General

Malware Config

Signatures

Files

• 2dd5d9efd333aa9f9e0651f6d49c382620c5d4430a603c3d237d18d2cc16920a

  .dll windows:5 windows x86 arch:x86

  5097eebf3a14cd0b4a0a94210b95984e

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_RELOCS_STRIPPED

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_LARGE_ADDRESS_AWARE

  IMAGE_FILE_32BIT_MACHINE

  IMAGE_FILE_DLL

  PDB Paths

  Multimedia.pdb

  Imports

  kernel32

  GetFileAttributesW

  GetCurrentProcessId

  GetCurrentThreadId

  QueryPerformanceCounter

  GetVersion

  IsDebuggerPresent

  SetUnhandledExceptionFilter

  UnhandledExceptionFilter

  GetCurrentProcess

  TerminateProcess

  InterlockedCompareExchange

  Sleep

  InterlockedExchange

  DecodePointer

  LoadLibraryW

  GetLastError

  SetLastError

  GetModuleFileNameW

  OutputDebugStringA

  GetVersionExA

  FreeLibrary

  DisableThreadLibraryCalls

  GetDriveTypeA

  GetComputerNameA

  GetModuleFileNameA

  LoadLibraryExA

  IsProcessorFeaturePresent

  LoadLibraryA

  GetProcAddress

  GetModuleHandleW

  GetSystemTimeAsFileTime

  GetModuleHandleA

  FindResourceA

  LoadResource

  SizeofResource

  FreeResource

  LockResource

  lstrcatA

  lstrlenA

  lstrcpyA

  lstrcpynA

  GetTickCount

  FindAtomW

  EncodePointer

  user32

  RemovePropA

  EnumDisplayMonitors

  GetClientRect

  ClientToScreen

  GetWindowRect

  GetSysColor

  GetMonitorInfoA

  SetPropW

  IsWindowEnabled

  EnableWindow

  GetParent

  FindWindowA

  GetFocus

  MoveWindow

  GetPropW

  wsprintfA

  GetDesktopWindow

  AdjustWindowRectEx

  SetPropA

  CreateWindowExA

  UnregisterClassA

  RegisterClassA

  GetDC

  ReleaseDC

  SetWindowPos

  GetPropA

  SetFocus

  BeginPaint

  EndPaint

  DefWindowProcA

  DestroyWindow

  LoadImageA

  gdi32

  GetStockObject

  GetClipBox

  PatBlt

  CreateDCA

  GetDeviceCaps

  CreateDIBSection

  DeleteObject

  GetObjectA

  CreateCompatibleDC

  SelectObject

  GetDIBColorTable

  DeleteDC

  BitBlt

  CreateSolidBrush

  CreateFontIndirectA

  GetCharWidthA

  advapi32

  RegQueryValueExA

  RegCloseKey

  RegOpenKeyA

  msvcp100

  ?_Xout_of_range@std@@YAXPBD@Z

  ?infinity@?$numeric_limits@N@std@@SANXZ

  ?_Xlength_error@std@@YAXPBD@Z

  msvcr100

  _HUGE

  sscanf

  memchr

  isdigit

  modf

  strncpy_s

  _fstat64i32

  strchr

  toupper

  isupper

  tolower

  islower

  mbstowcs_s

  _close

  free

  strncmp

  fputc

  fprintf

  __iob_func

  _snprintf

  vfprintf

  fflush

  _vsnprintf_s

  malloc

  isprint

  realloc

  _strtoui64

  calloc

  _errno

  _read

  ?_open@@YAHPBDHH@Z

  _strdup

  ??9type_info@@QBE_NABV0@@Z

  __RTtypeid

  strstr

  atoi

  atol

  _stricmp

  wcsncpy

  strncat

  _vsnprintf

  _strlwr

  isalnum

  sin

  cos

  acos

  atof

  ldexp

  strpbrk

  _unlock

  __dllonexit

  _lock

  _onexit

  _except_handler4_common

  ?_wopen@@YAHPB_WHH@Z

  ?terminate@@YAXXZ

  _malloc_crt

  _encoded_null

  _initterm

  _initterm_e

  _amsg_exit

  __CppXcptFilter

  ?_type_info_dtor_internal_method@type_info@@QAEXXZ

  _crt_debugger_hook

  __clean_type_info_names_internal

  strcmp

  strrchr

  ??_V@YAXPAX@Z

  memcmp

  ??0exception@std@@QAE@ABV01@@Z

  strtol

  _mbsstr

  _itoa_s

  _set_invalid_parameter_handler

  strlen

  ??1exception@std@@UAE@XZ

  ?what@exception@std@@UBEPBDXZ

  ??0exception@std@@QAE@ABQBD@Z

  memmove

  ??2@YAPAXI@Z

  memset

  clock

  _CxxThrowException

  memcpy

  __CxxFrameHandler3

  ??3@YAXPAX@Z

  _purecall

  vsprintf_s

  isalpha

  isxdigit

  labs

  isspace

  Exports

  Exports

  PlugInMain

  Sections

  .text

  Size: 837KB - Virtual size: 837KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .rdata

  Size: 338KB - Virtual size: 338KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .data

  Size: 84KB - Virtual size: 96KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 135KB - Virtual size: 135KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 487KB - Virtual size: 488KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