ab9ff498827605e62176eeda69f23260c83258d7bfaf6a6c0e99f0b4be376630

Sharing

Copy URL Twitter E-mail

General

Target

ab9ff498827605e62176eeda69f23260c83258d7bfaf6a6c0e99f0b4be376630
Size

268KB
MD5

4d0c11246b0441ba0226771c52625569
SHA1

b3ea9b50d21b3d0c7dda30324a23cf3fbdbe1a6e
SHA256

ab9ff498827605e62176eeda69f23260c83258d7bfaf6a6c0e99f0b4be376630
SHA512

0912a6f5aa8e19a4adb33ed0480779508e788ed3a6950dae62efa758e159a05ad17810447d8661938ba88fdd8c964429e7a323879fda940c6cdae48fc1f97175
SSDEEP

6144:HIsioPRJWOyOPMTQzG4cXKoo4RhS7SECtVmjM5ieuSXAM9F:oCPhy/ocdhLCSzoj8K6F

Score

N/A

Malware Config

Signatures

Files

ab9ff498827605e62176eeda69f23260c83258d7bfaf6a6c0e99f0b4be376630
.dll windows x86

d345212ab2b910801bc405fd8374737d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
LookupPrivilegeValueW
CreateWellKnownSid
IsValidSid
CopySid
GetLengthSid
GetTokenInformation
EqualSid
AddAce
GetAce
AddAccessAllowedAce
InitializeAcl
GetAclInformation
OpenProcessToken
SetTokenInformation
GetSecurityDescriptorDacl
GetKernelObjectSecurity
CreateProcessAsUserW
CreateRestrictedToken
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW

kernel32

FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
SetErrorMode
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
RtlUnwind
HeapValidate
IsBadReadPtr
RaiseException
WriteFile
ExitProcess
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
DuplicateHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
GetModuleFileNameA
UnhandledExceptionFilter
TerminateProcess
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LCMapStringA
LCMapStringW
HeapReAlloc
GetTimeZoneInformation
GetLocaleInfoA
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
CreateFileA
SetEnvironmentVariableA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
WritePrivateProfileStringW
lstrlenA
GetModuleHandleA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FormatMessageW
LocalFree
MulDiv
GlobalFlags
GetTickCount
GlobalFree
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
InterlockedDecrement
GlobalAlloc
InterlockedIncrement
FileTimeToSystemTime
GetThreadLocale
FreeResource
GetCurrentThreadId
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
MultiByteToWideChar
GetVersionExA
lstrlenW
GlobalLock
GlobalUnlock
GetCurrentProcessId
GlobalGetAtomNameW
GlobalAddAtomW
SetLastError
WideCharToMultiByte
FindResourceW
LoadResource
LockResource
SizeofResource
GetStartupInfoW
GetModuleFileNameW
GetCurrentProcess
GetCommandLineW
IsDebuggerPresent
FreeLibrary
GetProcAddress
LoadLibraryW
GetVersionExW
GetModuleHandleW
CreateFileW
GetFileSize
ReadFile
CloseHandle
SetFilePointer
GetStdHandle
GetLastError
SetEnvironmentVariableW
RemoveDirectoryW

gdi32

GetTextColor
GetBkColor
GetMapMode
CreateSolidBrush
GetStockObject
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
TextOutW
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
DeleteObject
GetRgnBox
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32W
ExtTextOutW
BitBlt
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
CreateCompatibleBitmap
CreateRoundRectRgn
CreateRectRgn

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

shlwapi

PathStripToRootW
PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathCombineW
PathIsUNCW

shell32

SHGetFolderPathW
DragQueryFileW
DragFinish
CommandLineToArgvW
SHFileOperationW

ole32

OleInitialize
OleUninitialize
CLSIDFromProgID
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromString
CoUninitialize
CoInitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
CoFreeUnusedLibraries

comdlg32

GetFileTitleW

oleaut32

SysAllocStringLen
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysFreeString
SysAllocString
OleCreateFontIndirect
VariantClear

oledlg

OleUIBusyW

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

Sections

.text
Size: 224KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 228B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d345212ab2b910801bc405fd8374737d

Headers

File Characteristics

Imports

advapi32

kernel32

gdi32

winspool.drv

shlwapi

shell32

ole32

comdlg32

oleaut32

oledlg

version

Sections

.text Size: 224KB - Virtual size: 524KB

.bss Size: - Virtual size: 556KB

.pdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.tls Size: 4KB - Virtual size: 4KB

.idata Size: 7KB - Virtual size: 6KB

.rsrc Size: 16KB - Virtual size: 16KB

.reloc Size: 4KB - Virtual size: 228B

.text
Size: 224KB - Virtual size: 524KB

.bss
Size: - Virtual size: 556KB

.pdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.tls
Size: 4KB - Virtual size: 4KB

.idata
Size: 7KB - Virtual size: 6KB

.rsrc
Size: 16KB - Virtual size: 16KB

.reloc
Size: 4KB - Virtual size: 228B