a4d0b0184107913a19c6bfcc16d2fb802df1de74e416436ba055d2f3971dd654

Sharing

Copy URL Twitter E-mail

General

Target

a4d0b0184107913a19c6bfcc16d2fb802df1de74e416436ba055d2f3971dd654
Size

410KB
MD5

682ab9bf083ddd9b648f8a7282a01ab1
SHA1

047e0e0da2b520e3fefc7b159c4ecb8a9fe4d75d
SHA256

a4d0b0184107913a19c6bfcc16d2fb802df1de74e416436ba055d2f3971dd654
SHA512

b7b05352f4a26be8c29c71cf58cd7d80593f8a2b88bb91647cc0b172ba81200cbeee14a0fdc0ac7d5f2592efdd69bc75703d283feccd2e9d804cefd122bb1996
SSDEEP

6144:8BeIq4yIe4X0WmsccDL+pd5rNIoMuzzz5AoK7bP1f/A3aOHMH:4c1t4kocML+5OSzj

Score

N/A

Malware Config

Signatures

Files

a4d0b0184107913a19c6bfcc16d2fb802df1de74e416436ba055d2f3971dd654
.dll windows x86

a1c82b28e3175723bd266b2b9c41e336

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

RtlUnwind

cmpbk32

PhoneBookGetPhoneDescA
PhoneBookGetPhoneCanonicalA
PhoneBookGetPhoneNonCanonicalA
PhoneBookGetPhoneDUNA
PhoneBookFreeFilter
PhoneBookParseInfoA
PhoneBookGetCountryNameA
PhoneBookGetCountryId
PhoneBookGetCountryNameW
PhoneBookEnumCountries
PhoneBookGetCurrentCountryId
PhoneBookGetRegionNameA
PhoneBookEnumRegions
PhoneBookGetPhoneDispA
PhoneBookMatchFilter
PhoneBookGetPhoneType
PhoneBookEnumNumbers
PhoneBookEnumNumbersWithRegionsZero
PhoneBookHasPhoneType
PhoneBookCopyFilter
PhoneBookUnload
PhoneBookLoad

cmutil

CmFree
CmMalloc
CmConvertRelativePathW
?GetFile@CIniW@@QBEPBGXZ
CmStrCpyAllocW
CmStrTrimW
CmStrrchrW
CmStrchrW
?GPPI@CIniW@@QBEKPBG0K@Z
?GPPS@CIniW@@QBEPAGPBG00@Z
WzToSzWithAlloc
CmStrCatAllocW
IsLogonAsSystem
CmFmtMsgW
?Log@CmLogFile@@QAAXW4_CMLOG_ITEM@@ZZ
GetOSVersion
CmLoadStringW
GetOSMajorVersion
CmStrStrA
GetOSBuildNumber
?GPPB@CIniW@@QBEHPBG0H@Z
??1CIniW@@QAE@XZ
?SetReadICSData@CIniW@@QAEXH@Z
?SetEntryFromIdx@CIniW@@QAEXK@Z
??0CIniW@@QAE@PAUHINSTANCE__@@PBG111@Z
?GetHInst@CIniW@@QBEPAUHINSTANCE__@@XZ
?GetRegPath@CIniW@@QBEPBGXZ
?WPPB@CIniW@@QAEXPBG0H@Z
?WPPI@CIniW@@QAEXPBG0K@Z
?WPPS@CIniW@@QAEXPBG00@Z
?SetWriteICSData@CIniW@@QAEXH@Z
CmBuildFullPathFromRelativeW
CmLoadSmallIconW
CmLoadIconW
CmParsePathW
CmStrStrW
CmWinHelp
CmAtolW
?SetSection@CIniW@@QAEXPBG@Z
?GetSection@CIniW@@QBEPBGXZ
?SetRegPath@CIniW@@QAEXPBG@Z
?SetPrimaryRegPath@CIniW@@QAEXPBG@Z
UpdateFont
?DeInit@CmLogFile@@QAEJXZ
CmIsDigitW
?Stop@CmLogFile@@QAEJXZ
?Start@CmLogFile@@QAEJH@Z
?SetParams@CmLogFile@@QAEJHKPBG@Z
?Clear@CmLogFile@@QAEXH@Z
CmLoadImageW
?Init@CmLogFile@@QAEJPAUHINSTANCE__@@HPBG@Z
?SetPrimaryFile@CIniW@@QAEXPBG@Z
?SetFile@CIniW@@QAEXPBG@Z
?SetHInst@CIniW@@QAEXPAUHINSTANCE__@@@Z
?Clear@CIniW@@QAEXXZ
CmStripFileNameW
CmStripPathAndExtW
SzToWzWithAlloc
CmStrCpyAllocA
CmStrCatAllocA
?LoadSection@CIniW@@QBEPAGPBG@Z
CmStrtokW
?SetEntry@CIniW@@QAEXPBG@Z
WzToSz
CmRealloc
CmIsSpaceW
?SetICSDataPath@CIniW@@QAEXPBG@Z

advapi32

CreateProcessAsUserW
LookupPrivilegeValueW
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
FreeSid
AllocateAndInitializeSid
RegQueryValueExW
RegOpenKeyExW
OpenThreadToken
RegSetValueExA
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegCreateKeyExA
GetLengthSid
GetSidLengthRequired
InitializeSid
GetSidSubAuthority
InitializeAcl
AddAccessAllowedAce
AdjustTokenPrivileges

gdi32

DeleteObject
GetDeviceCaps
GetDIBits
GetObjectA
CreatePalette
CreateDIBitmap
RealizePalette
SelectPalette
DeleteDC
StretchBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
GetStockObject
UnrealizeObject

