0c0ddaa9841c5a12cd480a14400e8e9a4f558c22bace62264ee1cfeea7ba8bc2

Sharing

Copy URL

Twitter E-mail

General

Target

0c0ddaa9841c5a12cd480a14400e8e9a4f558c22bace62264ee1cfeea7ba8bc2
Size

96KB
MD5

f0fee9d181d1b0a585399b905881ea9e
SHA1

794e8dca177cc8633d934005c55c9388f555c905
SHA256

0c0ddaa9841c5a12cd480a14400e8e9a4f558c22bace62264ee1cfeea7ba8bc2
SHA512

8e5580eedb020c4649dbde339bfe56dfdae00f5fe30aa8e21e37b1dfc725876038142674896c27f14f84dfe1268746f81d6810e720fdce86b451483cc78803f2
SSDEEP

1536:MGkZlPkC/XxHsBQvxjnj/rXxGGTEQtZAXDhEfiJZJHL0UA2SCYuD9bE4x9++o6aF:Elv/XxHRjnjrPEQcXDhMiJHLZA2SCYUa

Score

N/A

Malware Config

Signatures

Files

0c0ddaa9841c5a12cd480a14400e8e9a4f558c22bace62264ee1cfeea7ba8bc2
.dll windows x86

e77522acbddecc7f0aaf3436efc9c273

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

ElfReportEventA
LsaEnumerateAccounts
RegQueryValueA
LsaQuerySecret
AccessCheckByTypeAndAuditAlarmA
AccessCheckByTypeAndAuditAlarmW
CryptSetProvParam
ConvertSecurityDescriptorToAccessA
LsaSetTrustedDomainInformation
CreateProcessAsUserW
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenServiceA
LsaQueryInfoTrustedDomain
SystemFunction011
LsaSetSecurityObject
AddUsersToEncryptedFile
InitiateSystemShutdownA
LsaEnumerateTrustedDomainsEx
LsaDeleteTrustedDomain
BuildImpersonateTrusteeA
CloseServiceHandle
SystemFunction026
AddAuditAccessAce
DuplicateToken
RegOpenKeyA
GetSecurityDescriptorLength
SystemFunction016
ChangeServiceConfig2A
GetSecurityDescriptorOwner
RegFlushKey
OpenEventLogW
AddAccessAllowedAceEx
GetTrusteeFormW
CreateRestrictedToken
LsaLookupPrivilegeName
LsaRemovePrivilegesFromAccount
RegisterServiceCtrlHandlerW
OpenBackupEventLogW
BuildTrusteeWithNameA
ElfRegisterEventSourceW
GetCurrentHwProfileA
ObjectCloseAuditAlarmA
RegOpenKeyW
CryptSetHashParam
DecryptFileW
I_ScSetServiceBitsW
LsaAddPrivilegesToAccount
EncryptFileW
GetTrusteeTypeA
GetExplicitEntriesFromAclA
SystemFunction019
EqualPrefixSid
ConvertStringSidToSidW
AbortSystemShutdownW
SystemFunction022
CryptContextAddRef
LookupPrivilegeNameA
GetNamedSecurityInfoW
LsaCreateTrustedDomain
RegQueryValueExA
SystemFunction002
RegEnumKeyW
ElfDeregisterEventSource
LsaOpenSecret
RegSaveKeyA
AccessCheckByTypeResultListAndAuditAlarmA
CryptDestroyHash
SystemFunction001
RegSaveKeyW
GetPrivateObjectSecurity
NotifyBootConfigStatus
GetSecurityInfoExW
GetOverlappedAccessResults

gdi32

SetColorAdjustment
GetCharacterPlacementW
Polygon
GdiGetBatchLimit
SelectPalette
GetTextExtentPointA
RectInRegion
ModifyWorldTransform
BitBlt
DPtoLP
GetTextColor
GetEnhMetaFileDescriptionA
EudcUnloadLinkW
RemoveFontResourceExA
GetGlyphIndicesW
CreatePenIndirect
GetMiterLimit
EndFormPage
SetEnhMetaFileBits
RealizePalette
SetAbortProc
EnumFontFamiliesA
SetPaletteEntries
GetWindowExtEx
GetBrushOrgEx
PlgBlt
PolyTextOutW
RemoveFontResourceA
GetCharWidthW
ColorMatchToTarget
PlayMetaFile
UpdateColors
ResetDCW
SetStretchBltMode
GetEnhMetaFileA
RemoveFontMemResourceEx
DeleteMetaFile
CloseMetaFile
CopyEnhMetaFileW
CreateMetaFileW
CreateHatchBrush
GetKerningPairsA
TextOutW
GetWindowOrgEx
GetFontData
EnumFontFamiliesW
SetTextJustification
SetTextCharacterExtra
GetViewportExtEx
GdiPlayPageEMF
GetWorldTransform
SetWindowExtEx
GetTextExtentPoint32W
DeleteEnhMetaFile
GetBitmapBits
DeleteColorSpace
GdiGetDC
FillPath
AnimatePalette
OffsetViewportOrgEx
CreateFontW
GetNearestColor
GetViewportOrgEx
CreateDCA
SetWorldTransform
GetDIBits
GdiEndDocEMF

