62a2c0730a9ff14c3b8899818061102d33a43f7f01cc33daf13f4d9f4d1d7df4

Sharing

Copy URL Twitter E-mail

General

Target

62a2c0730a9ff14c3b8899818061102d33a43f7f01cc33daf13f4d9f4d1d7df4
Size

244KB
MD5

51ceab6697cd8cf06b47e3516af15aa5
SHA1

f9a6e068e826c7124fdc4ea5d4a4c9feb19a0ce6
SHA256

62a2c0730a9ff14c3b8899818061102d33a43f7f01cc33daf13f4d9f4d1d7df4
SHA512

0c72d611ac33c0569b6c7ff05a23464e181ab879feee6b7c0deff83962ad1ce116eeb2caf7c06ca72b43a389170e1eaeab1a357289a60eef02958a8d06c0bee5
SSDEEP

3072:iob+5FKsxeXlfsnsluDMcsYo1pfZG+8XG3U1X2XkIDP+h0mD2zTfNhgNrw1Tau:Nb+LKsMXl3ludo7fmBPID+aeCViwZf

Score

N/A

Malware Config

Signatures

Files

62a2c0730a9ff14c3b8899818061102d33a43f7f01cc33daf13f4d9f4d1d7df4
.dll windows x86

f0d78442df90de5066dedf8fdf4c51a0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalUnlock
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalLock
GlobalReAlloc
GlobalAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
lstrcatA
lstrcpynA
GetVersion
SetLastError
GetLastError
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetProcessVersion
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
GlobalFree
GetCurrentProcess
WriteFile
SetFilePointer
FlushFileBuffers
RtlUnwind
RaiseException
GetCommandLineA
HeapAlloc
HeapFree
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentThreadId
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
lstrcmpiA
lstrcpyA
MultiByteToWideChar
lstrlenA
CreateProcessA
WaitForSingleObject
CloseHandle
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary

user32

GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
EnableWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
SetWindowTextA
IsWindowEnabled
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
DefWindowProcA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
LoadStringA
UnregisterClassA
UnhookWindowsHookEx
DispatchMessageA
SendMessageA
CallNextHookEx
PeekMessageA
SetWindowsHookExA
MessageBoxA
GetKeyState

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryValueExA
RegDeleteValueA

ole32

CoUninitialize
CoInitialize

wininet

InternetOpenA
InternetConnectA
HttpOpenRequestA
HttpSendRequestExA
HttpEndRequestA
InternetReadFile
InternetCloseHandle

comctl32

ord17

gdi32

SetWindowExtEx
ScaleWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
GetStockObject
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
DeleteObject
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SelectObject
CreateBitmap
SaveDC
RestoreDC

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA

Exports

Exports

AuthUser

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f0d78442df90de5066dedf8fdf4c51a0

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

wininet

comctl32

gdi32

winspool.drv

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 18KB

.rsrc Size: 4KB - Virtual size: 944B

.reloc Size: 12KB - Virtual size: 11KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 18KB

.rsrc
Size: 4KB - Virtual size: 944B

.reloc
Size: 12KB - Virtual size: 11KB

.text
Size: 112KB - Virtual size: 112KB