62a33d6c7e8defd5538652849946f5af20b6f60b6827217eb0d235021531f108

Sharing

Copy URL Twitter E-mail

General

Target

62a33d6c7e8defd5538652849946f5af20b6f60b6827217eb0d235021531f108
Size

212KB
MD5

31ce4b85b94662cbe39d4c4f285d654e
SHA1

99ca99b9d39a9455d3c4622a77e604ab83f98eba
SHA256

62a33d6c7e8defd5538652849946f5af20b6f60b6827217eb0d235021531f108
SHA512

e68902a2a7f3b2128389372af3110a1f3a9e20e5cb32564e6f47ed5c393b3c74391b0d9218a363e0017252f90ba5a050503a0e2a124ee35767e1f93e6fac905b
SSDEEP

3072:R49eODfBZ+rxKJaj9ZFHdECLC6ce41bbcI5vm3/CXRpDUb0JRGiUGL/QPtJpl9Oa:iQOsxTrF9zLn4FoHPCXRub0JRGi9EvN

Score

N/A

Malware Config

Signatures

Files

62a33d6c7e8defd5538652849946f5af20b6f60b6827217eb0d235021531f108
.dll windows x86

e63efbee4abe50769f9855d64a27f26d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNextVDMCommand
WriteProfileSectionA
CreateMutexA
RegisterWaitForSingleObject
GetCommandLineW
EnumResourceTypesA
InterlockedIncrement
WritePrivateProfileStringA
ReadFile
GetFullPathNameA
SetLocalTime
_llseek
SetEvent
GetCurrentProcess
GetProcessHeap
FreeLibraryAndExitThread
InterlockedExchangeAdd
VirtualQueryEx
SetUnhandledExceptionFilter
WaitForSingleObject
GetSystemDefaultLangID
LoadModule
IsValidCodePage
GetProcessTimes
FindNextVolumeA
CancelIo
EnumDateFormatsExA
SetLocaleInfoA
SetConsoleWindowInfo
GetDateFormatA
GetHandleInformation
WriteConsoleOutputCharacterA
OpenProfileUserMapping
CreatePipe
VDMOperationStarted
ExpandEnvironmentStringsA
SetConsoleMenuClose
DebugActiveProcess
EnumCalendarInfoA
WritePrivateProfileStructA
GetLocalTime
EnumSystemCodePagesA
Heap32ListFirst
ReplaceFile
LoadLibraryA
CommConfigDialogA
SetCriticalSectionSpinCount
GetCommandLineA
ResumeThread
GetCurrentProcessId
IsValidLocale
WriteConsoleInputVDMA
_lcreat
BuildCommDCBAndTimeoutsA
CreateSemaphoreA
GetSystemDefaultLCID
CreateEventA
GetConsoleDisplayMode
SetFilePointerEx
GetOEMCP
GetEnvironmentStringsA
EnumTimeFormatsA
GetQueuedCompletionStatus
TlsGetValue
GetFileAttributesExA
GetSystemTimeAdjustment
GetCurrentThread
SetConsoleMaximumWindowSize
LocalFree
InterlockedCompareExchange
GlobalLock
TlsAlloc
GetNumberOfConsoleMouseButtons
GetLogicalDrives
GlobalMemoryStatus
GetProcAddress
GetThreadLocale
GetVersion
UnlockFileEx
VirtualAlloc
Sleep
GetACP
UnregisterWait
OpenMutexA
VirtualFree
HeapAlloc
QueryPerformanceFrequency
ReadConsoleOutputCharacterA
FindFirstFileExA
LocalLock
GetConsoleAliasExesLengthA
GetPrivateProfileStringA
CreateTimerQueue
SetProcessShutdownParameters
lstrcatA
VirtualProtectEx
ReadFileEx
WaitNamedPipeA
GetTickCount
GetThreadPriority
FileTimeToLocalFileTime
LocalSize
SetCommState
VirtualAllocEx
Heap32First
AssignProcessToJobObject
SetPriorityClass
GetOverlappedResult
LCMapStringA
ResetEvent
SetVDMCurrentDirectories
SizeofResource
EnumDateFormatsA
Heap32Next
DeleteAtom
_hwrite
SetConsoleKeyShortcuts
ConsoleMenuControl
BeginUpdateResourceA
HeapReAlloc
HeapWalk
GlobalAlloc
GetDevicePowerState
GetConsoleOutputCP
CreateFileA
LocalFileTimeToFileTime
GetStringTypeExA
IsBadCodePtr
GetLongPathNameA
GetCurrentThreadId
GetSystemTime
BackupRead
SystemTimeToTzSpecificLocalTime
TryEnterCriticalSection
SetDefaultCommConfigA
GetSystemTimeAsFileTime
GetLogicalDriveStringsA
CreateConsoleScreenBuffer
RegisterWowBaseHandlers
GetStartupInfoA
WritePrivateProfileSectionA
GetThreadSelectorEntry
GetPrivateProfileIntA
SetMailslotInfo
SetConsoleActiveScreenBuffer
GetModuleHandleA
FreeLibrary
TransmitCommChar
SetThreadExecutionState
SetConsoleFont

