d990736e3925bc1cd08e4284664b76d0cb0f4c3b6025245c5f0eba9a85f15658

Sharing

Copy URL Twitter E-mail

General

Target

d990736e3925bc1cd08e4284664b76d0cb0f4c3b6025245c5f0eba9a85f15658
Size

400KB
MD5

65c2ed33815873996e81f69b71736400
SHA1

c6e68e42c7304910c405a6df12d83a404817e52a
SHA256

d990736e3925bc1cd08e4284664b76d0cb0f4c3b6025245c5f0eba9a85f15658
SHA512

b31ec09e4a63fd68a995cfbe994281840b8b3b82a44e35aada7182ea2a6587d48ae64a8fe827f221b42376d70e18df0892393a7c1cdf8e25dea916ccc6241080
SSDEEP

6144:czbdBEFj2WevDaaf4SUANAV+sckpp/+oZO2qwZ1YN3jWo5KDjr73rgE0CAp/YQfM:mBEAH33AVnpRoO1pWK/PbgEzAl3M

Score

N/A

Malware Config

Signatures

Files

d990736e3925bc1cd08e4284664b76d0cb0f4c3b6025245c5f0eba9a85f15658
.dll windows x86

f9d513c64031335ce1d2c6f5bf34a299

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
IsBadReadPtr
IsBadWritePtr
lstrcatA
GetVersionExA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetSystemInfo
lstrcmpiA
FindFirstFileA
FindClose
SizeofResource
lstrcpynA
WaitForMultipleObjects
LoadLibraryExA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
Sleep
GetModuleHandleA
WriteFile
SetFilePointer
CreateEventA
QueryPerformanceFrequency
CreateProcessA
GetProcAddress
GetFileAttributesA
lstrcmpA
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
MultiByteToWideChar
GetPrivateProfileStringA
GetACP
ReadFile
GetFileSize
CreateFileA
FreeLibrary
LoadLibraryA
FreeResource
LockResource
SetEndOfFile
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
SetLastError
GetCPInfo
ExitProcess
HeapAlloc
CloseHandle
TlsGetValue
TlsFree
TlsAlloc
HeapFree
GetVersion
GetCommandLineA
ExitThread
TlsSetValue
CreateThread
lstrlenA
RaiseException
RtlUnwind
GetCurrentThread
SystemTimeToFileTime
QueryPerformanceCounter
ResetEvent
SetEvent
WaitForSingleObject
GetWindowsDirectoryA
CreateFileMappingA
MapViewOfFile
GetShortPathNameA
UnmapViewOfFile
SearchPathA
GetModuleFileNameA
VirtualProtect
VirtualQuery
lstrcpyA
GlobalUnlock
GlobalFree
GetLastError
InterlockedExchange
LoadResource
FindResourceA
GetTickCount
GlobalLock
GlobalAlloc
WideCharToMultiByte

user32

EndPaint
RemovePropA
IsDialogMessageA
GetMessageA
LoadStringA
CreateDialogIndirectParamA
SendMessageA
BeginPaint
EnumChildWindows
IsIconic
IsWindow
ReleaseDC
GetDC
FillRect
GetClientRect
ScreenToClient
GetWindowRect
GetSysColor
GetDlgItem
MoveWindow
SetWindowPos
SetWindowLongA
GetWindowLongA
DestroyWindow
SetFocus
EnableWindow
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
GetDesktopWindow
FindWindowA
LoadImageA
PostMessageA
SetPropA
CreateWindowExA
RegisterClassA
GetClassInfoA
TranslateMessage
DefWindowProcA
GetPropA
ShowWindow
SetScrollInfo
ShowScrollBar
MessageBeep
GetWindowTextA
SetRect
MessageBoxA
wsprintfA
GetClassNameA
GetDlgCtrlID
InvalidateRect
GetKeyState
SetWindowTextA
GetClassInfoExA
RegisterClassExA
GetDlgItemTextA
IntersectRect
DrawFocusRect
LoadBitmapA
GetCursorPos
CharLowerBuffA
PtInRect
LoadCursorA
GetWindowPlacement
SystemParametersInfoA
MapWindowPoints
SetScrollPos
GetDialogBaseUnits
CallWindowProcA
GetParent
GetWindow

gdi32

GetObjectA
CreateCompatibleDC
GetTextExtentPointA
CreatePen
DeleteMetaFile
DeleteObject
SetMetaFileBitsEx
CreateDIBitmap
RealizePalette
SelectPalette
SelectClipRgn
CreateRectRgn
CreatePatternBrush
SetPixel
PatBlt
RestoreDC
StretchBlt
PlayMetaFile
CreateBitmap
SetBkColor
DeleteDC
CreateSolidBrush
CreateCompatibleBitmap
BitBlt
SelectObject
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
UnrealizeObject
SaveDC
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
TextOutA
SetTextColor
SetBkMode
CreateFontIndirectA
LineTo
GetStockObject
GetTextExtentPoint32A
MoveToEx
EnumFontFamiliesExA

winspool.drv

EnumPortsA

advapi32

RegQueryValueExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegQueryValueA
RegOpenKeyA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA

ole32

CoGetInterfaceAndReleaseStream
CoCreateInstance
CoInitialize
CLSIDFromProgID
CoUninitialize

oleaut32

VariantChangeType
SafeArrayGetElement
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString
SysReAllocStringLen
SysStringLen
VariantInit
SysStringByteLen
SafeArrayDestroy
SysAllocStringByteLen
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopy
SafeArrayGetDim

