dc60e6915e30a8f7feb57b5e0fcd731de0fd9e7df8279cac7cd6941118f179be

Sharing

Copy URL Twitter E-mail

General

Target

dc60e6915e30a8f7feb57b5e0fcd731de0fd9e7df8279cac7cd6941118f179be
Size

190KB
MD5

910e526c070ed6eb66af42b2588f4530
SHA1

1d5dd8574d288af6bac185838d931803affe273c
SHA256

dc60e6915e30a8f7feb57b5e0fcd731de0fd9e7df8279cac7cd6941118f179be
SHA512

881828d1ff247f794a6016cf07bac7b4851053b80b5337d71715f3667c84d4606eaf2614584933e0518e2f0c20ce3bec11ae96116c59ffa483c4679e85d31991
SSDEEP

3072:DnQzkfN3fD4yTX1frz4OqS9ZWM7x7uE+AQgOGK42qtGWDYzpXtt/FGlY:DQYfxfjTXlz4kj

Score

N/A

Malware Config

Signatures

Files

dc60e6915e30a8f7feb57b5e0fcd731de0fd9e7df8279cac7cd6941118f179be
.dll windows x86

550d8eaa6b803e91bb445d7a2cb77686

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmIsIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetOpenStatus
ImmNotifyIME
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmGetCompositionStringA
ImmSetCompositionFontW
ImmSetCompositionFontA

comctl32

ord17

kernel32

HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
ExitProcess
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapAlloc
HeapFree
GetCommandLineA
GetCurrentThreadId
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetErrorMode
GlobalFlags
lstrcpynA
GetSystemTime
lstrcmpA
GetTickCount
lstrcatA
lstrcpyA
IsBadReadPtr
IsBadHugeWritePtr
FindResourceW
LoadResource
LockResource
GetVersion
SetEndOfFile
WriteFile
SetFilePointer
IsBadHugeReadPtr
ReadFile
GlobalReAlloc
GlobalSize
LocalReAlloc
FreeLibrary
GetProcAddress
DeleteAtom
IsBadWritePtr
MulDiv
LocalLock
LocalUnlock
IsDBCSLeadByte
GetModuleFileNameW
GetModuleFileNameA
GetAtomNameW
GetAtomNameA
AddAtomW
AddAtomA
LoadLibraryW
LoadLibraryA
GetProfileStringW
GetProfileStringA
GetProfileIntW
GetProfileIntA
IsDBCSLeadByteEx
LocalAlloc
GetLocaleInfoA
IsValidCodePage
GetACP
GetVersionExA
GetCPInfo
GetStringTypeW
GetStringTypeA
LocalFree
lstrlenW
WideCharToMultiByte
GlobalLock
lstrlenA
GlobalAlloc
MultiByteToWideChar
GlobalUnlock
GlobalFree
FreeEnvironmentStringsA

gdi32

GetMapMode
CreateCompatibleBitmap
SetBkMode
SetPixel
SelectClipRgn
OffsetRgn
GetTextMetricsW
TranslateCharsetInfo
CreateDCA
CreateDCW
CreateICA
CreateICW
CreateFontIndirectA
CreateFontIndirectW
CreateEnhMetaFileA
CreateEnhMetaFileW
ExtTextOutA
GetTextCharset
ExtTextOutW
EnumFontFamiliesExA
EnumFontFamiliesExW
GetTextFaceA
GetTextFaceW
GetObjectType
GetObjectA
GetObjectW
LPtoDP
DPtoLP
ExcludeClipRect
GetDeviceCaps
SaveDC
SetWindowOrgEx
SetMapMode
SetViewportOrgEx
DeleteObject
GetStockObject
SelectObject
CreateSolidBrush
RestoreDC
SetViewportExtEx
SetWindowExtEx
EnumFontFamiliesW
SetBkColor
SetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
LineTo
MoveToEx
CreatePen
CreatePatternBrush
CreateBitmap
CreateDIBitmap
DeleteDC
BitBlt
CreateCompatibleDC
PolyPolyline
Rectangle
GetCharWidthW
SetBrushOrgEx
UnrealizeObject
SetTextAlign
PatBlt
GetClipBox
GetCharWidth32W
GetWindowExtEx
GetViewportExtEx
GdiComment
GetWindowOrgEx
GetViewportOrgEx
CloseEnhMetaFile
IntersectClipRect
GetTextMetricsA

winspool.drv

DeviceCapabilitiesW

comdlg32

ChooseColorA
ChooseColorW
ChooseFontA
ReplaceTextW
ReplaceTextA
FindTextW
FindTextA

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoCreateInstance
CoInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString
VariantInit
SysAllocString

Exports

Exports

CreateTextControl
CreateTextControlW
DebugTXFormat
FM_EnumFunc
GetErrorCode
ListCharDlg
ListParaDlg
ObjAttrTab1Dlg
ObjAttrTab2Dlg
ObjAttrTab3Dlg
ObjAttrTab4Dlg
PageDataCallBack
ParagraphTab1Dlg
ParagraphTab2Dlg
SectTab1Dlg
SectTab2Dlg
SelectFontDlg
SetDefaultDialogFont
TXGetErrorCode
TXGetVersion
TXInitialize
TXRegisterClass
TX_KBHookFunc
TX_WndProc
TabbedDlg
TblAttrTab1Dlg
TblAttrTab2Dlg
_EnumFontFamExProcU@16
_TD_Proc@16
_WndProcU@16

Sections

.text
Size: 57KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 789B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

550d8eaa6b803e91bb445d7a2cb77686

Headers

File Characteristics

Imports

imm32

comctl32

kernel32

gdi32

winspool.drv

comdlg32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 57KB - Virtual size: 92KB

.bss Size: - Virtual size: 124KB

.pdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.tls Size: 4KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 789B

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 106KB - Virtual size: 105KB

.reloc Size: 4KB - Virtual size: 248B

.text
Size: 57KB - Virtual size: 92KB

.bss
Size: - Virtual size: 124KB

.pdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.tls
Size: 4KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 789B

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 106KB - Virtual size: 105KB

.reloc
Size: 4KB - Virtual size: 248B