kernel32

GetModuleHandleA
VirtualAlloc
PeekConsoleInputW
WaitForMultipleObjectsEx
GetLargestConsoleWindowSize
HeapReAlloc
GetPrivateProfileSectionA
GetThreadLocale
GetNumberOfConsoleInputEvents
SetComputerNameA
SetCommState
FormatMessageW
DuplicateConsoleHandle
GetSystemPowerStatus
FindVolumeClose
CreateNamedPipeW
ReadConsoleInputW
IsBadStringPtrA
CreateDirectoryA
CreateMailslotW
GetThreadContext
DeviceIoControl
ScrollConsoleScreenBufferW
VirtualQuery
MoveFileWithProgressW
GetStdHandle
GetProcessShutdownParameters
GetVersion
GetProcAddress
Heap32ListNext
UnregisterWait
Module32First
SetFileApisToOEM
TlsSetValue
FindFirstVolumeW
ExitThread
SwitchToThread
WriteProfileStringA
GetHandleInformation
WinExec
IsDBCSLeadByte
GetSystemTime
SetConsoleKeyShortcuts
LoadLibraryA
HeapUnlock
GlobalGetAtomNameA
IsValidLocale
SwitchToFiber

opengl32

glRasterPos2d
glStencilOp
glNormal3sv
glDrawPixels
glTexCoord1d
glLightiv
glTexCoord3fv
glPixelTransferi
glColor3f
glPopClientAttrib
GlmfInitPlayback
glEndList
glGenTextures
glIndexf
glRects
glEvalCoord2dv
glArrayElement
glGetPixelMapuiv
glMap2d
glBitmap
glTexCoord1s
glNormal3iv
glColorMaterial
glGetTexLevelParameteriv
glRasterPos2f
glTexCoord1fv
glPolygonStipple
glGetMaterialfv
wglSwapMultipleBuffers
glTranslatef
glFogf
wglGetDefaultProcAddress
glReadBuffer
glNormal3dv
glPixelStorei
glTexCoord2dv
glLighti
glEvalCoord1d
glHint
glEvalMesh2
glGetTexLevelParameterfv
glEvalCoord2f
glVertex2f
glTexCoord4fv
glGetPointerv
glColor4ub
glPixelStoref
glVertex3f
glGetDoublev
glNormalPointer
glRectdv
glTexCoord3iv
glCopyPixels
glRasterPos4d
glLogicOp
glNormal3d
glIndexdv
glVertex3d
glColor4dv
wglUseFontOutlinesW
glNormal3i
wglCreateLayerContext
glRectf
glRasterPos3fv
glLineWidth
glTexEnvf
glEdgeFlag
glBegin

shell32

SHFormatDrive
SHFreeNameMappings
SHBrowseForFolderW
DoEnvironmentSubstW
ExtractIconA
DuplicateIcon
SheChangeDirExW
SheGetDirA
StrRStrA
StrRChrA
SHGetDataFromIDListW
ShellAboutW
DragQueryPoint
SHAppBarMessage
ShellHookProc
FindExecutableW
StrCmpNW
StrRStrIA
StrCmpNIA
StrStrIA

winspool.drv

EnumJobsW
ord202
DeletePrinterDriverExA
GetFormA
GetFormW
ord102
EnumPortsA
EnumPrintProcessorDatatypesW
DeletePrintProcessorA
DocumentPropertiesW
FindNextPrinterChangeNotification
AddMonitorA
AddPortA
AddPortW
SetJobA
DevQueryPrint
EXTDEVICEMODE
ScheduleJob
DeletePrintProcessorW
EnumPrintersW
DeletePrinterDriverA
AdvancedDocumentPropertiesA
DEVICEMODE
EnumPrintersA
DeviceCapabilitiesW
AddPrinterDriverA
DEVICECAPABILITIES
DeletePrinterKeyA
GetPrinterDataW
SetPortW
CloseSpoolFileHandle
SetPrinterDataExA
DeletePrinterIC
AdvancedDocumentPropertiesW
ConvertAnsiDevModeToUnicodeDevmode
AddPrintProcessorW
QueryRemoteFonts
SetPortA
ord211
ord103
AddPrintProvidorW
ord201
AdvancedSetupDialog
AddJobW
DeletePrintProvidorW
DeleteMonitorA
ord213
CreatePrinterIC
GetSpoolFileHandle
ord209
SplDriverUnloadComplete
GetPrinterDataExA
StartDocDlgA
EnumPrinterDataExA

msvcrt

_mbsncmp
_mbsspnp
_mbsnbcnt
fclose
sqrt
_ismbcalnum
_cputs
_i64tow
_toupper
__wgetmainargs
_mbsstr
__argc
_getmaxstdio
__p___wargv
__p__amblksiz
fputs
setvbuf
isleadbyte
_loaddll
_mbsnbcmp
_adj_fdivr_m64
iswctype
__unguarded_readlc_active
_lsearch
_wspawnve
feof
_CIacos
swscanf
_fputwchar
div
strncpy
sprintf
_execl
_fmode
_adjust_fdiv
_mbsinc
_ultow
_wstat
fread
_CIatan
_inpw
_unlink
fwrite
_spawnle
_execle
strspn
__p___argc
_setjmp
ftell
towupper
_filbuf
_mbscmp
cos
ferror
_wexeclp
_CIsqrt
__p__pctype
_ismbbprint
_strnset
strcpy
_wfindfirsti64
_mbsbtype
_getdrives
_getche
scanf
_rotl
_mbsset
_mbsnbcpy
fseek
_ismbcdigit
_wtempnam
fwprintf
srand
strtod
_wunlink
atan2
printf
strcat
_ecvt
_futime
_findfirsti64
_lrotl
fopen
fflush
_mbctohira
_ismbbgraph
_telli64
_ismbcalpha
_j0
_mbsnset
atexit
fputc
__p__winver
floor
_wfullpath
wcstod
towlower
fsetpos
fprintf
freopen
memset
_mbsnccnt
_wcsnicoll

Exports

Exports

lyucxe

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e77522acbddecc7f0aaf3436efc9c273

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

opengl32

shell32

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 24KB - Virtual size: 23KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 52KB - Virtual size: 50KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 24KB - Virtual size: 23KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 52KB - Virtual size: 50KB

.reloc
Size: 4KB - Virtual size: 3KB