d12dc11a61e19f8bcc7255fbeaf47f403a6aa1fb003839fd0ea26a0c018b399f

Sharing

Copy URL Twitter E-mail

General

Target

d12dc11a61e19f8bcc7255fbeaf47f403a6aa1fb003839fd0ea26a0c018b399f
Size

108KB
MD5

5de53792ace014ec342be83e1d46331e
SHA1

61a652edcef58094efd292823d52145df3dbc4a3
SHA256

d12dc11a61e19f8bcc7255fbeaf47f403a6aa1fb003839fd0ea26a0c018b399f
SHA512

ffc6859a5c67c6102d33ec548803f168f829cc8723e077271409a918a783482269b8a0cde0f0262cbd2257e2ba54bf214a1e658b278703c2e38190b5a681b6b0
SSDEEP

1536:HqRuuAjsnOv8v88w3OwHgvFyTrVDPTa+J8frQ+p2oEiMR3jPXMrXUJ:KrI2G808wewAITrVzTuhprf6zPXqXUJ

Score

N/A

Malware Config

Signatures

Files

d12dc11a61e19f8bcc7255fbeaf47f403a6aa1fb003839fd0ea26a0c018b399f
.dll windows x86

99cc36f8b3efaaec0fd970e15a19b986

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

RtlUnwind
GetVolumeNameForVolumeMountPointA
WaitForSingleObject
WriteConsoleInputA
GlobalFindAtomW
BuildCommDCBA
GetPrivateProfileSectionNamesW
FreeLibrary
_hwrite
GetCurrentDirectoryA
lstrcpyA
ChangeTimerQueueTimer
lstrlenW
IsValidLocale
TlsAlloc
VerLanguageNameA
ConsoleMenuControl
GetConsoleInputWaitHandle
TerminateJobObject
GetLongPathNameW
OpenSemaphoreW
HeapCompact
GlobalReAlloc
GetCommConfig
FindNextFileA
VDMOperationStarted
lstrcpynA
GetFileAttributesExA
AreFileApisANSI
GetConsoleCP
GetHandleInformation
GetSystemTime
WaitForMultipleObjectsEx
BuildCommDCBAndTimeoutsA
CallNamedPipeA
GetShortPathNameW
GetLogicalDriveStringsW
GetConsoleAliasExesA
GlobalSize
LoadResource
GetConsoleFontInfo
VirtualUnlock
GetLocalTime
ReadConsoleInputExW
SetLastError
ExitProcess
FoldStringW
GetModuleHandleA
SetConsoleCP
GetVolumeInformationW
SetConsoleOutputCP
VirtualAlloc
IsBadStringPtrA
LoadLibraryExA
GetProcAddress
GetLastError
GetVersionExA
FreeLibraryAndExitThread
CreateTimerQueue
GetVersion
GetCommModemStatus
LoadLibraryA

advapi32

GetTrusteeFormA
ChangeServiceConfig2W
FindFirstFreeAce
CryptSetProviderW
SetTokenInformation
SystemFunction024
BuildTrusteeWithNameW
GetAuditedPermissionsFromAclW
SetSecurityDescriptorDacl
CheckTokenMembership
GetSecurityDescriptorDacl
GetServiceKeyNameW
AccessCheck
SystemFunction031
SystemFunction033
CryptImportKey
LsaLookupNames
CryptAcquireContextW
AddAccessAllowedObjectAce
LsaGetRemoteUserName
LsaOpenAccount
BuildExplicitAccessWithNameA
CryptContextAddRef
EnumServicesStatusW
CryptSetProviderExA
RegQueryInfoKeyA
FreeEncryptionCertificateHashList
GetMultipleTrusteeOperationA
DeregisterEventSource
LsaCreateSecret

