2024-05-24_6732cebc8cf2f5d46b0aeb4b37404ed1_avoslocker

Sharing

Copy URL

Twitter E-mail

General

Target

2024-05-24_6732cebc8cf2f5d46b0aeb4b37404ed1_avoslocker
Size

3.9MB
MD5

6732cebc8cf2f5d46b0aeb4b37404ed1
SHA1

9a25c092746baebe01e4e1091aaa27a1934599ff
SHA256

2e4c89a28be379bee161f27f26256c44ef24524a858c4923da1551b22e71b595
SHA512

da16bb150e062365c615f0873fbec60bd353857e8117dbf28b415e75b2562fec34701e90f940fb315f4082b1eca251bfe79299cb32531bfd57b0f4982a96c633
SSDEEP

98304:hcqF6/Kgy7b2rzHh0kYH0qvfG6MrALU+tjZdj4Vf2cgWvbMEy0W:hRF6/Kgy7b2rzHhBYHtnG6MrAUYjZdjJ

Score

1^/10

Malware Config

Signatures

Files

2024-05-24_6732cebc8cf2f5d46b0aeb4b37404ed1_avoslocker
.exe windows:6 windows x86 arch:x86

665b7a9727c02fd9a5af996d9a55688d

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

29-04-2021 00:00

Not After

28-04-2036 23:59

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

09:0c:3a:aa:41:90:1d:6a:d3:21:fd:de:a9:1e:13:66
Certificate

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Not Before

20-03-2023 00:00

Not After

19-03-2026 23:59

Subject

CN=Broadcom Inc,O=Broadcom Inc,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Not Before

14-07-2023 00:00

Not After

13-10-2034 23:59

Subject

CN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

23-03-2022 00:00

Not After

22-03-2037 23:59

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Not Before

01-08-2022 00:00

Not After

09-11-2031 23:59

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d1:de:70:c6:5a:65:17:e0:b8:0c:ad:38:37:6a:80:23:e3:4c:ea:c4:a8:01:6b:72:69:ef:7e:33:1c:b6:7d:85
Signer

Actual PE Digest

d1:de:70:c6:5a:65:17:e0:b8:0c:ad:38:37:6a:80:23:e3:4c:ea:c4:a8:01:6b:72:69:ef:7e:33:1c:b6:7d:85

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\see_build\workDir\build\win32\release\PGP Viewer.pdb

Imports

comctl32

ord17
PropertySheetW

secur32

GetUserNameExW

wininet

InternetGetConnectedState

crypt32

CryptProtectData
CryptUnprotectData

uiautomationcore

UiaHostProviderFromHwnd
UiaReturnRawElementProvider

kernel32

GetCurrentProcessId
GetVersionExW
GetSystemTimeAsFileTime
lstrcmpiW
GetDateFormatA
CreateFileW
DeleteFileW
GetFileSize
GetTempFileNameW
ReadFile
GetTempPathW
LocalFree
lstrcmpiA
GetLastError
SetLastError
FormatMessageA
WaitForSingleObject
CreateThread
FindClose
FindFirstFileW
FindNextFileW
ExpandEnvironmentStringsW
CreateDirectoryW
GetFileAttributesW
CreateSemaphoreW
GetModuleFileNameW
GetEnvironmentVariableW
SetEnvironmentVariableW
WriteFile
GetSystemDirectoryW
LoadLibraryA
CopyFileW
GetCommandLineW
SetDllDirectoryW
GlobalSize
VerSetConditionMask
SetCurrentDirectoryW
GetLongPathNameW
RemoveDirectoryW
VerifyVersionInfoW
GetDateFormatW
GetTimeFormatW
GetCurrentProcess
OpenSemaphoreW
WriteConsoleW
HeapSize
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
HeapReAlloc
GetCurrentDirectoryW
GetFileAttributesExW
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GlobalUnlock
HeapFree
GetCurrentThread
GetConsoleOutputCP
ReadConsoleW
GetConsoleMode
CloseHandle
SetFilePointerEx
SetStdHandle
MoveFileExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
GetModuleHandleExW
ExitProcess
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
GetTimeZoneInformation
LoadLibraryExW
RtlUnwind
RaiseException
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
InitializeCriticalSectionAndSpinCount
DecodePointer
EncodePointer
GetStringTypeW
GetShortPathNameW
GetFullPathNameW
SetEndOfFile
GetFileSizeEx
MultiByteToWideChar
GetUserDefaultLangID
GetACP
CreateEventW
SetEvent
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateMutexW
ReleaseMutex
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
WaitForMultipleObjects
GlobalAlloc
Sleep
CreateMutexA
WideCharToMultiByte
MulDiv
DuplicateHandle
lstrcpynW
GetModuleFileNameA
GetModuleHandleA
lstrcmpW
GetTickCount
LoadLibraryW
GetProcAddress
FreeLibrary
FindResourceW
SizeofResource
LockResource
LoadResource
GetModuleHandleW
FreeResource
GlobalFree
GetStdHandle
GlobalLock
ReleaseSemaphore
HeapAlloc