user32

UnregisterDeviceNotification
CheckDlgButton
SendMessageTimeoutA
TileChildWindows
EnumDesktopsA
CreateMenu
MessageBoxIndirectA
ReleaseCapture
HiliteMenuItem
SetPropA
RemovePropA
OpenDesktopA
GetUserObjectSecurity
GetKBCodePage
GetMenuItemCount
CopyAcceleratorTableA
GetWindowInfo
LoadIconA
DdeImpersonateClient
GetDesktopWindow
GetActiveWindow
MapVirtualKeyA
GetNextDlgTabItem
GetSystemMenu
DdeReconnect
EndPaint
EditWndProc
FreeDDElParam
SetClipboardData
RealChildWindowFromPoint
OemKeyScan
LockWorkStation
SendDlgItemMessageA
GetMenuContextHelpId
PostMessageA
SetWindowRgn
GetListBoxInfo
MessageBoxA
IsWindowVisible
ChangeClipboardChain
GetClassInfoExA
TranslateMDISysAccel
GetGuiResources
CloseWindow
GetCursor
GetMessagePos
EnumDisplaySettingsExA
CreateDesktopA
UnhookWindowsHook
LoadStringA
LoadMenuIndirectA
KillTimer
OemToCharA
DdeDisconnectList
SetWindowContextHelpId
ScreenToClient
CreateWindowStationA
GetParent
GetMessageTime
CreateDialogIndirectParamA
SetClassLongA
GetProcessWindowStation
DdeAbandonTransaction
DlgDirListA
HideCaret
DrawAnimatedRects
GetInputState
IsZoomed
SetLastErrorEx
IsCharUpperA
GetClipboardSequenceNumber
UnregisterClassA
wsprintfA
GetUpdateRgn
MsgWaitForMultipleObjects
FindWindowA
GetClipboardData
GetCapture
GetCursorInfo
GetForegroundWindow
LoadCursorA
CheckMenuItem
SetWindowsHookExA
DestroyCaret
ShowWindowAsync
GetShellWindow
DrawFocusRect
EnumPropsExA
LockWindowUpdate
FlashWindowEx
GetFocus
CheckRadioButton
GetWindow
UnionRect
DdeEnableCallback
CharPrevA
DestroyCursor
SwitchDesktop
SetCursorPos
SetKeyboardState
CopyRect

gdi32

SetMiterLimit
GdiGetDC
SetMapperFlags
CreatePen
ExtSelectClipRgn
SetTextAlign
GetCharABCWidthsFloatA
SelectObject
CreatePalette
SetColorSpace
GetPixel
CreateSolidBrush
GetMapMode
EnumFontFamiliesA
SetViewportExtEx
GetEnhMetaFileA
CreateFontIndirectA
GdiFlush
SetStretchBltMode
GetTextColor
SetPixelFormat
CopyEnhMetaFileA
GetStockObject
CreateFontA
PolyBezier
SetDIBitsToDevice
GdiPlayDCScript
FixBrushOrgEx
EnumFontFamiliesExA
CombineRgn
DPtoLP
StrokePath
SetWindowExtEx
GetWindowExtEx
SetWinMetaFileBits
WidenPath
SwapBuffers
GetTextCharsetInfo
GetObjectA
EndDoc
ExtTextOutA
CreateCompatibleBitmap
GetTextExtentExPointI
SetBitmapBits
PolyPolyline
SetICMProfileA
GetGlyphOutlineA
DeleteDC
RealizePalette
GdiResetDCEMF
Ellipse
SetViewportOrgEx
EqualRgn
Rectangle
ResetDCA
Polyline
AbortDoc
GetFontData
FlattenPath
GetColorAdjustment
SetBitmapDimensionEx
CreateCompatibleDC
CreateRoundRectRgn
DeleteColorSpace
SetRelAbs
LPtoDP
GdiEndPageEMF
PaintRgn

