83c582e8c09763cadf88a20397b90fb176426f9d5a1725e0d831e09ddf5263ef

Sharing

Copy URL Twitter E-mail

General

Target

83c582e8c09763cadf88a20397b90fb176426f9d5a1725e0d831e09ddf5263ef
Size

360KB
MD5

39af0ee3d3b5016272e5bcf3a1a5296f
SHA1

aab7290b2cddebff3aaf0013d685b8e44967e8fa
SHA256

83c582e8c09763cadf88a20397b90fb176426f9d5a1725e0d831e09ddf5263ef
SHA512

9f5827af3c0430e93ddca07fc78dc8d58c230a8b86f49338272760f5e1d52723e259ffd8ddc994e5ff9b6288fb94ba1ff192b213dd60236f837118c702dbebfa
SSDEEP

6144:Sxo1bxOSlOUHAoogCddvThDAgasRpG4bcD:Sxo1bxOSHAoogYRdD9pRL

Score

N/A

Malware Config

Signatures

Files

83c582e8c09763cadf88a20397b90fb176426f9d5a1725e0d831e09ddf5263ef
.dll windows x86

e2cab9d96702777fc03db20ce9a8fc13

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitThread
GetCommandLineA
GetACP
GetFileType
HeapSize
HeapReAlloc
SetHandleCount
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
RaiseException
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
CompareStringA
CompareStringW
GetFileInformationByHandle
InterlockedExchange
ExitProcess
RtlUnwind
GetLocalTime
GetSystemTime
GetTimeZoneInformation
GetOEMCP
GetCPInfo
GetProcessVersion
GetVersion
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
WritePrivateProfileStringA
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcatA
GetFileSize
GetFileAttributesA
DeleteCriticalSection
GlobalFlags
GlobalDeleteAtom
lstrcmpA
FindNextFileA
GetModuleFileNameA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
DuplicateHandle
InterlockedDecrement
InterlockedIncrement
GlobalLock
GlobalUnlock
SetLastError
lstrlenA
LocalFree
FreeConsole
SetHandleInformation
CreateEventA
GetStdHandle
SetStdHandle
PeekNamedPipe
WriteFile
SetEvent
CreateToolhelp32Snapshot
Process32First
Process32Next
GetComputerNameA
OutputDebugStringA
CreateThread
WaitForMultipleObjectsEx
lstrcmpiA
GetLogicalDriveStringsA
GetDriveTypeA
GetModuleHandleA
GetDiskFreeSpaceA
MultiByteToWideChar
WideCharToMultiByte
GetSystemInfo
ReadProcessMemory
VirtualQueryEx
FileTimeToLocalFileTime
FileTimeToSystemTime
GetProcessHeap
HeapAlloc
HeapFree
GetCurrentProcess
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetSystemDirectoryA
CreateFileA
GetFileTime
SetFileTime
TerminateThread
SetEnvironmentVariableA
CreatePipe
GetStartupInfoA
CreateProcessA
CloseHandle
ReadFile
TerminateProcess
FormatMessageA
InitializeCriticalSection
GetCurrentThread
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
GetLastError
GetTickCount
CreateDirectoryA
GetCurrentDirectoryA
GetEnvironmentVariableA
GlobalAlloc
GlobalFree
Sleep
DeleteFileA
GetLongPathNameA
GetCurrentProcessId
FreeEnvironmentStringsW
OpenProcess

user32

GetSysColor
AdjustWindowRectEx
GetClientRect
CopyRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetMenuItemCount
LoadStringA
SetFocus
ShowWindow
SetWindowPos
SetWindowLongA
GetDlgItem
MapWindowPoints
UnhookWindowsHookEx
GetWindowTextA
SetWindowTextA
ExitWindowsEx
GetSystemMetrics
DestroyMenu
GetSysColorBrush
LoadCursorA
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetClassNameA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
CharUpperA
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
ClientToScreen
SetProcessWindowStation
CloseWindowStation
SetThreadDesktop
CloseDesktop
GetUserObjectSecurity
SetUserObjectSecurity
GetProcessWindowStation
GetThreadDesktop
GetLastInputInfo
LoadIconA
SystemParametersInfoA
wsprintfA

gdi32

PtVisible
RectVisible
ExtTextOutA
Escape
CreateBitmap
GetDeviceCaps
DeleteObject
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateDCA
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
TextOutA
GetDIBits
GetObjectA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

LookupAccountSidA
DuplicateTokenEx
ImpersonateLoggedOnUser
AllocateLocallyUniqueId
SetTokenInformation
BuildExplicitAccessWithNameA
SetEntriesInAclA
MakeAbsoluteSD
IsValidSecurityDescriptor
SetServiceStatus
RegisterServiceCtrlHandlerA
GetAclInformation
InitializeAcl
GetAce
EqualSid
AddAce
AddAccessAllowedAce
GetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
IsValidSid
GetLengthSid
CopySid
LogonUserA
CreateProcessAsUserA
GetTokenInformation
AdjustTokenPrivileges
RegDeleteValueA
RegFlushKey
RegQueryInfoKeyA
RegEnumKeyExA
RegEnumValueA
RegQueryValueExA
RegCloseKey
GetServiceKeyNameA
DeleteService
OpenEventLogA
ClearEventLogA
CloseEventLog
StartServiceA
OpenSCManagerA
OpenServiceA
ControlService
QueryServiceStatus
CloseServiceHandle
LookupAccountNameA
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
OpenProcessToken
LookupPrivilegeValueA

comctl32

ord17

netapi32

NetUserGetLocalGroups
NetApiBufferFree
NetUserEnum

ws2_32

inet_ntoa
htons
WSAGetLastError
gethostbyname
gethostname
closesocket
recv
setsockopt
WSAIoctl
bind
socket
ntohs
WSAStartup
getsockname
select
connect
inet_addr
ioctlsocket
send
__WSAFDIsSet
sendto
listen
accept
WSCEnumProtocols

Exports

Exports

ServiceMain

Sections

.text
Size: 244KB - Virtual size: 241KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2cab9d96702777fc03db20ce9a8fc13

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

netapi32

ws2_32

Exports

Exports

Sections

.text Size: 244KB - Virtual size: 241KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: 40KB - Virtual size: 95KB

.rsrc Size: 12KB - Virtual size: 10KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 244KB - Virtual size: 241KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: 40KB - Virtual size: 95KB

.rsrc
Size: 12KB - Virtual size: 10KB

.reloc
Size: 24KB - Virtual size: 23KB