user32

SetForegroundWindow
MessageBoxA
FindWindowW
GetTopWindow
GetWindow
MessageBoxW
GetKeyState
GetDesktopWindow
PostQuitMessage
GetClassNameW
IsZoomed
CreateWindowExW
SendMessageW
GetMonitorInfoW
MonitorFromWindow
DispatchMessageW
TranslateMessage
GetMessageW
AdjustWindowRect
CopyRect
IsWindow
LoadIconW
FillRect
ScreenToClient
BringWindowToTop
GetMessagePos
TrackMouseEvent
CheckMenuRadioItem
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnableMenuItem
CheckMenuItem
GetAncestor
CheckDlgButton
GetWindowRect
GetScrollInfo
SetScrollInfo
ScrollWindowEx
GetCapture
SystemParametersInfoW
GetWindowTextW
SetWindowTextW
GetDlgItemTextW
SetDlgItemTextW
EndDialog
DialogBoxParamW
GetSystemMetrics
EqualRect
GetScrollPos
AppendMenuW
CreatePopupMenu
IsWindowVisible
SetRectEmpty
SetFocus
CallWindowProcW
MessageBeep
RemovePropW
GetPropW
SetPropW
KillTimer
SetTimer
SetWindowPos
MoveWindow
SetLayeredWindowAttributes
ShowWindow
DestroyWindow
DefWindowProcW
RegisterClipboardFormatW
PtInRect
OffsetRect
UnionRect
IntersectRect
SetRect
ClientToScreen
SetCursor
ReleaseDC
GetDC
UpdateWindow
TrackPopupMenuEx
DestroyMenu
ReleaseCapture
SetCapture
LoadCursorW
GetParent
SetWindowLongW
GetWindowLongW
IsRectEmpty
InflateRect
DrawFocusRect
GetSysColor
GetClientRect
InvalidateRect
EndPaint
BeginPaint
GetFocus
GetDlgCtrlID
GetDlgItem
RegisterClassExW
UnregisterClassW
PostMessageW

gdi32

CreateFontIndirectW
SetWindowOrgEx
SelectObject
DeleteObject
SetBkColor
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetTextColor
GetDeviceCaps
DeleteDC
GetTextMetricsW

comdlg32

GetSaveFileNameW
ChooseColorW
ChooseFontW
GetOpenFileNameW

advapi32

RegOpenKeyExW
RegQueryValueExA
RegSetValueExW
RegOpenKeyExA
RegCreateKeyExW
OpenProcessToken
RegCloseKey
RegQueryValueExW

shell32

DragQueryFileW
DragQueryPoint
ShellExecuteW
CommandLineToArgvW
DragFinish
ShellExecuteExW
DragAcceptFiles
SHGetFolderPathW

