4f013e97474b3a0f849af73602f382dbe5564d9594a1448dcae50f18ccc75395

Sharing

Copy URL Twitter E-mail

General

Target

4f013e97474b3a0f849af73602f382dbe5564d9594a1448dcae50f18ccc75395
Size

512KB
MD5

4c411aadfb84754b8fd9b0707d4bf91f
SHA1

fa84f3fdecd98e1dd4bb61b60ad097372c09de3c
SHA256

4f013e97474b3a0f849af73602f382dbe5564d9594a1448dcae50f18ccc75395
SHA512

673f340ef40d0acb7d4e100143ba7b42aeb5ddad62c867ee4d724c43e1e5b024157f7a4bcdf5b29b7d7db862697f80c08933981885246efd28b521f6139b7e18
SSDEEP

12288:sA77jDjuFk4LJnqe4qRQhQePCdMgl6kf1TcE+y/wSBEyL/:sA77jDjuFkuJnqe4qRQhQePCd9l6kf/x

Score

N/A

Malware Config

Signatures

Files

4f013e97474b3a0f849af73602f382dbe5564d9594a1448dcae50f18ccc75395
.dll windows x86

68ab887098483c51b894f3726091996f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

msvcrt

_onexit
realloc
__dllonexit
_adjust_fdiv
_initterm
free
_wsplitpath
_vsnwprintf
memmove
iswalpha
malloc
wcschr
_mbstrlen
wcscat
swprintf
_mbscpy
wcsstr
_snwprintf
wcsncmp
_wcsnset
_itow
qsort
wcsncpy
wcsrchr
_mbsicmp
_wcsicmp
wcslen
wcscmp
_except_handler3
wcscpy

rpcrt4

NdrServerCall2
NdrClientCall2
RpcBindingInqAuthClientW
RpcBindingSetAuthInfoW
RpcBindingFree
RpcServerUnregisterIf
RpcBindingServerFromClient
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
RpcServerUseProtseqEpW
RpcServerRegisterIfEx
RpcServerListen
RpcServerRegisterIf
RpcServerRegisterAuthInfoW
RpcMgmtStopServerListening
RpcMgmtWaitServerListen

kernel32

DeleteFileW
CloseHandle
WriteFile
GetFileSize
GetFullPathNameW
GetTempFileNameW
GetTempPathW
GetFileAttributesW
GetLocalTime
ReadFile
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapDestroy
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
MultiByteToWideChar
WideCharToMultiByte
ExpandEnvironmentStringsW
GetVersionExW
GetDateFormatW
CreateDirectoryW
GetVersion
GetCurrentThread
Sleep
CreateEventW
OpenEventW
SetEvent
WaitForSingleObject
SetEndOfFile
SetFilePointer
UnmapViewOfFile
MoveFileExW
GetFileType
CreateFileW
SystemTimeToFileTime
GetSystemTime
MapViewOfFileEx
CreateFileMappingW
CopyFileW
GetStringTypeExW
GetTimeFormatW
LocalFileTimeToFileTime
FileTimeToSystemTime
InitializeCriticalSection
DeleteCriticalSection
lstrlenW
GetSystemTimeAsFileTime
LocalAlloc
PostQueuedCompletionStatus
GetLastError
LocalFree
EnterCriticalSection
IsBadReadPtr
LeaveCriticalSection
GetComputerNameW
SetLastError
VirtualFree
VirtualAlloc
ReleaseMutex
WaitForMultipleObjects
MapViewOfFile
SetEnvironmentVariableW
CreateMutexW
OpenMutexW
MulDiv
FreeLibrary

shell32

SHChangeNotify
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteExW

advapi32

IsValidSid
SetEntriesInAclW
FreeSid
SetSecurityDescriptorDacl
OpenThreadToken
OpenProcessToken
GetTokenInformation
RegCloseKey
RegOpenKeyExW
GetSecurityDescriptorLength
GetSecurityDescriptorControl
IsValidSecurityDescriptor
RegQueryValueExW
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyExW
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
QueryServiceStatus
OpenServiceW
OpenSCManagerW
GetLengthSid
CopySid
CloseServiceHandle
RegEnumKeyExW
RegSetValueExW
RegNotifyChangeKeyValue
AllocateAndInitializeSid
StartServiceW

winspool.drv

ClosePrinter
OpenPrinterW
EnumPrintersW
DocumentPropertiesW
SetJobW
GetJobW
SetPrinterW
AddPrinterW
GetPrinterW

gdi32

EndPage
StartPage
StartDocW
CreateDCW
DeleteObject
CreateFontIndirectW
SelectObject
StretchDIBits
GetDeviceCaps
DeleteEnhMetaFile
GetTextMetricsW
SetTextColor
LPtoDP
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
SetBkMode
RestoreDC
PlayEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
SaveDC
SelectClipRgn
CreateRectRgnIndirect
DeleteDC
EndDoc