comctl32

FlatSB_SetScrollProp
ord16
ImageList_GetImageRect
ImageList_Read
DestroyPropertySheetPage
FlatSB_ShowScrollBar
ImageList_EndDrag
CreateStatusWindowW
ImageList_GetIconSize
FlatSB_SetScrollRange
ImageList_LoadImageA
ImageList_AddMasked
ImageList_Duplicate
InitializeFlatSB
ord5
ord15
ImageList_SetFilter
DrawStatusTextW
ImageList_SetIconSize
_TrackMouseEvent
ImageList_GetIcon
ord13
FlatSB_EnableScrollBar
FlatSB_SetScrollPos
FlatSB_GetScrollRange
FlatSB_GetScrollPos
ImageList_DragMove
ImageList_SetOverlayImage
PropertySheetW
ord8
ImageList_GetImageInfo
FlatSB_GetScrollProp
ImageList_Replace
ImageList_AddIcon
ImageList_BeginDrag
ord7
ImageList_LoadImageW
ImageList_DragLeave
ImageList_ReplaceIcon
ImageList_Copy
ord17
ImageList_GetImageCount
ord14
ord6
PropertySheetA
ord3
FlatSB_GetScrollInfo
ImageList_Draw
ImageList_DrawEx
ImageList_DragShowNolock
ImageList_Create
CreatePropertySheetPageA
ImageList_SetImageCount
ImageList_SetDragCursorImage
FlatSB_SetScrollInfo
CreateToolbarEx
ImageList_DrawIndirect

winspool.drv

GetJobW
ord214
AddPrinterDriverExA
EXTDEVICEMODE
GetSpoolFileHandle
EnumPrintProcessorDatatypesW
ord207
ConnectToPrinterDlg
ord211
ord205
AddPortW
PlayGdiScriptOnPrinterIC
DeletePrinterDataExA
ord100
EnumPortsA
SplDriverUnloadComplete
SetFormA
EnumPrintProcessorsW
EnumPrintersA
EnumFormsA
CloseSpoolFileHandle
EndPagePrinter
DeletePrintProcessorA
StartDocPrinterA
DeletePrinterDriverW
GetPrinterDriverW
AdvancedSetupDialog
GetPrinterDataExA
SeekPrinter
EnumPrinterDriversW
ord102
DeletePrinter
DeletePrinterDriverExW
XcvDataW
GetPrinterDataW
SetPrinterDataExA
EnumJobsW
EnumPrinterKeyA
DeleteMonitorW
DeletePrinterIC
StartPagePrinter
ScheduleJob
DocumentPropertiesA
OpenPrinterA
SetJobW
ord208
ADVANCEDSETUPDIALOG
PrinterMessageBoxA
ord209
WritePrinter
AddFormW
DeletePrintProvidorW
FreePrinterNotifyInfo

msvcrt

_lrotr
_mbsinc
_mbsninc
_mbsnset
_mbspbrk
_mbscmp
_mbsncat
_mbsnbcmp
_onexit
_daylight
_ui64toa
_wpgmptr
_unlink
_wcsncoll
printf
memset
_flushall
__crtGetLocaleInfoW
_sys_errlist
ftell
_adj_fdiv_m32i
_fcloseall
_copysign
_XcptFilter
__iscsymf
fputc
fputs
wcslen
fwrite
_cwait
_mbsspn
_adj_fdiv_r
_umask
__argc
_mbsnbicoll
__RTCastToVoid
_wspawnve
fsetpos
_vsnprintf
sprintf
_outpw
_wexeclpe
_wmakepath
system
_exit
wscanf
_iob
raise
__unDName
_mbstok
__CxxLongjmpUnwind
fopen
__dllonexit
_mbsstr
__p__winver
_mbsbtype
vswprintf
_pwctype
fprintf
fclose
putc
fseek
__p__environ
ferror
_mbsnbcoll
fwprintf
isxdigit
_spawnlp
fread
ungetwc
_mbsnbicmp
_fcvt
_ismbcpunct
feof

Exports

Exports

Apah
Cmkhgjl
Cxyqrawmjo
Gfigto
Hcmf
Hisvoucph
Risy

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99cc36f8b3efaaec0fd970e15a19b986

Headers

File Characteristics

Imports

kernel32

advapi32

comctl32

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 52KB - Virtual size: 49KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 52KB - Virtual size: 49KB

.reloc
Size: 8KB - Virtual size: 5KB