c0bec1ecf8e3cb43122e8b19918d5ea98fc9b24cb38e53e591db785557701f92

Sharing

Copy URL Twitter E-mail

General

Target

c0bec1ecf8e3cb43122e8b19918d5ea98fc9b24cb38e53e591db785557701f92
Size

372KB
MD5

417dd66203ede2a2e40f2fdf2c07aa20
SHA1

79749f96ae422d10da26443e5f110c7bbd67de20
SHA256

c0bec1ecf8e3cb43122e8b19918d5ea98fc9b24cb38e53e591db785557701f92
SHA512

59fa76e6d188cb9e8d6bae958e1b5e261fd891a925474d9c948868feee143fbd37486d2064481e1619e5eaf2677f168f745ef31cbbad2e88630ab413b5106c4a
SSDEEP

6144:bORo3s0wnm0butNZXdNOdbrpMWdEOSdK37Mb/gI8:KAsVnl67dOSdKrC4I

Score

N/A

Malware Config

Signatures

Files

c0bec1ecf8e3cb43122e8b19918d5ea98fc9b24cb38e53e591db785557701f92
.dll windows x86

395e87568441e1d9ddfd330b2d37846d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedDecrement
lstrcatA
SetErrorMode
WritePrivateProfileStringA
InterlockedIncrement
GlobalFlags
RaiseException
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
TlsFree
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
ExitProcess
TerminateProcess
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetCurrentProcessId
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
SetLastError
GlobalFree
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
CloseHandle
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
GetProcAddress
FreeLibrary
LoadLibraryA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiA
GetVersion
GetLastError
MultiByteToWideChar
GetTickCount
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
MulDiv
WideCharToMultiByte
GetModuleHandleA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
DeleteCriticalSection

user32

RemovePropA
GetPropA
SetPropA
GetClassInfoExA
GetClassLongA
CreateWindowExA
GetCapture
WinHelpA
RegisterWindowMessageA
DestroyMenu
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
AdjustWindowRectEx
GetClassInfoA
RegisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
ShowWindow
GetForegroundWindow
GetDlgItem
LoadCursorA
GetSystemMetrics
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetWindowTextA
SetWindowTextA
GetClassNameA
wsprintfA
GetTabbedTextExtentA
UnregisterClassA
UnhookWindowsHookEx
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
SetWindowLongA
LoadIconA
PostQuitMessage
PostMessageA
SetCursor
SendMessageA
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongA
GetParent
MessageBoxA
ValidateRect
GetCursorPos
PeekMessageA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState

gdi32

ScaleWindowExtEx
GetStockObject
SaveDC
RestoreDC
DeleteDC
DeleteObject
SelectObject
TextOutA
Rectangle
SetTextColor
SetBkColor
CreateSolidBrush
CreateFontA
GetDeviceCaps
CreateDIBSection
CreateCompatibleDC
SetMapMode
GetClipBox
CreateBitmap
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
RectVisible
PtVisible

comctl32

ord17

shlwapi

PathFindFileNameA
PathFindExtensionA

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

oleaut32

VariantClear
VariantChangeType
VariantInit

Exports

Exports

NV_InitVideoProc
NV_InitVideoResizer
NV_PutFrameVideoProc
NV_PutFrameVideoResize
NV_PutFrameVideoSetOsdLogo
NV_RGB32toYUY2
NV_ReleaseVideoProc
NV_ReleaseVideoResizer
NV_SetLogo
NV_SetNoVideoLogo
NV_SetPreviewShade
NV_SetYuyv
NV_StartPreviewOsdLogo
NV_StartPreviewOsdLogoEx
NV_StopLogo
NV_StopNoVideoLogo
NV_StopPreviewOsdLogo
NV_StopPreviewShade

Sections

.text
Size: 116KB - Virtual size: 114KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

395e87568441e1d9ddfd330b2d37846d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comctl32

shlwapi

oleacc

winspool.drv

advapi32

oleaut32

Exports

Exports

Sections

.text Size: 116KB - Virtual size: 114KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 8KB - Virtual size: 23KB

.rsrc Size: 112KB - Virtual size: 109KB

.reloc Size: 20KB - Virtual size: 16KB

.rmnet Size: 88KB - Virtual size: 88KB

.text
Size: 116KB - Virtual size: 114KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 8KB - Virtual size: 23KB

.rsrc
Size: 112KB - Virtual size: 109KB

.reloc
Size: 20KB - Virtual size: 16KB

.rmnet
Size: 88KB - Virtual size: 88KB