user32

wsprintfW
PostMessageW
DrawTextW

ole32

CLSIDFromString

Exports

Exports

FXSAPIFree
FXSAPIInitialize
FaxAbort
FaxAccessCheck
FaxAccessCheckEx
FaxAddOutboundGroupA
FaxAddOutboundGroupW
FaxAddOutboundRuleA
FaxAddOutboundRuleW
FaxAnswerCall
FaxCheckValidFaxFolder
FaxClose
FaxCompleteJobParamsA
FaxCompleteJobParamsW
FaxConnectFaxServerA
FaxConnectFaxServerW
FaxEnableRoutingMethodA
FaxEnableRoutingMethodW
FaxEndMessagesEnum
FaxEnumGlobalRoutingInfoA
FaxEnumGlobalRoutingInfoW
FaxEnumJobsA
FaxEnumJobsExA
FaxEnumJobsExW
FaxEnumJobsW
FaxEnumMessagesA
FaxEnumMessagesW
FaxEnumOutboundGroupsA
FaxEnumOutboundGroupsW
FaxEnumOutboundRulesA
FaxEnumOutboundRulesW
FaxEnumPortsA
FaxEnumPortsExA
FaxEnumPortsExW
FaxEnumPortsW
FaxEnumRoutingExtensionsA
FaxEnumRoutingExtensionsW
FaxEnumRoutingMethodsA
FaxEnumRoutingMethodsW
FaxEnumerateProvidersA
FaxEnumerateProvidersW
FaxFreeBuffer
FaxFreeSenderInformation
FaxGetActivityLoggingConfigurationA
FaxGetActivityLoggingConfigurationW
FaxGetArchiveConfigurationA
FaxGetArchiveConfigurationW
FaxGetConfigWizardUsed
FaxGetConfigurationA
FaxGetConfigurationW
FaxGetCountryListA
FaxGetCountryListW
FaxGetDeviceStatusA
FaxGetDeviceStatusW
FaxGetExtensionDataA
FaxGetExtensionDataW
FaxGetJobA
FaxGetJobExA
FaxGetJobExW
FaxGetJobW
FaxGetLoggingCategoriesA
FaxGetLoggingCategoriesW
FaxGetMessageA
FaxGetMessageTiffA
FaxGetMessageTiffW
FaxGetMessageW
FaxGetOutboxConfiguration
FaxGetPageData
FaxGetPersonalCoverPagesOption
FaxGetPortA
FaxGetPortExA
FaxGetPortExW
FaxGetPortW
FaxGetQueueStates
FaxGetReceiptsConfigurationA
FaxGetReceiptsConfigurationW
FaxGetReceiptsOptions
FaxGetRecipientInfoA
FaxGetRecipientInfoW
FaxGetRecipientsLimit
FaxGetReportedServerAPIVersion
FaxGetRoutingInfoA
FaxGetRoutingInfoW
FaxGetSecurity
FaxGetSecurityEx
FaxGetSenderInfoA
FaxGetSenderInfoW
FaxGetSenderInformation
FaxGetServerActivity
FaxGetServerSKU
FaxGetServicePrintersA
FaxGetServicePrintersW
FaxGetVersion
FaxInitializeEventQueue
FaxOpenPort
FaxPrintCoverPageA
FaxPrintCoverPageW
FaxRefreshArchive
FaxRegisterForServerEvents
FaxRegisterRoutingExtensionW
FaxRegisterServiceProviderExA
FaxRegisterServiceProviderExW
FaxRelease
FaxRemoveMessage
FaxRemoveOutboundGroupA
FaxRemoveOutboundGroupW
FaxRemoveOutboundRule
FaxSendDocumentA
FaxSendDocumentExA
FaxSendDocumentExW
FaxSendDocumentForBroadcastA
FaxSendDocumentForBroadcastW
FaxSendDocumentW
FaxSetActivityLoggingConfigurationA
FaxSetActivityLoggingConfigurationW
FaxSetArchiveConfigurationA
FaxSetArchiveConfigurationW
FaxSetConfigWizardUsed
FaxSetConfigurationA
FaxSetConfigurationW
FaxSetDeviceOrderInGroupA
FaxSetDeviceOrderInGroupW
FaxSetExtensionDataA
FaxSetExtensionDataW
FaxSetGlobalRoutingInfoA
FaxSetGlobalRoutingInfoW
FaxSetJobA
FaxSetJobW
FaxSetLoggingCategoriesA
FaxSetLoggingCategoriesW
FaxSetOutboundGroupA
FaxSetOutboundGroupW
FaxSetOutboundRuleA
FaxSetOutboundRuleW
FaxSetOutboxConfiguration
FaxSetPortA
FaxSetPortExA
FaxSetPortExW
FaxSetPortW
FaxSetQueue
FaxSetReceiptsConfigurationA
FaxSetReceiptsConfigurationW
FaxSetRoutingInfoA
FaxSetRoutingInfoW
FaxSetSecurity
FaxSetSenderInformation
FaxStartMessagesEnum
FaxStartPrintJob2W
FaxStartPrintJobA
FaxStartPrintJobW
FaxUnregisterForServerEvents
FaxUnregisterRoutingExtensionA
FaxUnregisterRoutingExtensionW
FaxUnregisterServiceProviderExA
FaxUnregisterServiceProviderExW
IsDeviceVirtual

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 62KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

68ab887098483c51b894f3726091996f

Headers

File Characteristics

Imports

version

msvcrt

rpcrt4

kernel32

shell32

advapi32

winspool.drv

gdi32

user32

ole32

Exports

Exports

Sections

.text Size: 442KB - Virtual size: 441KB

.data Size: 62KB - Virtual size: 62KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 6KB - Virtual size: 5KB

.text
Size: 442KB - Virtual size: 441KB

.data
Size: 62KB - Virtual size: 62KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 6KB - Virtual size: 5KB