302ec94101a51cc518c3369ab98df303fb7aadcc9205ba91129fa761c686034d

Sharing

Copy URL Twitter E-mail

General

Target

302ec94101a51cc518c3369ab98df303fb7aadcc9205ba91129fa761c686034d
Size

380KB
MD5

668023910026fd10cf800388c15fea49
SHA1

70f83284cea0d25a1d077ada78fb0119c49adb2a
SHA256

302ec94101a51cc518c3369ab98df303fb7aadcc9205ba91129fa761c686034d
SHA512

12c039a72fe0c00b1ac28ab1994c53b417256b8d20d626952b8897533add5ba5ed2dfafdd5f87412e26b3e85331fc131887b05774bb66503e635f183253ff0ec
SSDEEP

6144:pt9PoLkwdFtgXd3XaopSwVLryqa7/wYyUhpTvQK:pnPx2FctayXaTJHp

Score

N/A

Malware Config

Signatures

Files

302ec94101a51cc518c3369ab98df303fb7aadcc9205ba91129fa761c686034d
.dll windows x86

c77ff8a7025173bc545c63da1403a78d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

kernel32

ExitProcess
GetModuleFileNameA
LocalReAlloc
HeapDestroy
GlobalDeleteAtom
GlobalFree
InitializeCriticalSection
SetUnhandledExceptionFilter
TlsAlloc
FindResourceA
lstrlenA
LocalAlloc
LoadResource
LocalFree
GetCPInfo
HeapAlloc
LCMapStringW
GetCommandLineA
GetStdHandle
lstrcpynA
HeapReAlloc
TlsSetValue
GetOEMCP
FlushFileBuffers
GetCurrentThread
IsBadCodePtr
GetStringTypeW
FreeEnvironmentStringsW
GetTickCount
WritePrivateProfileStringA
DeleteCriticalSection
TlsFree
LCMapStringA
GetVersion
VirtualFree
SetStdHandle
GetLastError
IsBadWritePtr
GetDateFormatA
RtlUnwind
GlobalFlags
SetErrorMode
GlobalAddAtomA
VirtualAlloc
GlobalAlloc
GlobalGetAtomNameA
EnterCriticalSection
GlobalUnlock
GetACP
SetLastError
HeapSize
GetFileType
LoadLibraryA
LeaveCriticalSection
GetCurrentThreadId
GetStartupInfoA
GlobalFindAtomA
FreeLibrary
FreeEnvironmentStringsA
FindResourceExA
TerminateProcess
GetStringTypeA
TlsGetValue
GlobalReAlloc
lstrcmpA
GetEnvironmentStringsW
lstrcpyA
WriteFile
HeapCreate
lstrcmpiA
CloseHandle
GlobalHandle
SetFilePointer
GetModuleHandleA
MulDiv
WideCharToMultiByte
lstrcatA
GetProcAddress
GetEnvironmentVariableA
GetProcessVersion
SetHandleCount
GetVersionExA
InterlockedIncrement
MultiByteToWideChar
HeapFree
InterlockedDecrement
RaiseException

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA

comctl32

DestroyPropertySheetPage
ord17

gdi32

CreateHalftonePalette
SetBkMode
GetDeviceCaps
DeleteObject
DeleteDC
GetClipBox
RealizePalette
SetTextColor
Escape
SetViewportExtEx
ScaleWindowExtEx
ScaleViewportExtEx
GetPixel
ExtEscape
SetMapMode
SetWindowExtEx
CreateBitmap
GetObjectA
OffsetViewportOrgEx
EnumFontFamiliesExA
SelectObject
SaveDC
RectVisible
CreateCompatibleDC
SelectPalette
ExtTextOutA
RestoreDC
CreateDCA
SetBkColor
BitBlt
SetStretchBltMode
GetDIBColorTable

user32

IsWindow
SetWindowPos
EndPaint
IsWindowEnabled
EnableMenuItem
TabbedTextOutA
GetSysColor
SetWindowLongA
GetMenuItemID
SetDlgItemTextA
BeginPaint
LoadIconA
WinHelpA
GetMenu
DestroyMenu
LoadStringA
PostQuitMessage
LoadCursorA
GetMenuCheckMarkDimensions
ValidateRect
UnregisterClassA
GetClientRect
IsDialogMessageA
GetMenuState
SystemParametersInfoA
IsIconic
LoadBitmapA
IsWindowVisible
GetMessageA
CreateWindowExA
GrayStringA
DispatchMessageA
SetWindowTextA
UpdateWindow
GetWindowLongA
GetActiveWindow
GetParent
RegisterClipboardFormatA
UnhookWindowsHookEx
CallWindowProcA
CopyRect
AdjustWindowRectEx
GetKeyState
GetWindow
MapWindowPoints
SetCursor
GetClassInfoA
PtInRect
CreateDialogIndirectParamA
RegisterClassA
TranslateMessage
GetMessagePos
SetActiveWindow
SetMenuItemBitmaps
GetCursorPos
GetLastActivePopup
SetFocus
ScreenToClient
MessageBoxA
SendDlgItemMessageA
GetSubMenu
DefWindowProcA
EndDialog
DestroyWindow
GetNextDlgTabItem
GetTopWindow
GetPropA
ClientToScreen
GetClassNameA
RegisterWindowMessageA
GetWindowPlacement
GetWindowRect
GetForegroundWindow
RemovePropA
wsprintfA
SetWindowsHookExA
GetSystemMetrics
FillRect
DrawTextA
CheckMenuItem
PostMessageA
CallNextHookEx
LoadImageA
GetDlgItem
SendMessageA
GetMenuItemCount
GetSysColorBrush
GetCapture
PeekMessageA
EnableWindow
ShowWindow
GetWindowDC
ModifyMenuA
GetFocus
GetWindowTextA
GetClassLongA

Exports

Exports

AsDecodedObject
Free
Long_FromLong
Set_New
set_background

Sections

.text
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c77ff8a7025173bc545c63da1403a78d

Headers

File Characteristics

Imports

winspool.drv

kernel32

advapi32

comctl32

gdi32

user32

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 106KB

.rdata Size: 88KB - Virtual size: 87KB

.data Size: 92KB - Virtual size: 92KB

.rsrc Size: 80KB - Virtual size: 79KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 108KB - Virtual size: 106KB

.rdata
Size: 88KB - Virtual size: 87KB

.data
Size: 92KB - Virtual size: 92KB

.rsrc
Size: 80KB - Virtual size: 79KB

.reloc
Size: 8KB - Virtual size: 6KB