bcf7e895c39d5edc1d50d3fe9da4a4c1c10902f8acec7fbbdd53df76f6df5e98

Sharing

Copy URL Twitter E-mail

General

Target

bcf7e895c39d5edc1d50d3fe9da4a4c1c10902f8acec7fbbdd53df76f6df5e98
Size

277KB
MD5

786574b3708879bd6f8c8ee77c064375
SHA1

611031b9f4b85c6e828d28705a10404430fbf62f
SHA256

bcf7e895c39d5edc1d50d3fe9da4a4c1c10902f8acec7fbbdd53df76f6df5e98
SHA512

cc130306a39ba95f89006f6c4fb075349597ac753aead6e47b24c6594d83ddf47b759ada3e26cc62129d890b16b1932d813073e8fcc1fb4ac3f4cfee762e5253
SSDEEP

6144:6TYiK9TBoUiV4QaXjrsmNcmo3kMF3rqo:8K9TmPaXh4kI

Score

N/A

Malware Config

Signatures

Files

bcf7e895c39d5edc1d50d3fe9da4a4c1c10902f8acec7fbbdd53df76f6df5e98
.dll windows x86

8949568b94b186364af15b452f3c5cf0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
OutputDebugStringA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
CloseHandle
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
ReadFile
WriteFile
LoadLibraryExA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
CreateFileW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
GetProcessHeap
HeapCreate
GetTimeZoneInformation
VirtualProtect
GetSystemInfo
VirtualQuery
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
HeapDestroy
LocalFree
GetModuleFileNameW
GlobalAlloc
GlobalFree
GetTempPathA
CreateDirectoryA
HeapSize
GetModuleHandleExA
DebugBreak
OpenProcess
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapAlloc
HeapFree
GetCurrentThreadId
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
ExitProcess
GetModuleHandleA
RaiseException
RtlUnwind
GetVersionExA
GetCommandLineA
DeleteFileW
GetTempPathW
GetTempFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary

winspool.drv

GetPrinterDriverDirectoryW
WritePrinter

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExA
RegSetValueExA

crypt32

CryptStringToBinaryW
CryptUnprotectData

dbghelp

SymCleanup
SymInitialize
SymSetOptions
SymGetLineFromAddr64
SymFromAddr
SymSetSearchPath
SymGetSearchPath
SymGetOptions

Exports

Exports

EncryptChunkAndPrint
EncryptFileAndPrint
IsEncryptingInChunksSupported

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 108KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8949568b94b186364af15b452f3c5cf0

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

advapi32

crypt32

dbghelp

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.data Size: 108KB - Virtual size: 148KB

.reloc Size: 16KB - Virtual size: 16KB

.text
Size: 152KB - Virtual size: 151KB

.data
Size: 108KB - Virtual size: 148KB

.reloc
Size: 16KB - Virtual size: 16KB