e55aab929b409e7d26c9687d9d0bbc453af88ac525a01665205a8b7cbb23b512

Sharing

Copy URL

Twitter E-mail

General

Target

e55aab929b409e7d26c9687d9d0bbc453af88ac525a01665205a8b7cbb23b512
Size

282KB
MD5

a23e1157981e6190401c4ec8f489b576
SHA1

7d4a2a4de329c59b5c0d35ca39496e0c03e9a212
SHA256

e55aab929b409e7d26c9687d9d0bbc453af88ac525a01665205a8b7cbb23b512
SHA512

3733d35a7252b46db7ca9c4b2a00b1ac2e4725f259e24ce2edbd70237a70478ba98fa83c8ec9d6eae830a93548c76dc657994a1670472830d5cdcb1e5b57545b
SSDEEP

6144:q08+vTVPM4ki0f+Tw7YEapFsfE8VsTl8daqFEDnm:y+K4EWcsgfbVsT8FEL

Score

N/A

Malware Config

Signatures

Files

e55aab929b409e7d26c9687d9d0bbc453af88ac525a01665205a8b7cbb23b512
.dll windows x86

58130c8472ca449ff3c76fd6969ccd44

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_onexit
_lock
_unlock
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
realloc
memcpy
_wcsicmp
wcschr
iswalpha
??_V@YAXPAX@Z
??_U@YAPAXI@Z
_wcsnicmp
__dllonexit
_errno
__CxxFrameHandler
_mbstrlen
wcsstr
wcsncmp
_wcsnset
_itow
_vsnwprintf
qsort
wcsrchr
_mbsicmp
memset

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

rpcrt4

NdrServerCall2
RpcBindingInqAuthClientW
RpcBindingSetAuthInfoW
RpcBindingFree
RpcServerUnregisterIf
RpcMgmtWaitServerListen
RpcMgmtStopServerListening
RpcBindingServerFromClient
RpcBindingToStringBindingW
RpcStringBindingParseW
RpcStringBindingComposeW
RpcBindingFromStringBindingW
RpcStringFreeW
RpcServerUseProtseqEpW
RpcServerRegisterIfEx
RpcServerRegisterIf
RpcServerRegisterAuthInfoW
RpcServerListen
NdrClientCall2

kernel32

LocalFree
GetLastError
PostQueuedCompletionStatus
LocalAlloc
GetComputerNameW
lstrlenW
DeleteCriticalSection
ReadFile
CloseHandle
GetFileSize
GetFileAttributesW
GetFullPathNameW
DeleteFileW
WriteFile
GetTempFileNameW
GetTempPathW
GetLocalTime
FreeLibrary
GetProcAddress
LoadLibraryW
GetSystemDirectoryW
DisableThreadLibraryCalls
InterlockedExchange
Sleep
InterlockedCompareExchange
OutputDebugStringA
RtlUnwind
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
EnterCriticalSection
SetUnhandledExceptionFilter
GetVersion
InitializeCriticalSection
HeapDestroy
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapFree
GetVersionExW
InterlockedDecrement
SetFilePointer
ExpandEnvironmentStringsW
InterlockedIncrement
OutputDebugStringW
WideCharToMultiByte
MultiByteToWideChar
FileTimeToSystemTime
GetDateFormatW
SystemTimeToFileTime
CreateDirectoryW
GetCurrentThread
CreateEventW
OpenEventW
SetEvent
WaitForSingleObject
SetEndOfFile
UnmapViewOfFile
GetFileType
CreateFileW
LocalFileTimeToFileTime
GetSystemTime
MapViewOfFileEx
CreateFileMappingW
CopyFileW
GetStringTypeExW
GetTimeFormatW
MulDiv
CreateProcessW
ReleaseMutex
WaitForMultipleObjects
SetEnvironmentVariableW
CreateMutexW
OpenMutexW
LeaveCriticalSection
SetLastError
MapViewOfFile
VirtualAlloc
VirtualFree
UnhandledExceptionFilter
GetSystemTimeAsFileTime

