5290c606a104659e1d1da0732ef5dd26da3d27a83aeff4dd105a246e2fd920d4

Sharing

Copy URL Twitter E-mail

General

Target

5290c606a104659e1d1da0732ef5dd26da3d27a83aeff4dd105a246e2fd920d4
Size

232KB
MD5

a0456f0a7983bd8a24be33b393a80756
SHA1

952af3975be0c0889356091aff47163de7ffd404
SHA256

5290c606a104659e1d1da0732ef5dd26da3d27a83aeff4dd105a246e2fd920d4
SHA512

2836539a6777cf6d36e3135bed8f0bd10ba5e1432688fda949caefbe264b42fadfb0a5a5b19e09ac454e82b8e1f217fb74660a1e417d04b13c78cc6bba33dcfe
SSDEEP

3072:VGzDPUH8m0NUfBoc6Bebi01rzzUQwJd26Q4A9nOV67yV4LI+:Vo8U6OePrzzC2641k4LI+

Score

N/A

Malware Config

Signatures

Files

5290c606a104659e1d1da0732ef5dd26da3d27a83aeff4dd105a246e2fd920d4
.dll windows x86

21239b8b3fd5c518e466550c4fd3b25b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
DeleteCriticalSection
GlobalFree
GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
lstrlenA
GetVersion
InterlockedIncrement
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
InitializeCriticalSection
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentProcess
WriteFile
LocalFree
GetCommandLineA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
LocalAlloc
lstrcpynA
SetLastError
WaitForMultipleObjects
GetLastError
DeviceIoControl
GetCurrentDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
CreateFileA
LoadLibraryA
GetProcAddress
Sleep
GetCurrentProcessId
FreeLibrary
GetTickCount
GetVersionExA
OpenEventA
TerminateThread
CreateThread
WaitForSingleObject
OpenFileMappingA
CreateFileMappingA
OutputDebugStringA
MapViewOfFile
UnmapViewOfFile
ResetEvent
CreateEventA
SetEvent
CloseHandle
GetProcessVersion
DisableThreadLibraryCalls

user32

GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
SetWindowTextA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
DefWindowProcA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
IsIconic
GetWindowPlacement
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
PeekMessageA
LoadStringA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
GetDoubleClickTime
SystemParametersInfoA
WindowFromPoint
GetWindowThreadProcessId
PostMessageA
RegisterWindowMessageA
SendMessageA
GetCursorPos
GetWindowRect
ShowCursor
SetCursorPos
GetSystemMetrics
mouse_event
FindWindowA
IsWindowVisible
KillTimer
SetTimer
CreateWindowExA
DestroyWindow
GetCursor
SetCursor
IsRectEmpty
SetRect
DestroyCursor
LoadCursorA
PtInRect
GetKeyState
keybd_event
VkKeyScanA
GetKeyboardState
GetFocus
GetClassLongA
CopyRect
PostThreadMessageA
UnhookWindowsHookEx
DispatchMessageA
CallNextHookEx
GetAsyncKeyState
SetWindowsHookExA
GetMessageA
TranslateMessage
SetPropA

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
ImmGetVirtualKey

comctl32

ord17

gdi32

SelectObject
GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateBitmap

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

Allow_AddChar
Allow_AddCharOnDown
Allow_AddIME
Allow_AddKeyboardItem
Allow_AddRect
Allow_AddSystemRect
Allow_DeleteAll
Allow_GetSystemRectSize
Allow_IsPartStop
Allow_PartStart
Allow_PartStop
Allow_RemoveRect
Allow_RemoveSystemRect
Allow_SendFakeOperation
Allow_Start
Allow_Stop
Allow_ZeroWrongOperationNotifyFlag

Sections

.text
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

21239b8b3fd5c518e466550c4fd3b25b

Headers

File Characteristics

Imports

kernel32

user32

imm32

comctl32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 76KB - Virtual size: 74KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 16KB - Virtual size: 40KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 12KB - Virtual size: 11KB

.text Size: 104KB - Virtual size: 104KB

.text
Size: 76KB - Virtual size: 74KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 16KB - Virtual size: 40KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 104KB - Virtual size: 104KB