c2787a6eb22292c2b440a0144fa1a54a90cc10f83cf8c4b32dc9928e21b1a80c

Sharing

Copy URL

Twitter E-mail

General

Target

c2787a6eb22292c2b440a0144fa1a54a90cc10f83cf8c4b32dc9928e21b1a80c
Size

232KB
MD5

4f3b7176718d546c334aa4b1553ed210
SHA1

ee506ac1499335a7114c2f008beb36acfa46d8b8
SHA256

c2787a6eb22292c2b440a0144fa1a54a90cc10f83cf8c4b32dc9928e21b1a80c
SHA512

700baa51f9f04a9780d56184f52a9fc51c717e0387a6d022111d69c0408e4ff87f77393f4d31d58c2d16c2897f6c925d5efa85a25feaac2bbe1330923f6db6ce
SSDEEP

6144:a6O4pF101Cy326Z7SacL65t+JLiyzfz5p:DD7e8y326a6jryzV

Score

N/A

Malware Config

Signatures

Files

c2787a6eb22292c2b440a0144fa1a54a90cc10f83cf8c4b32dc9928e21b1a80c
.dll windows x86

9f21cb278e111e4414dd73487355f765

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
RtlUnwind
GetCommandLineA
ExitProcess
HeapAlloc
RaiseException
GetTimeZoneInformation
HeapSize
HeapReAlloc
GetACP
SetHandleCount
GetStdHandle
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
TerminateProcess
HeapFree
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrlenA
MultiByteToWideChar
lstrlenW
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
GetProcessVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
GetLastError
GlobalAddAtomA
GlobalFindAtomA
SetLastError
GetModuleHandleA
GetProcAddress
WritePrivateProfileStringA
GlobalFlags
lstrcpyA
GetVersion
lstrcpynA
TlsGetValue
lstrcatA
SetErrorMode
EnterCriticalSection
LocalReAlloc
TlsSetValue
TlsFree
GlobalReAlloc
LeaveCriticalSection
DeleteCriticalSection
GlobalHandle
GlobalFree
LocalAlloc
TlsAlloc
InitializeCriticalSection
GetEnvironmentStringsW
FormatMessageA
WideCharToMultiByte
LocalFree
InterlockedDecrement
GlobalUnlock
InterlockedIncrement
GetEnvironmentVariableA
GetVersionExA
GetStartupInfoA
FreeEnvironmentStringsW

user32

LoadStringA
AdjustWindowRectEx
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetClientRect
DestroyMenu
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
GetSysColorBrush
IsIconic
GetWindowPlacement
GetSystemMetrics
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
SystemParametersInfoA
GetMenuItemCount
wsprintfA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
GetWindowTextA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
CopyRect
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SendMessageA
PostMessageA
GetDC
PostQuitMessage
GetActiveWindow
GetTopWindow
GetClassInfoA
GetCapture
WinHelpA
GetSubMenu
RegisterClassA
GetMenu
GetMenuItemID
GetClassLongA
DestroyWindow
CreateWindowExA
CallWindowProcA
SetPropA
GetPropA
GetMessageTime
RemovePropA
DefWindowProcA
GetMessagePos
ReleaseDC

gdi32

SelectObject
GetStockObject
RestoreDC
SetBkColor
SetMapMode
SetViewportOrgEx
SetTextColor
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
DeleteDC
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
ExtTextOutA
Escape
TextOutA
GetObjectA
OffsetViewportOrgEx
CreateBitmap
SaveDC

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA

comctl32

ord17

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree

oleaut32

SafeArrayDestroy
VariantClear
SysStringLen
SysAllocString
VariantTimeToSystemTime
SysFreeString
VariantChangeType

Exports

Exports

AddNew
CloseDBSource
CloseRowSet
Delete
GetColName
GetColumns
GetConnectString
GetData
GetFieldDataType
GetFieldFloat
GetFieldName
GetFieldString
GetTableFields
GetTableName
GetTables
GetValue
IsBOF
IsEOF
MoveFirst
MoveLast
MoveNext
MovePrev
MoveTo
OpenDBSource
OpenDBSourceByStr
OpenRowSet
OpenRowSetEx
SetFieldFloat
SetFieldString
Update

Sections

.text
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9f21cb278e111e4414dd73487355f765

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 112KB - Virtual size: 108KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 16KB - Virtual size: 28KB

.reloc Size: 16KB - Virtual size: 13KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 112KB - Virtual size: 108KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 16KB - Virtual size: 28KB

.reloc
Size: 16KB - Virtual size: 13KB

.rmnet
Size: 60KB - Virtual size: 60KB