shell32

SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteExW
SHSetLocalizedName
SHGetFolderPathAndSubDirW
SHChangeNotify

advapi32

RegCloseKey
TraceMessage
GetSecurityDescriptorLength
GetSecurityDescriptorControl
IsValidSecurityDescriptor
RegQueryValueExW
ReportEventW
RegOpenKeyW
RegQueryInfoKeyW
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
RegOpenKeyExW
UnregisterTraceGuids
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
CloseServiceHandle
CopySid
GetLengthSid
IsValidSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
SetSecurityDescriptorDacl
FreeSid
SetEntriesInAclW
AllocateAndInitializeSid
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetSecurityDescriptorOwner
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegNotifyChangeKeyValue
StartServiceW

winspool.drv

EnumPrintersW
FindClosePrinterChangeNotification
FindNextPrinterChangeNotification
FindFirstPrinterChangeNotification
SetPrinterW
AddPrinterW
OpenPrinterW
GetPrinterW
DocumentPropertiesW
SetJobW
ClosePrinter
GetJobW

gdi32

StartDocW
CreateDCW
EndDoc
DeleteEnhMetaFile
DeleteObject
GetTextMetricsW
SelectObject
CreateFontIndirectW
SetTextColor
GetDeviceCaps
LPtoDP
DeleteDC
SetViewportExtEx
SetWindowExtEx
SetMapMode
SetBkMode
RestoreDC
PlayEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
SaveDC
SelectClipRgn
CreateRectRgnIndirect
StartPage
SetWindowOrgEx
StretchDIBits
EndPage

