0aa58e569310f46c691302c6836a956760ad4c2dd465b3b3be4fe1e5814d73ce

Sharing

Copy URL Twitter E-mail

General

Target

0aa58e569310f46c691302c6836a956760ad4c2dd465b3b3be4fe1e5814d73ce
Size

244KB
MD5

0c010ba880ce2d90ca3b9658dfbdbc8b
SHA1

10ee338b6ba54d761d23254dae94f217db031486
SHA256

0aa58e569310f46c691302c6836a956760ad4c2dd465b3b3be4fe1e5814d73ce
SHA512

eb9ac783f5dadad433d511d6915795b471350ce9adda13752c0216440b30e18cd215795d7fa1d75f69d546e9af632f9c61e7c06aa6695cd58ec284fff43f058c
SSDEEP

3072:4EgOm4vLSzGHSP6mHgbf5PxP/FfXBGWRI2vwVv6lcebY2B8fWt7MIDebJOuo:4HFw46mAbxF9fAWC8B8ut7DDqo

Score

N/A

Malware Config

Signatures

Files

0aa58e569310f46c691302c6836a956760ad4c2dd465b3b3be4fe1e5814d73ce
.dll windows x86

63484dfd1572b5d796417adead0e3179

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MoveFileA
DeleteFileA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapFree
HeapAlloc
RaiseException
GetCommandLineA
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
GetOEMCP
GetCPInfo
GlobalFlags
lstrcmpA
GetProcessVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
SetLastError
GetVersion
lstrlenA
lstrcpynA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetErrorMode
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
GetCurrentThreadId
WriteFile
SetFilePointerEx
SetEndOfFile
GetFileSize
GetLastError
CreateFileA
WaitForSingleObject
ReleaseMutex
CloseHandle
GetVersionExA
CreateMutexA

comctl32

ord17

user32

GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
LoadStringA
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
CopyRect
EnableWindow
GetTopWindow
MessageBoxA
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
UnregisterClassA
UnhookWindowsHookEx
SetWindowsHookExA
PeekMessageA
CallNextHookEx
DispatchMessageA
SendMessageA
GetKeyState
GetWindow

gdi32

GetStockObject
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectObject
SetTextColor
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
RestoreDC
SaveDC
DeleteDC
DeleteObject
GetDeviceCaps
GetObjectA
CreateBitmap
GetClipBox
SetBkColor

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

CreateFileReadAble
CreateFileWriteAble
DeleteFileReadAble
DeleteFileWritable
FlvMetaAddCuePoint
FlvMetaAddCuePointParam
FlvMetaClearCuePoints
FlvMetaCreateObject
FlvMetaDeleteObject
FlvMetaParseFromFile
FlvMetaSetVariable
FlvMetaUpdateToFile
FlvMuplex_GetMaxFrameSize
FlvMuplex_WriteAudioFrame
FlvMuplex_WriteDataTag
FlvMuplex_WriteHeader
FlvMuplex_WriteVideoFrame
FlvReader_Create
FlvReader_CreateByFile
FlvReader_Delete
FlvReader_ReadData
FlvReader_ReadHeader
FlvWriter_Create
FlvWriter_CreateByFile
FlvWriter_Delete
FlvWriter_Flush
FlvWriter_WriteAudioFrame
FlvWriter_WriteHeader
FlvWriter_WriteVideoFrame
Flv_FreeTag
Flv_ReadHeader
Flv_ReadTag
Flv_WriteHeader
Flv_WriteTag
GetFLVInfo
GetFLVInfoFromFile

Sections

.text
Size: 124KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1012B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

63484dfd1572b5d796417adead0e3179

Headers

File Characteristics

Imports

kernel32

comctl32

user32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 124KB - Virtual size: 120KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 16KB - Virtual size: 27KB

.rsrc Size: 4KB - Virtual size: 1012B

.reloc Size: 16KB - Virtual size: 12KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 124KB - Virtual size: 120KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 16KB - Virtual size: 27KB

.rsrc
Size: 4KB - Virtual size: 1012B

.reloc
Size: 16KB - Virtual size: 12KB

.rmnet
Size: 60KB - Virtual size: 60KB