f1c396c469a0d99204919fb0853fb9b0ecb7ee23318e7bd202596fd47dc5fdc4

Sharing

Copy URL

Twitter E-mail

General

Target

f1c396c469a0d99204919fb0853fb9b0ecb7ee23318e7bd202596fd47dc5fdc4
Size

252KB
MD5

0bd99754d68a519c3d54bbb3dce103f0
SHA1

752cf3c299ef9112ff45f9f1312f352c1e1bfea9
SHA256

f1c396c469a0d99204919fb0853fb9b0ecb7ee23318e7bd202596fd47dc5fdc4
SHA512

e83c0e267da15454dcce44cbed78582456f61b698dd55ad688684fb8e60eafa66170b1c0dc6caeb168add2bc0bc971aca734bc7535d3e3da7c7fd4435c1f921e
SSDEEP

3072:WskSNvH0plWg8QtQ6iL1kFL77H9A2fLmqqKoWaJDvaFtJe6KQEjY/o9eBI5Z6T:/vH0pld8qQnL1Y7Hi4I7aFC6lEUTu8T

Score

N/A

Malware Config

Signatures

Files

f1c396c469a0d99204919fb0853fb9b0ecb7ee23318e7bd202596fd47dc5fdc4
.dll windows x86

16dbac0e962a890a927e3d03fab23ed6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
GetProcessVersion
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentProcess
SetFilePointer
FlushFileBuffers
SetEndOfFile
GlobalFindAtomA
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
HeapAlloc
HeapFree
RaiseException
HeapSize
HeapReAlloc
GetACP
ExitProcess
TerminateProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GlobalDeleteAtom
GetModuleHandleA
GetProcAddress
SetLastError
GetVersion
lstrcpynA
GetModuleFileNameA
lstrcpyA
lstrcatA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalLock
LeaveCriticalSection
TlsFree
GlobalHandle
GlobalUnlock
GlobalFree
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentThreadId
lstrcmpA
LocalFree
ReleaseMutex
CreateMutexA
InterlockedIncrement
WriteFile
GetOverlappedResult
CreateFileA
SetCommTimeouts
GetCommState
SetCommState
SetupComm
PurgeComm
CreateThread
SetCommMask
WaitCommEvent
GetLastError
ClearCommError
ReadFile
lstrlenA
InterlockedDecrement
MultiByteToWideChar
WaitForSingleObject
ResetEvent
CloseHandle
CreateEventA
SetEvent
WideCharToMultiByte
Sleep

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegCloseKey

oleaut32

VariantClear
SysFreeString
SysAllocString

comctl32

ord17

user32

MessageBoxA
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
GetClassNameA
PtInRect
PostQuitMessage
DestroyMenu
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetCapture
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetDC
ClientToScreen
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
GetKeyState
CallNextHookEx
SetWindowsHookExA
WinHelpA
PeekMessageA

gdi32

GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SaveDC
RestoreDC
SetMapMode
SetTextColor
DeleteObject
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreateBitmap
GetObjectA
DeleteDC
SetBkColor
GetStockObject
SelectObject

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

Exports

Exports

CT_CallDtmf
CT_CallIn
CT_CallOff
CT_CallOut
CT_Close
CT_GetCallMode
CT_GetDeviceCallState
CT_GetDeviceInfo
CT_GetDeviceNetState
CT_GetMessage
CT_GetMessageCount
CT_GetMessageSpaceStatus
CT_GetNetworkSignal
CT_GetPhoneBook
CT_GetPhoneBookSpaceStatus
CT_GetPinInfo
CT_GetSystemInfo
CT_Init
CT_ModifyPIN
CT_OpenRLock
CT_SendMessage
CT_SetDevicePort
CT_SetMessage
CT_SetMessageParam
CT_SetMessageRead
CT_SetMicMute
CT_SetPhoneBook
CT_SetVolome
CT_UnlockPIN
CT_VerifyPIN
SetCallbackForIncommingCall
SetCallbackForIncommingMsg
SetCallbackForRunningInfo

Sections

.text
Size: 128KB - Virtual size: 126KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

16dbac0e962a890a927e3d03fab23ed6

Headers

File Characteristics

Imports

kernel32

advapi32

oleaut32

comctl32

user32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 126KB

.rdata Size: 20KB - Virtual size: 17KB

.data Size: 24KB - Virtual size: 38KB

.reloc Size: 16KB - Virtual size: 14KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 128KB - Virtual size: 126KB

.rdata
Size: 20KB - Virtual size: 17KB

.data
Size: 24KB - Virtual size: 38KB

.reloc
Size: 16KB - Virtual size: 14KB

.rmnet
Size: 60KB - Virtual size: 60KB