ole32

CoInitializeEx
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
RegisterDragDrop
RevokeDragDrop
ReleaseStgMedium
CoUninitialize
CoCreateInstance
CLSIDFromString
OleInitialize
OleUninitialize
StgOpenStorageOnILockBytes
StgOpenStorageEx
CreateStreamOnHGlobal

oleaut32

SysAllocString
SysFreeString

pgpsdk

PGPNewOptionList
PGPContextReserveRandomBytes
PGPGetHashSize
PGPOSMIMESigner
PGPOFileNameString
PGPOArmorHeaderString
PGPOCharsetString
PGPOClearSign
PGPOCipherAlgorithm
PGPOCompression
PGPOConventionalEncrypt
PGPFreeOptionList
PGPOOutputFormat
PGPOSignWithKey
PGPIncKeyDBRefCount
PGPOSMIMEMatchCriterion
PGPOInputFormat
PGPOSendEventIfKeyFound
PGPOOldClearSigned
PGPODataIsASCII
PGPODetachedSig
PGPOOutputLineEndType
PGPPeekKeyDBObjKey
PGPX509GetEmailsPrintable
PGPGetKeyDBObjDataProperty
PGPFinalizeHash
PGPAppendOptionList
PGPBuildOptionList
PGPOEncryptToKeySet
PGPOLastOption
PGPOInputBuffer
PGPOAllocatedOutputBuffer
PGPOArmorOutput
PGPOExportPrivateKeys
PGPNewKeyDB
PGPFreeKeyDB
PGPPeekKeyDBRootKeySet
PGPGetKeyDBObjBooleanProperty
PGPGetKeyID
PGPGetKeyForUsage
PGPCopyKeys
PGPExport
PGPImport
PGPNewKeyIterFromKeyDB
PGPFreeKeyIter
PGPKeyIterNextKeyDBObj
PGPSyncTokenKeys
PGPNewData
PGPFreeData
PGPPeekContextMemoryMgr
PGPGetTime
PGPsdkInit
PGPsdkCleanup
PGPGlobalRandomPoolAddSystemState
PGPGlobalRandomPoolHasMinimumEntropy
PGPNewSecureData
PGPAddJobOptions
PGPODiscardOutput
PGPOPassphrase
PGPOKeyDBRef
PGPOOutputTARCache
PGPCountKeys
PGPPeekKeyDBObjKeyDB
PGPNewKeyIterFromKeySet
PGPOpenTARCacheFile
PGPFreeTARCache
PGPNewTARCacheIter
PGPFreeTARCacheIter
PGPTARCacheIterNextTARCacheObj
PGPGetTARCacheObjDataProperty
PGPExportTARCacheObj
PGPImportTARCacheObj
PGPOOutputFile
PGPORootPath
PGPOEncryptToKeyDBObj
PGPOInputTARCache
PGPContinueHash
PGPEncode
PGPDecode
PGPNewReconstruct
PGPNewReconstructEx
PGPMakeReconstruction
PGPGetReconstruction
PGPGetReconstructionPromptsFromData
PGPReconstruct
PGPFreeReconstruct
PGPOInputFile
PGPFlushKeyDB
PGPFindKeyByKeyID
PGPCountKeysInKeyDB
PGPNewEmptyKeySet
PGPFreeKeySet
PGPAddKey
PGPNewKeyDBObjBooleanFilter
PGPNewKeyDBObjDataFilter
PGPFreeFilter
PGPIntersectFilters
PGPFilterKeySet
PGPFilterKeyDB
PGPCopyKeyDBObj
PGPDeleteKeyDBObj
PGPKeyIterMove
PGPNewKeyIDFromString
PGPPeekKeyDBContext
PGPOpenKeyDBFile
PGPCompareKeyIDs
PGPGetReconstructionKeyIDFromData
PGPContextGetRandomBytes
PGPONullOption
PGPOEventHandler
PGPOSendNullEvents
PGPOPassThroughIfUnrecognized
PGPNewContext
PGPFreeContext
PGPFreeFileSpec
PGPGetStdTimeFromPGPTime
PGPOCacheNamedPassphrase
PGPOTokenNumber
PGPNewOneKeySet
PGPPeekKeySetKeyDB
PGPGetKeyDBObjNumericProperty
PGPGetKeyDBObjTimeProperty
PGPGetKeyDBObjAllocatedDataProperty
PGPGetPrimaryUserID
PGPGetPrimaryAttributeUserID
PGPAddAttributeUserID
PGPPassphraseIsValid
PGPTokenAuthIsValid
PGPKeyIterSeek
PGPGetKeyIDString
PGPPeekKeyDBObjContext
PGPPeekKeySetContext
PGPNewFileSpecFromFullPathU16
PGPOExportKeyDBObj
PGPChangePassphrase
PGPNewKeyDBObjDataFilterU16
PGPOKeyGenParams
PGPOKeyGenName
PGPOExpiration
PGPOKeyGenMasterKey
PGPOKeyFlags
PGPOKeyGenFast
PGPGenerateKey
PGPGenerateSubKey
PGPAddUserID
PGPDeleteFile
PGPGetTARCacheObjNumericProperty
PGPGetErrorString
PGPGetPrimaryUserIDName
PGPNewMemoryMgr
PGPValidateMemoryMgr
PGPReallocData
PGPNewHashContext
PGPFreeHashContext
PGPOFileInfo

