301f2ffee13f4beafb21b870b7fa42dbd93dbec63bd5f08345db1b68355d3e20

Sharing

Copy URL Twitter E-mail

General

Target

301f2ffee13f4beafb21b870b7fa42dbd93dbec63bd5f08345db1b68355d3e20
Size

268KB
MD5

90a91787ba96bf922e39be4d602128a0
SHA1

0374fc275a9ff6b2e2c4e27e34a1ca99db3e65c7
SHA256

301f2ffee13f4beafb21b870b7fa42dbd93dbec63bd5f08345db1b68355d3e20
SHA512

c878986bc50ce9d989f62d4bdccb2bbaf614616a8b566a5349905aeee699396976041189fb647fae9363a0885e91f0a5ab6e14d8def9d6287e0d8d11177481fd
SSDEEP

3072:iob+5FKsxeXlfsnsluDMcsYo1pLGsIXL0zbNLpQ20qJJ7M2q:Nb+LKsMXl3ludo7LhIb6Ne4hq

Score

N/A

Malware Config

Signatures

Files

301f2ffee13f4beafb21b870b7fa42dbd93dbec63bd5f08345db1b68355d3e20
.dll windows x86

f0d78442df90de5066dedf8fdf4c51a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
lstrcatA
lstrcpynA
GetVersion
SetLastError
GetLastError
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
GlobalFree
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
RtlUnwind
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentThreadId
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
lstrcmpiA
lstrcpyA
MultiByteToWideChar
lstrlenA
CreateProcessA
WaitForSingleObject
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary

user32

GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
CallNextHookEx
PeekMessageA
SetWindowsHookExA
MessageBoxA
GetKeyState

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA

ole32

CoUninitialize
CoInitialize

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestExA
HttpEndRequestA
InternetReadFile
InternetCloseHandle

comctl32

ord17

gdi32

SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SelectObject
CreateBitmap
SaveDC
RestoreDC

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

Exports

Exports

AuthUser

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f0d78442df90de5066dedf8fdf4c51a0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

wininet

comctl32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 12KB - Virtual size: 11KB

.text Size: 136KB - Virtual size: 136KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 136KB - Virtual size: 136KB