ef16f43a8a1b8ac4808f60d8b86aa3ab155ab038119857c50f78e19a5ae15c48

Sharing

Copy URL

Twitter E-mail

General

Target

ef16f43a8a1b8ac4808f60d8b86aa3ab155ab038119857c50f78e19a5ae15c48
Size

256KB
MD5

3d849a3f07389da8d1228adb4b420396
SHA1

9c0a0311cbadcf7fac47a3fc6b23bfdd50b88054
SHA256

ef16f43a8a1b8ac4808f60d8b86aa3ab155ab038119857c50f78e19a5ae15c48
SHA512

b150121ff7f9d5c6c7acf5c6a62fb67fb4c9f0a207b736f8324ec69876a74bc637ada7de2890bd4b61916e1562ede11c5c706dba659d4caeb01360b24480b2cb
SSDEEP

3072:3C8VzHDD5TyeDHYYtkSLukODKOJgER+ystEjhxM/EaK5YYUwUOVPs5llUGgxLcgX:ym/lXDHY6q5JgKsiI/EaovUmk+cY

Score

N/A

Malware Config

Signatures

Files

ef16f43a8a1b8ac4808f60d8b86aa3ab155ab038119857c50f78e19a5ae15c48
.dll windows x86

3835c99e46379636677f40404b36541b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapSize
GetTimeZoneInformation
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
TerminateProcess
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
ExitProcess
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
GetCommandLineA
RtlUnwind
GetTickCount
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetFileTime
GetFileSize
GetFileAttributesA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
GlobalFlags
GetProcessVersion
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetCurrentThread
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
InterlockedDecrement
InterlockedIncrement
MulDiv
GetModuleHandleA
SetLastError
lstrcmpiA
GetThreadLocale
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcmpA
GlobalFree
GlobalAlloc
GlobalLock
lstrlenW
WideCharToMultiByte
lstrlenA
GetModuleFileNameA
GlobalUnlock
SetUnhandledExceptionFilter
GlobalReAlloc

user32

SetRect
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
DestroyMenu
MapDialogRect
SetWindowContextHelpId
CharNextA
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
UnregisterClassA
GetMessageA
TranslateMessage
GetActiveWindow
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
LoadIconA
PostMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
IsWindowVisible
ScrollWindow
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
CopyAcceleratorTableA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetKeyState
DestroyWindow
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
LoadStringA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowPlacement
OffsetRect
RegisterWindowMessageA
FindWindowA
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
SendMessageA
GetWindow
EnableWindow
GetScrollInfo
SystemParametersInfoA
GetWindowRect
UpdateWindow
IsIconic
IsChild
InvalidateRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
EndDialog
MessageBoxA
CreateDialogIndirectParamA
ScreenToClient
CopyRect
GetDC
ReleaseDC
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
MoveWindow
GetDlgCtrlID
GetNextDlgTabItem
GetParent
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
AdjustWindowRectEx
GetClientRect
IsWindow
wsprintfA
CharUpperA
GetSystemMetrics
GetDlgItem
SendDlgItemMessageA
IsDialogMessageA
SetWindowTextA
GetWindowTextA
CallWindowProcA

gdi32

RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
DPtoLP
GetObjectA
PtVisible
GetBkColor
GetMapMode
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
DeleteObject
GetTextColor
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoDisconnectObject
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
VariantClear
VariantInit
VariantCopy
VariantChangeType
SysAllocStringLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SysAllocStringByteLen
SysStringLen
LoadTypeLi
VariantTimeToSystemTime

Sections

.text
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 32KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3835c99e46379636677f40404b36541b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 144KB - Virtual size: 143KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 32KB - Virtual size: 45KB

.rsrc Size: 8KB - Virtual size: 7KB

.data Size: 28KB - Virtual size: 25KB

.text
Size: 144KB - Virtual size: 143KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 32KB - Virtual size: 45KB

.rsrc
Size: 8KB - Virtual size: 7KB

.data
Size: 28KB - Virtual size: 25KB