pgpsdknl

PGPConnect
PGPSend
PGPReceive
PGPSelect
PGPGetLastSocketsError
PGPGetSocketOptions
PGPsdkNetworkLibInit
PGPsdkNetworkLibCleanup
PGPSocketsInit
PGPSocketsCleanup
PGPONetConnectTimeout
PGPONetReadTimeout
PGPONetWriteTimeout
PGPOKeyServerProtocol
PGPNewKeyServer
PGPFreeKeyServer
PGPCloseSocket
PGPKeyServerClose
PGPQueryKeyServer
PGPONetHostName
PGPKeyServerInit
PGPHostToNetLong
PGPFreeTLSContext
PGPFreeTLSSession
PGPNewTLSContext
PGPNewTLSSession
PGPtlsClose
PGPtlsIsReusedSession
PGPtlsGetRemoteAuthenticatedKey
PGPDottedToInternetAddress
PGPInternetAddressToDottedString
PGPSocketsEstablishTLSSession
PGPHostToNetShort
PGPKeyServerOpen
PGPSocketsCreateThreadStorage
PGPSocketsDisposeThreadStorage
PGPGetHostByName
PGPOpenSocket

wsock32

accept
getsockopt
htonl
gethostname
__WSAFDIsSet
inet_ntoa
htons
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
bind
closesocket
shutdown
WSAGetLastError
WSAStartup
gethostbyname
socket
connect