winspool.drv

GetPrinterDriverA
ord213
EnumFormsA
AddMonitorA
DeviceMode
StartDocPrinterA
FindClosePrinterChangeNotification
FindNextPrinterChangeNotification
ord101
GetSpoolFileHandle
DevQueryPrint
DevicePropertySheets
AbortPrinter
ord202
GetPrinterDriverDirectoryA
EnumMonitorsA
DevQueryPrintEx
DocumentEvent
ord100
EXTDEVICEMODE
ConfigurePortA
DeletePrinterDataExA
DeletePrintProcessorA
ConvertAnsiDevModeToUnicodeDevmode
GetPrinterDataA
SpoolerPrinterEvent
ExtDeviceMode
FindFirstPrinterChangeNotification
OpenPrinterA
EnumPrinterDataA
DocumentPropertiesA
ClosePrinter
WritePrinter
DeletePortA
ord205
SetPrinterDataA

shlwapi

StrRChrIA

shell32

ShellHookProc
ExtractAssociatedIconExA
SHAddToRecentDocs
SHUpdateRecycleBinIcon
SHGetSpecialFolderLocation
SHFreeNameMappings
SHGetDataFromIDListA
SHGetMalloc
SHFormatDrive
SheGetDirA
DragFinish
ShellAboutA
SHChangeNotify
SheChangeDirA
DuplicateIcon
ExtractAssociatedIconA
SHLoadInProc

msvcrt

fwprintf
log
_yn
__lc_codepage
fseek
_onexit
_wexecle
_commode
_wutime
fsetpos
feof
setbuf
fclose
fread
_winminor
ftell
_wtoi64
_lrotr
_Getdays
system
_j0
memset
_spawnlpe
_execv
sprintf
exp
_pctype
_ismbstrail
fprintf
fwrite
isalnum
_c_exit
_wrename
_ismbcprint
_cwait
_adj_fprem1
_fgetwchar
labs
_Strftime
vfwprintf
fputs
fputc
_fpclass
fopen
_adj_fdiv_m32i
memmove
wcstombs
_CIacos
fgets
_beginthread
ferror
_mbsset
_pclose
_wcsrev
__dllonexit
_fileinfo
__initenv
_wcsicmp
_fmode
_environ
printf
_mbsdec
_cabs
ldiv
tmpnam
_mbsnbcpy
free
_initterm
malloc
_adjust_fdiv
_wchdir

Exports

Exports

Aptdkumqk
Awvcqaw
Ckpsdbqa
Cqqhhucy
Dqrnlj
Dsylpl
Ebmt
Ejgsmhkz
Ezgm
Fnikpdyv
Gfyzy
Gowmpfgrff
Gsrwlfdgy
Gztpxz
Heucs
Hnknpsjyqh
Idhnayvv
Ipcezn
Irtfbpf
Jtgfol
Lpny
Lwifrikux
Ncghj
Ndmwdysvqc
Nluqoxbdro
Nudi
Pdzbw
Qvvov
Rdcosoxdu
Rsom
Rxgxcjf
Shawkwdb
Svayksz
Tbgmzir
Tmfbngohq
Tsrgk
Uzti
Wbpgof
Xppoawqo
Xxviupp
Yaafshf
Ycgzkgrntn
Ycktenjkc
Yxxkb
Zaavxoae
Znfonqdrh

Sections

.text
Size: 168KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e63efbee4abe50769f9855d64a27f26d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

shlwapi

shell32

msvcrt

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 165KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 12KB - Virtual size: 9KB

.reloc Size: 12KB - Virtual size: 8KB

.text
Size: 168KB - Virtual size: 165KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 12KB - Virtual size: 9KB

.reloc
Size: 12KB - Virtual size: 8KB