user32

DrawTextW
PostMessageW

ole32

CLSIDFromString

Exports

Exports

FXSAPIFree
FXSAPIInitialize
FaxAbort
FaxAccessCheck
FaxAccessCheckEx
FaxAccessCheckEx2
FaxAddOutboundGroupA
FaxAddOutboundGroupW
FaxAddOutboundRuleA
FaxAddOutboundRuleW
FaxAnswerCall
FaxCheckValidFaxFolder
FaxClose
FaxCompleteJobParamsA
FaxCompleteJobParamsW
FaxConnectFaxServerA
FaxConnectFaxServerW
FaxCreateAccount
FaxDeleteAccount
FaxEnableRoutingMethodA
FaxEnableRoutingMethodW
FaxEndMessagesEnum
FaxEnumAccounts
FaxEnumGlobalRoutingInfoA
FaxEnumGlobalRoutingInfoW
FaxEnumJobsA
FaxEnumJobsEx2
FaxEnumJobsExA
FaxEnumJobsExW
FaxEnumJobsW
FaxEnumMessagesA
FaxEnumMessagesEx
FaxEnumMessagesW
FaxEnumOutboundGroupsA
FaxEnumOutboundGroupsW
FaxEnumOutboundRulesA
FaxEnumOutboundRulesW
FaxEnumPortsA
FaxEnumPortsExA
FaxEnumPortsExW
FaxEnumPortsW
FaxEnumRoutingExtensionsA
FaxEnumRoutingExtensionsW
FaxEnumRoutingMethodsA
FaxEnumRoutingMethodsW
FaxEnumerateProvidersA
FaxEnumerateProvidersW
FaxFreeBuffer
FaxFreeSenderInformation
FaxGetAccountInfo
FaxGetActivityLoggingConfigurationA
FaxGetActivityLoggingConfigurationW
FaxGetArchiveConfigurationA
FaxGetArchiveConfigurationW
FaxGetConfigOption
FaxGetConfigWizardUsed
FaxGetConfigurationA
FaxGetConfigurationW
FaxGetCountryListA
FaxGetCountryListW
FaxGetDeviceStatusA
FaxGetDeviceStatusW
FaxGetExtensionDataA
FaxGetExtensionDataW
FaxGetGeneralConfiguration
FaxGetJobA
FaxGetJobEx2
FaxGetJobExA
FaxGetJobExW
FaxGetJobW
FaxGetLoggingCategoriesA
FaxGetLoggingCategoriesW
FaxGetMessageA
FaxGetMessageEx
FaxGetMessageTiffA
FaxGetMessageTiffW
FaxGetMessageW
FaxGetOutboxConfiguration
FaxGetPageData
FaxGetPersonalCoverPagesOption
FaxGetPortA
FaxGetPortExA
FaxGetPortExW
FaxGetPortW
FaxGetQueueStates
FaxGetReceiptsConfigurationA
FaxGetReceiptsConfigurationW
FaxGetReceiptsOptions
FaxGetRecipientInfoA
FaxGetRecipientInfoW
FaxGetRecipientsLimit
FaxGetReportedServerAPIVersion
FaxGetRoutingInfoA
FaxGetRoutingInfoW
FaxGetSecurity
FaxGetSecurityEx
FaxGetSecurityEx2
FaxGetSenderInfoA
FaxGetSenderInfoW
FaxGetSenderInformation
FaxGetServerActivity
FaxGetServerSKU
FaxGetServicePrintersA
FaxGetServicePrintersW
FaxGetVersion
FaxInitializeEventQueue
FaxOpenPort
FaxPrintCoverPageA
FaxPrintCoverPageW
FaxReAssignMessage
FaxRefreshArchive
FaxRegisterForServerEvents
FaxRegisterForServerEventsEx
FaxRegisterRoutingExtensionW
FaxRegisterServiceProviderExA
FaxRegisterServiceProviderExW
FaxRelease
FaxRemoveMessage
FaxRemoveOutboundGroupA
FaxRemoveOutboundGroupW
FaxRemoveOutboundRule
FaxSendDocumentA
FaxSendDocumentEx2
FaxSendDocumentExA
FaxSendDocumentExW
FaxSendDocumentForBroadcastA
FaxSendDocumentForBroadcastW
FaxSendDocumentW
FaxSetActivityLoggingConfigurationA
FaxSetActivityLoggingConfigurationW
FaxSetArchiveConfigurationA
FaxSetArchiveConfigurationW
FaxSetConfigWizardUsed
FaxSetConfigurationA
FaxSetConfigurationW
FaxSetDeviceOrderInGroupA
FaxSetDeviceOrderInGroupW
FaxSetExtensionDataA
FaxSetExtensionDataW
FaxSetGeneralConfiguration
FaxSetGlobalRoutingInfoA
FaxSetGlobalRoutingInfoW
FaxSetJobA
FaxSetJobW
FaxSetLoggingCategoriesA
FaxSetLoggingCategoriesW
FaxSetMessage
FaxSetOutboundGroupA
FaxSetOutboundGroupW
FaxSetOutboundRuleA
FaxSetOutboundRuleW
FaxSetOutboxConfiguration
FaxSetPortA
FaxSetPortExA
FaxSetPortExW
FaxSetPortW
FaxSetQueue
FaxSetReceiptsConfigurationA
FaxSetReceiptsConfigurationW
FaxSetRoutingInfoA
FaxSetRoutingInfoW
FaxSetSecurity
FaxSetSecurityEx2
FaxSetSenderInformation
FaxStartMessagesEnum
FaxStartMessagesEnumEx
FaxStartPrintJob2W
FaxStartPrintJobA
FaxStartPrintJobW
FaxUnregisterForServerEvents
FaxUnregisterRoutingExtensionA
FaxUnregisterRoutingExtensionW
FaxUnregisterServiceProviderExA
FaxUnregisterServiceProviderExW
IsDeviceVirtual

Sections

.text
Size: 201KB - Virtual size: 200KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

58130c8472ca449ff3c76fd6969ccd44

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

version

rpcrt4

kernel32

shell32

advapi32

winspool.drv

gdi32

user32

ole32

Exports

Exports

Sections

.text Size: 201KB - Virtual size: 200KB

.data Size: 67KB - Virtual size: 66KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 201KB - Virtual size: 200KB

.data
Size: 67KB - Virtual size: 66KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 11KB - Virtual size: 11KB