pgpiconv

libiconv_close
libiconv
libiconv_open

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

Exports

Exports

UTF8ToHtml
UTF8Toisolat1
__docbDefaultSAXHandler
__htmlDefaultSAXHandler
__oldXMLWDcompatibility
__xmlBufferAllocScheme
__xmlDefaultBufferSize
__xmlDefaultSAXHandler
__xmlDefaultSAXLocator
__xmlDeregisterNodeDefaultValue
__xmlDoValidityCheckingDefaultValue
__xmlErrEncoding
__xmlGenericError
__xmlGenericErrorContext
__xmlGetWarningsDefaultValue
__xmlIndentTreeOutput
__xmlKeepBlanksDefaultValue
__xmlLastError
__xmlLineNumbersDefaultValue
__xmlLoadExtDtdDefaultValue
__xmlOutputBufferCreateFilenameValue
__xmlParserDebugEntities
__xmlParserInputBufferCreateFilenameValue
__xmlParserVersion
__xmlPedanticParserDefaultValue
__xmlRaiseError
__xmlRegisterNodeDefaultValue
__xmlSaveNoEmptyTags
__xmlSimpleError
__xmlStructuredError
__xmlStructuredErrorContext
__xmlSubstituteEntitiesDefaultValue
__xmlTreeIndentString
docbDefaultSAXHandlerInit
htmlAttrAllowed
htmlAutoCloseTag
htmlCreateFileParserCtxt
htmlCreateMemoryParserCtxt
htmlCreatePushParserCtxt
htmlCtxtReadDoc
htmlCtxtReadFd
htmlCtxtReadFile
htmlCtxtReadIO
htmlCtxtReadMemory
htmlCtxtReset
htmlCtxtUseOptions
htmlDefaultSAXHandlerInit
htmlDocContentDumpFormatOutput
htmlDocContentDumpOutput
htmlDocDump
htmlDocDumpMemory
htmlDocDumpMemoryFormat
htmlElementAllowedHere
htmlElementStatusHere
htmlEncodeEntities
htmlEntityLookup
htmlEntityValueLookup
htmlFreeParserCtxt
htmlGetMetaEncoding
htmlHandleOmittedElem
htmlInitAutoClose
htmlIsAutoClosed
htmlIsBooleanAttr
htmlIsScriptAttribute
htmlNewDoc
htmlNewDocNoDtD
htmlNewParserCtxt
htmlNodeDump
htmlNodeDumpFile
htmlNodeDumpFileFormat
htmlNodeDumpFormatOutput
htmlNodeDumpOutput
htmlNodeStatus
htmlParseCharRef
htmlParseChunk
htmlParseDoc
htmlParseDocument
htmlParseElement
htmlParseEntityRef
htmlParseFile
htmlReadDoc
htmlReadFd
htmlReadFile
htmlReadIO
htmlReadMemory
htmlSAXParseDoc
htmlSAXParseFile
htmlSaveFile
htmlSaveFileEnc
htmlSaveFileFormat
htmlSetMetaEncoding
htmlTagLookup
initGenericErrorDefaultFunc
initdocbDefaultSAXHandler
inithtmlDefaultSAXHandler
initxmlDefaultSAXHandler
inputPop
inputPush
isolat1ToUTF8
namePop
namePush
nodePop
nodePush
valuePop
valuePush
xmlACatalogAdd
xmlACatalogDump
xmlACatalogRemove
xmlACatalogResolve
xmlACatalogResolvePublic
xmlACatalogResolveSystem
xmlACatalogResolveURI
xmlAddAttributeDecl
xmlAddChild
xmlAddChildList
xmlAddDocEntity
xmlAddDtdEntity
xmlAddElementDecl
xmlAddEncodingAlias
xmlAddID
xmlAddNextSibling
xmlAddNotationDecl
xmlAddPrevSibling
xmlAddRef
xmlAddSibling
xmlAllocOutputBuffer
xmlAllocParserInputBuffer
xmlAttrSerializeTxtContent
xmlAutomataCompile
xmlAutomataGetInitState
xmlAutomataIsDeterminist
xmlAutomataNewAllTrans
xmlAutomataNewCountTrans
xmlAutomataNewCountTrans2
xmlAutomataNewCountedTrans
xmlAutomataNewCounter
xmlAutomataNewCounterTrans
xmlAutomataNewEpsilon
xmlAutomataNewNegTrans
xmlAutomataNewOnceTrans
xmlAutomataNewOnceTrans2
xmlAutomataNewState
xmlAutomataNewTransition
xmlAutomataNewTransition2
xmlAutomataSetFinalState
xmlBoolToText
xmlBufContent