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFilePointer
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetOEMCP
GetACP
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
VirtualQuery
WriteFile
VirtualFree
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetStdHandle
SetHandleCount
HeapAlloc
TlsAlloc
TlsGetValue
TlsFree
ExitProcess
HeapFree
GetVersionExA
GetCommandLineA
TlsSetValue
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
SetStdHandle
VirtualProtect
GetSystemInfo
FlushFileBuffers
GlobalFree
UnmapViewOfFile
MapViewOfFile
LocalAlloc
InterlockedDecrement
lstrcatA
GetProcessHeap
GetVolumeInformationA
InterlockedIncrement
WritePrivateProfileStringW
SearchPathW
OpenFileMappingW
OpenEventW
lstrcmpW
LoadLibraryExW
GetVersionExW
GetTimeFormatW
GetTempPathW
GetTempFileNameW
GetSystemDirectoryW
GetStringTypeExW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleHandleW
GetModuleFileNameW
GetFileAttributesW
GetDateFormatW
FindResourceExW
DeleteFileW
CreateMutexW
CreateFileMappingW
CreateEventW
GlobalReAlloc
HeapDestroy
lstrlenW
FreeLibrary
GetProcAddress
CreateProcessW
CloseHandle
GetCurrentThreadId
GetLastError
GetCurrentProcess
LoadLibraryExA
lstrcmpA
lstrcmpiA
OpenProcess
Sleep
GetTickCount
SetEvent
DuplicateHandle
GetCurrentProcessId
WaitForSingleObject
lstrcpynW
InterlockedExchange
lstrcpyW
SetLastError
lstrcmpiW
WideCharToMultiByte
GetFileAttributesA
lstrlenA
Beep
CreateFileW
LoadLibraryW
MulDiv
CompareFileTime
GetFileTime
SetFileTime
SystemTimeToFileTime
GetSystemTime
ExpandEnvironmentStringsW
LocalFree
FormatMessageW
CreateDirectoryW
SetCurrentDirectoryW
GetCurrentDirectoryW
FindNextFileW
FindClose
FindFirstFileW
SetFileAttributesW
CopyFileW
IsBadReadPtr
GetModuleHandleA
DisableThreadLibraryCalls
GetCurrentThread
ReleaseMutex
MultiByteToWideChar
GetPrivateProfileStringA
lstrcpyA
CreateThread
lstrcpynA
GetFileType
lstrcatW
GlobalSize
GlobalHandle
GlobalLock
GlobalAlloc
GlobalUnlock
QueryPerformanceCounter

user32

MessageBoxExW
CallWindowProcW
CharLowerW
CharPrevW
CharUpperW
CreateDialogParamW
CreateWindowExW
DefWindowProcW
DialogBoxParamW
DispatchMessageW
FindWindowExW
GetClassLongW
GetMessageW
GetWindowLongW
GetWindowTextW
GetWindowTextLengthW
InsertMenuW
IsDialogMessageW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
LoadStringW
PeekMessageW
PostThreadMessageW
RegisterClassExW
RegisterWindowMessageW
SetWindowLongW
SetWindowTextW
UnregisterClassW
WinHelpW
wvsprintfW
GetClassInfoExA
RegisterClassExA
LoadStringA
EnumWindows
ShowWindowAsync
GetWindowTextA
SendMessageW
SendMessageA
wsprintfA
ChildWindowFromPointEx
GetDlgCtrlID
wsprintfW
SetActiveWindow
DestroyWindow
PostQuitMessage
CharNextW
SendDlgItemMessageA
InvalidateRect
GetDC
ReleaseDC
GetDlgItemInt
SetDlgItemInt
MessageBoxW
IsDlgButtonChecked
BeginPaint
EndPaint
MapWindowPoints
SetWindowPos
GetClientRect
IsWindowEnabled
ChildWindowFromPoint
SetDlgItemTextA
SetForegroundWindow
SystemParametersInfoA
GetSystemMenu
DeleteMenu
EnableMenuItem
SetTimer
KillTimer
IsWindow
GetWindowThreadProcessId
GetWindowRect
ScreenToClient
MoveWindow
SendDlgItemMessageW
GetDlgItemTextW
SetDlgItemTextW
CheckDlgButton
PostMessageW
ShowCursor
TranslateMessage
GetCursor
SetCursor
UpdateWindow
IsWindowVisible
ShowWindow
GetDlgItem
EndDialog
MsgWaitForMultipleObjects
GetParent
EnableWindow
GetFocus
SetFocus
GetUserObjectInformationW
GetThreadDesktop
ExitWindowsEx

ole32

CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree

shell32

SHFileOperationW

Exports

Exports

AutoDialFunc
CmCustomDialDlg
CmCustomHangUp
CmReConnect
InetDialHandler
RasCustomDeleteEntryNotify
RasCustomDial
RasCustomDialDlg
RasCustomEntryDlg
RasCustomHangUp
_AutoDialFunc@16
_InetDialHandler@16

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 141KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1c82b28e3175723bd266b2b9c41e336

Headers

File Characteristics

Imports

ntdll

cmpbk32

cmutil

advapi32

gdi32

kernel32

user32

ole32

shell32

Exports

Exports

Sections

.text Size: 184KB - Virtual size: 183KB

.data Size: 71KB - Virtual size: 77KB

.rsrc Size: 141KB - Virtual size: 141KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 184KB - Virtual size: 183KB

.data
Size: 71KB - Virtual size: 77KB

.rsrc
Size: 141KB - Virtual size: 141KB

.reloc
Size: 12KB - Virtual size: 11KB