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
ImageList_Create
ImageList_Draw

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

Exports

Exports

AddIcon
CallDLLFn
ComponentViewCreateWindow
ComponentViewDestroy
ComponentViewRefresh
ComponentViewSelectAll
ComponentViewSetInfo
ComponentViewSetInfoEx
CreateFolder
DeleteFolder
DeleteIcon
EnableHourGlass
EnumFoldersItems
GetCPUType
GetFontSub
GetHandle
GetPorts
GetSelectedItemState
IsEmpty
IsNTAdmin
IsOSTypeNT
IsObject
LangLoadString
LnchAppAndWait
MessageBeepP
PathCompactPathPixel
PathGetDir
PathGetDrive
PathGetFile
PathGetFileExt
PathGetFileName
PathGetLongFromShort
PathGetPath
PathGetRegistryFolder
PathGetSpecialFolder
PathIsValidSyntax
QueryIcon
ReadArrayProperty
ReadBoolProperty
ReadNumberProperty
ReplaceIcon
ShowFolder
VerGetFileVersion
WriteArrayProperty
WriteBoolProperty
WriteNumberProperty
WriteStringProperty
_AppSearch
_BrowseForFolder
_CCPSearch
_CleanupInet
_CloseFile
_CmdGetHwndDlg
_CmdGetMsg
_CmdGetParam1
_CmdGetParam2
_ComponentAddItem
_ComponentCompareSizeRequired
_ComponentError
_ComponentErrorInfo
_ComponentFilterLanguage
_ComponentFilterOS
_ComponentGetData
_ComponentGetItemSize
_ComponentGetTotalCost
_ComponentInitialize
_ComponentIsItemSelected
_ComponentListItems
_ComponentLoadTarget
_ComponentMoveData
_ComponentReinstall
_ComponentRemoveAll
_ComponentSaveTarget
_ComponentSelectItem
_ComponentSetData
_ComponentSetupTypeEnum
_ComponentSetupTypeGetData
_ComponentSetupTypeSet
_ComponentTotalSize
_ComponentTransferData
_ComponentUpdate
_ComponentValidate
_ComponentViewCreate
_ComponentViewQueryInfo
_CopyBytes
_CreateDir
_CreateObject
_CreateRegistrySet
_CreateShellObjects
_CtrlGetNotificationCode
_CtrlGetSubCommand
_DefineDialog
_DialogSetFont
_DisableBranding
_DisableStatus
_Divide
_DoInstall
_DoSprintf
_EnableDialogCache
_EnablePrevDialog
_EnableStatus
_EndDialog
_ExistsDir
_ExistsDisk
_ExistsFile
_ExitInstall
_FileCopy
_GetByte
_GetDiskSpaceEx
_GetFont
_GetGlobalMemorySize
_GetLine
_GetObject
_GetSelectedTreeComponent
_GetSupportDir
_InetEndofTransfer
_InetGetLastError
_InetGetNextDisk
_InitInstall
_ListAddItem
_ListAddString
_ListCount
_ListCreate
_ListCurrentItem
_ListCurrentString
_ListDeleteItem
_ListDeleteString
_ListDestroy
_ListFindItem
_ListFindString
_ListGetFirstItem
_ListGetFirstString
_ListGetNextItem
_ListGetNextString
_ListGetType
_ListReadFromFile
_ListSetCurrentItem
_ListSetCurrentString
_ListSetIndex
_ListWriteToFile
_OpenFile
_PlaceBitmap
_ReadBytes
_ReadStringProperty
_Rebooted
_RegConnectRegistry
_RegCreateKey
_RegDeleteKey
_RegDeleteValue
_RegDisConnectRegistry
_RegEnum
_RegExistsKey
_RegQueryKeyBinaryValue
_RegQueryKeyValue
_RegSetKeyBinaryValue
_RegSetKeyValue
_ReleaseDialog
_SdShowMsg
_SeekBytes
_SendRequest
_SetAltMainImage
_SetByte
_SetColor
_SetDisplayEffect
_SetFont
_SetPaletteFile
_SetTitle
_SetupInet
_ShowObjWizardPages
_ShowWizardPages
_SizeWindow
_StatusUpdate
_TreeViewCreate
_VerUpdateFile
_WaitOnDialog
_WriteBytes
_WriteLine
__CreateObjectContext
__GetCmdLineOptions
__GetContextGUID
__GetFileRegistrar
__GetInfo
__GetLog
__GetLogDB
__GetMainWindow
__GetMaintenanceMode
__GetObjects
__GetProductGuid
__GetProgress
__GetReboot
__GetTextSub
__GetUser
__ISRTGetPropertyBag
__ISRTReleasePropertyBag
__LoadString
__ReleaseObjectContext
__RestoreMainLog
__SetComponentLog

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f9d513c64031335ce1d2c6f5bf34a299

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

version

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 239KB

.rdata Size: 44KB - Virtual size: 42KB

.data Size: 12KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 968B

.reloc Size: 20KB - Virtual size: 18KB

.text Size: 76KB - Virtual size: 76KB

.text
Size: 240KB - Virtual size: 239KB

.rdata
Size: 44KB - Virtual size: 42KB

.data
Size: 12KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 968B

.reloc
Size: 20KB - Virtual size: 18KB

.text
Size: 76KB - Virtual size: 76KB