xmlBufEnd
xmlBufGetNodeContent
xmlBufNodeDump
xmlBufShrink
xmlBufUse
xmlBufferAdd
xmlBufferAddHead
xmlBufferCCat
xmlBufferCat
xmlBufferContent
xmlBufferCreate
xmlBufferCreateSize
xmlBufferCreateStatic
xmlBufferDetach
xmlBufferDump
xmlBufferEmpty
xmlBufferFree
xmlBufferGrow
xmlBufferLength
xmlBufferResize
xmlBufferSetAllocationScheme
xmlBufferShrink
xmlBufferWriteCHAR
xmlBufferWriteChar
xmlBufferWriteQuotedString
xmlBuildQName
xmlBuildRelativeURI
xmlBuildURI
xmlByteConsumed
xmlCanonicPath
xmlCatalogAdd
xmlCatalogAddLocal
xmlCatalogCleanup
xmlCatalogConvert
xmlCatalogDump
xmlCatalogFreeLocal
xmlCatalogGetDefaults
xmlCatalogGetPublic
xmlCatalogGetSystem
xmlCatalogIsEmpty
xmlCatalogLocalResolve
xmlCatalogLocalResolveURI
xmlCatalogRemove
xmlCatalogResolve
xmlCatalogResolvePublic
xmlCatalogResolveSystem
xmlCatalogResolveURI
xmlCatalogSetDebug
xmlCatalogSetDefaultPrefer
xmlCatalogSetDefaults
xmlCharEncCloseFunc
xmlCharEncFirstLine
xmlCharEncInFunc
xmlCharEncOutFunc
xmlCharInRange
xmlCharStrdup
xmlCharStrndup
xmlCheckFilename
xmlCheckHTTPInput
xmlCheckLanguageID
xmlCheckUTF8
xmlCheckVersion
xmlChildElementCount
xmlCleanupCharEncodingHandlers
xmlCleanupEncodingAliases
xmlCleanupGlobals
xmlCleanupInputCallbacks
xmlCleanupMemory
xmlCleanupOutputCallbacks
xmlCleanupParser
xmlCleanupThreads
xmlClearNodeInfoSeq
xmlClearParserCtxt
xmlConvertSGMLCatalog
xmlCopyAttributeTable
xmlCopyChar
xmlCopyCharMultiByte
xmlCopyDoc
xmlCopyDocElementContent
xmlCopyDtd
xmlCopyElementContent
xmlCopyElementTable
xmlCopyEntitiesTable
xmlCopyEnumeration
xmlCopyError
xmlCopyNamespace
xmlCopyNamespaceList
xmlCopyNode
xmlCopyNodeList
xmlCopyNotationTable
xmlCopyProp
xmlCopyPropList
xmlCreateDocParserCtxt
xmlCreateEntitiesTable
xmlCreateEntityParserCtxt
xmlCreateEnumeration
xmlCreateFileParserCtxt
xmlCreateIOParserCtxt
xmlCreateIntSubset
xmlCreateMemoryParserCtxt
xmlCreatePushParserCtxt
xmlCreateURI
xmlCreateURLParserCtxt
xmlCtxtGetLastError
xmlCtxtReadDoc
xmlCtxtReadFd
xmlCtxtReadFile
xmlCtxtReadIO
xmlCtxtReadMemory
xmlCtxtReset
xmlCtxtResetLastError
xmlCtxtResetPush
xmlCtxtUseOptions
xmlCurrentChar
xmlDOMWrapAdoptNode
xmlDOMWrapCloneNode
xmlDOMWrapFreeCtxt
xmlDOMWrapNewCtxt
xmlDOMWrapReconcileNamespaces
xmlDOMWrapRemoveNode
xmlDebugCheckDocument
xmlDebugDumpAttr
xmlDebugDumpAttrList
xmlDebugDumpDTD
xmlDebugDumpDocument
xmlDebugDumpDocumentHead
xmlDebugDumpEntities
xmlDebugDumpNode
xmlDebugDumpNodeList
xmlDebugDumpOneNode
xmlDebugDumpString
xmlDefaultSAXHandlerInit
xmlDelEncodingAlias
xmlDeregisterNodeDefault
xmlDetectCharEncoding
xmlDictCleanup
xmlDictCreate
xmlDictCreateSub
xmlDictExists
xmlDictFree
xmlDictGetUsage
xmlDictLookup
xmlDictOwns
xmlDictQLookup
xmlDictReference
xmlDictSetLimit
xmlDictSize
xmlDocCopyNode
xmlDocCopyNodeList
xmlDocDump
xmlDocDumpFormatMemory
xmlDocDumpFormatMemoryEnc
xmlDocDumpMemory
xmlDocDumpMemoryEnc
xmlDocFormatDump
xmlDocGetRootElement
xmlDocSetRootElement
xmlDumpAttributeDecl
xmlDumpAttributeTable
xmlDumpElementDecl
xmlDumpElementTable
xmlDumpEntitiesTable
xmlDumpEntityDecl
xmlDumpNotationDecl
