be12f72d9ddb4aa5900299f504064f3f2c9b6c1149280fb4edcfc3bcf047a328

Sharing

Copy URL Twitter E-mail

General

Target

be12f72d9ddb4aa5900299f504064f3f2c9b6c1149280fb4edcfc3bcf047a328
Size

772KB
MD5

69a25e02a689438bc882805c36e069a0
SHA1

44e278637c2712fd24ef3552dfbf8297a1504d36
SHA256

be12f72d9ddb4aa5900299f504064f3f2c9b6c1149280fb4edcfc3bcf047a328
SHA512

e28076301ecb4df6132a5e6bc74a57016aff9e28fefe4ad805b47d7b77bf5b25010f2bfd4c144eb49e4fdddde1e922e164e35d914d627a9e934281576fe43bda
SSDEEP

12288:4/4Ic76Dp3zHSR7A8mGHD6+N3zq/zVgv3eSwJ1E9HER:oc76l3zHS7prv3fwj

Score

N/A

Malware Config

Signatures

Files

be12f72d9ddb4aa5900299f504064f3f2c9b6c1149280fb4edcfc3bcf047a328
.dll windows x86

150d31cd2c9db0853a7e5d57e4923033

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
VirtualAlloc
GetModuleHandleA
MulDiv
GlobalFree
LockResource
InitializeCriticalSection
LocalReAlloc
EnterCriticalSection
GetEnvironmentStringsW
FreeLibrary
RtlUnwind
GetCurrentThread
CloseHandle
LCMapStringW
GlobalFindAtomA
LoadResource
GetEnvironmentVariableA
HeapSize
GetStdHandle
GetLastError
WriteFile
GetVersionExA
LeaveCriticalSection
GetVersion
GetCPInfo
LCMapStringA
GetEnvironmentStringsA
lstrcmpA
LoadLibraryA
SetFilePointer
GetTickCount
GlobalAddAtomA
IsBadCodePtr
WritePrivateProfileStringA
GetDateFormatA
GetACP
lstrcmpiA
TlsGetValue
GlobalDeleteAtom
GlobalFlags
FindResourceA
FreeEnvironmentStringsA
WideCharToMultiByte
SetLastError
GetOEMCP
FreeEnvironmentStringsW
HeapAlloc
GlobalGetAtomNameA
LocalAlloc
LocalFree
GetFileType
GlobalAlloc
lstrlenA
GetStringTypeA
IsBadWritePtr
TerminateProcess
lstrcpyA
HeapDestroy
lstrcatA
GetStartupInfoA
GetCommandLineA
GlobalReAlloc
HeapCreate
TlsAlloc
HeapReAlloc
GetProcAddress
GetCurrentThreadId
SetUnhandledExceptionFilter
SetStdHandle
GetModuleFileNameA
FindResourceExA
FlushFileBuffers
RaiseException
InterlockedIncrement
GlobalHandle
HeapFree
SetErrorMode
GetStringTypeW
VirtualFree
GetProcessVersion
SetHandleCount
InterlockedDecrement
ExitProcess
TlsSetValue
DeleteCriticalSection
GlobalUnlock
TlsFree
lstrcpynA

advapi32

RegQueryValueExA
RegOpenKeyExA
IsTextUnicode
RegCreateKeyExA
RegCloseKey
RegSetValueExA

comctl32

ord17
DestroyPropertySheetPage
CreatePropertySheetPageA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

user32

GrayStringA
GetMenuState
ScreenToClient
CopyRect
SetWindowLongA
GetSystemMetrics
DispatchMessageA
FillRect
GetWindowDC
CreateWindowExA
GetClientRect
GetWindowTextA
WinHelpA
GetWindowRect
GetMessageA
SetForegroundWindow
SetDlgItemTextA
UpdateWindow
GetMenuCheckMarkDimensions
GetClassNameA
GetClassLongA
IsDialogMessageA
CreateDialogIndirectParamA
TabbedTextOutA
PtInRect
ClientToScreen
GetCapture
SendDlgItemMessageA
PostQuitMessage
GetDlgItem
LoadBitmapA
ModifyMenuA
SetFocus
GetFocus
SystemParametersInfoA
RegisterClipboardFormatA
GetClassInfoA
EndDialog
CheckMenuItem
GetMenu
SetActiveWindow
LoadIconA
RemovePropA
TranslateMessage
EnableWindow
GetMessagePos
AdjustWindowRectEx
GetSysColorBrush
EnumDisplaySettingsExA
GetMenuItemID
GetDlgCtrlID
SetWindowTextA
SetCursor
GetNextDlgTabItem
GetTopWindow
IsIconic
LoadStringA
GetKeyState
LoadImageA
UnhookWindowsHookEx
CallNextHookEx
GetSubMenu
IsWindow
GetPropA
ShowWindow
GetActiveWindow
CallWindowProcA
MapWindowPoints
PeekMessageA
EndPaint
GetParent
GetMessageTime
UnregisterClassA
IsWindowVisible
SetMenuItemBitmaps
DestroyMenu
BeginPaint
GetLastActivePopup
wsprintfA
GetWindowPlacement
SetPropA
GetSysColor
GetForegroundWindow
SetWindowsHookExA
GetWindow
LoadCursorA
IsWindowEnabled
DefWindowProcA
ValidateRect
GetWindowLongA
MessageBoxA
SetWindowPos
SendMessageA
GetMenuItemCount
DestroyWindow
EnableMenuItem
RegisterWindowMessageA
PostMessageA
GetCursorPos

gdi32

DeleteDC
ExtEscape
SetStretchBltMode
SelectPalette
SetTextColor
RestoreDC
CreateBitmap
SetViewportOrgEx
GetStockObject
RectVisible
DeleteObject
SaveDC
GetDeviceCaps
OffsetViewportOrgEx
SelectObject
GetDIBColorTable
Escape
SetMapMode
SetBkMode
BitBlt
CreateCompatibleDC
SetViewportExtEx
SetBkColor
CreateHalftonePalette
StretchBlt
EnumFontFamiliesExA
RealizePalette
CreatePalette
SetWindowExtEx
GetClipBox
ScaleViewportExtEx
CreateDCA
GetObjectA
TextOutA
GetPixel
ScaleWindowExtEx

Exports

Exports

AsFileDescriptor
Keys
Long_AsSsize_t
PrintEx
WarnExplicit
get_user_height_max
permit_empty_plte
vResolveTokenVar
write_end

Sections

.text
Size: 196KB - Virtual size: 194KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 208KB - Virtual size: 207KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

150d31cd2c9db0853a7e5d57e4923033

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

winspool.drv

user32

gdi32

Exports

Exports

Sections

.text Size: 196KB - Virtual size: 194KB

.rdata Size: 100KB - Virtual size: 99KB

.data Size: 256KB - Virtual size: 256KB

.rsrc Size: 208KB - Virtual size: 207KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 196KB - Virtual size: 194KB

.rdata
Size: 100KB - Virtual size: 99KB

.data
Size: 256KB - Virtual size: 256KB

.rsrc
Size: 208KB - Virtual size: 207KB

.reloc
Size: 8KB - Virtual size: 7KB