gcry_sexp_cadr
gcry_sexp_canon_len
gcry_sexp_car
gcry_sexp_cdr
gcry_sexp_cons
gcry_sexp_create
gcry_sexp_dump
gcry_sexp_extract_param
gcry_sexp_find_token
gcry_sexp_length
gcry_sexp_new
gcry_sexp_nth
gcry_sexp_nth_buffer
gcry_sexp_nth_data
gcry_sexp_nth_mpi
gcry_sexp_nth_string
gcry_sexp_prepend
gcry_sexp_release
gcry_sexp_sprint
gcry_sexp_sscan
gcry_sexp_vlist
gcry_strdup
gcry_strerror
gcry_strsource
gcry_xcalloc
gcry_xcalloc_secure
gcry_xmalloc
gcry_xmalloc_secure
gcry_xrealloc
gcry_xstrdup
sgisueig_easufhawf
siddfhSaififh
vaifaeih_fahfh
vjsaeieg_aehgfheag
wiageyg_djgisahge

Sections

.code
Size: 638KB - Virtual size: 637KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 403KB - Virtual size: 412KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb8ebf1fa276939da2ff4ab757ae96d1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

Exports

Exports

Sections

.code Size: 638KB - Virtual size: 637KB

.rdata Size: 103KB - Virtual size: 102KB

.data Size: 403KB - Virtual size: 412KB

.reloc Size: 21KB - Virtual size: 21KB

.code
Size: 638KB - Virtual size: 637KB

.rdata
Size: 103KB - Virtual size: 102KB

.data
Size: 403KB - Virtual size: 412KB

.reloc
Size: 21KB - Virtual size: 21KB