xmlDumpNotationTable
xmlElemDump
xmlEncodeEntitiesReentrant
xmlEncodeSpecialChars
xmlErrMemory
xmlEscapeFormatString
xmlFileClose
xmlFileMatch
xmlFileOpen
xmlFileRead
xmlFindCharEncodingHandler
xmlFirstElementChild
xmlFree
xmlFreeAttributeTable
xmlFreeAutomata
xmlFreeCatalog
xmlFreeDoc
xmlFreeDocElementContent
xmlFreeDtd
xmlFreeElementContent
xmlFreeElementTable
xmlFreeEntitiesTable
xmlFreeEnumeration
xmlFreeIDTable
xmlFreeInputStream
xmlFreeMutex
xmlFreeNode
xmlFreeNodeList
xmlFreeNotationTable
xmlFreeNs
xmlFreeNsList
xmlFreeParserCtxt
xmlFreeParserInputBuffer
xmlFreePattern
xmlFreePatternList
xmlFreeProp
xmlFreePropList
xmlFreeRMutex
xmlFreeRefTable
xmlFreeStreamCtxt
xmlFreeTextReader
xmlFreeURI
xmlFreeValidCtxt
xmlGcMemGet
xmlGcMemSetup
xmlGetBufferAllocationScheme
xmlGetCharEncodingHandler
xmlGetCharEncodingName
xmlGetCompressMode
xmlGetDocCompressMode
xmlGetDocEntity
xmlGetDtdAttrDesc
xmlGetDtdElementDesc
xmlGetDtdEntity
xmlGetDtdNotationDesc
xmlGetDtdQAttrDesc
xmlGetDtdQElementDesc
xmlGetEncodingAlias
xmlGetExternalEntityLoader
xmlGetGlobalState
xmlGetID
xmlGetIntSubset
xmlGetLastChild
xmlGetLastError
xmlGetLineNo
xmlGetNoNsProp
xmlGetNodePath
xmlGetNsList
xmlGetNsProp
xmlGetParameterEntity
xmlGetPredefinedEntity
xmlGetProp
xmlGetRefs
xmlGetThreadId
xmlGetUTF8Char
xmlHasFeature
xmlHasNsProp
xmlHasProp
xmlHashAddEntry
xmlHashAddEntry2
xmlHashAddEntry3
xmlHashCopy
xmlHashCreate
xmlHashCreateDict
xmlHashDefaultDeallocator
xmlHashFree
xmlHashLookup
xmlHashLookup2
xmlHashLookup3
xmlHashQLookup
xmlHashQLookup2
xmlHashQLookup3
xmlHashRemoveEntry
xmlHashRemoveEntry2
xmlHashRemoveEntry3
xmlHashScan
xmlHashScan3
xmlHashScanFull
xmlHashScanFull3
xmlHashSize
xmlHashUpdateEntry
xmlHashUpdateEntry2
xmlHashUpdateEntry3
xmlIOParseDTD
xmlInitCharEncodingHandlers
xmlInitGlobals
xmlInitMemory
xmlInitNodeInfoSeq
xmlInitParser
xmlInitParserCtxt
xmlInitThreads
xmlInitializeCatalog
xmlInitializeDict
xmlInitializeGlobalState
xmlIsBaseChar
xmlIsBaseCharGroup
xmlIsBlank
xmlIsBlankNode
xmlIsChar
xmlIsCharGroup
xmlIsCombining
xmlIsCombiningGroup
xmlIsDigit
xmlIsDigitGroup
xmlIsExtender
xmlIsExtenderGroup
xmlIsID
xmlIsIdeographic
xmlIsIdeographicGroup
xmlIsLetter
xmlIsMainThread
xmlIsMixedElement
xmlIsPubidChar
xmlIsPubidChar_tab
xmlIsRef
xmlIsXHTML
xmlKeepBlanksDefault
xmlLastElementChild
xmlLineNumbersDefault
xmlLinkGetData
xmlListAppend
xmlListClear
xmlListCopy
xmlListCreate
xmlListDelete
xmlListDup
xmlListEmpty
xmlListEnd
xmlListFront
xmlListInsert
xmlListMerge
xmlListPopBack
xmlListPopFront
xmlListPushBack
xmlListPushFront
xmlListRemoveAll
xmlListRemoveFirst
xmlListRemoveLast
xmlListReverse
xmlListReverseSearch
xmlListReverseWalk
xmlListSearch
xmlListSize
xmlListSort
xmlListWalk
xmlLoadACatalog
xmlLoadCatalog
xmlLoadCatalogs
xmlLoadExternalEntity
xmlLoadSGMLSuperCatalog
xmlLockLibrary
xmlLsCountNode
xmlLsOneNode
xmlMalloc
xmlMallocAtomic
xmlMallocAtomicLoc
xmlMallocLoc
xmlMemBlocks
xmlMemDisplay
xmlMemDisplayLast
xmlMemFree
xmlMemGet
xmlMemMalloc
xmlMemRealloc
xmlMemSetup
xmlMemShow
xmlMemStrdup
xmlMemStrdupLoc
xmlMemUsed

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 481KB - Virtual size: 481KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 45KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

665b7a9727c02fd9a5af996d9a55688d

Code Sign

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9Certificate

Extended Key Usages

Key Usages

09:0c:3a:aa:41:90:1d:6a:d3:21:fd:de:a9:1e:13:66Certificate

Extended Key Usages

Key Usages

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate

Extended Key Usages

Key Usages

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate

Extended Key Usages

Key Usages

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate

Key Usages

d1:de:70:c6:5a:65:17:e0:b8:0c:ad:38:37:6a:80:23:e3:4c:ea:c4:a8:01:6b:72:69:ef:7e:33:1c:b6:7d:85Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

comctl32

secur32

wininet

crypt32

uiautomationcore

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

pgpsdk

pgpsdknl

wsock32

pgpiconv

version

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 481KB - Virtual size: 481KB

.data Size: 45KB - Virtual size: 58KB

.rsrc Size: 675KB - Virtual size: 674KB

.reloc Size: 135KB - Virtual size: 135KB

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Certificate

09:0c:3a:aa:41:90:1d:6a:d3:21:fd:de:a9:1e:13:66
Certificate

05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16
Certificate

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b
Certificate

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Certificate

d1:de:70:c6:5a:65:17:e0:b8:0c:ad:38:37:6a:80:23:e3:4c:ea:c4:a8:01:6b:72:69:ef:7e:33:1c:b6:7d:85
Signer

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 481KB - Virtual size: 481KB

.data
Size: 45KB - Virtual size: 58KB

.rsrc
Size: 675KB - Virtual size: 674KB

.reloc
Size: 135KB - Virtual size: 135KB