70ae2a27fb3f1221032f026b515bbfa8d3c2d3fd747e4a9ef920578ba67eafb6

Sharing

Copy URL

Twitter E-mail

General

Target

70ae2a27fb3f1221032f026b515bbfa8d3c2d3fd747e4a9ef920578ba67eafb6
Size

275KB
MD5

1d96b6be4a9339025ef4a713b6169c65
SHA1

f814eb4314a81ffad320e29a31a73f99dcf66da3
SHA256

70ae2a27fb3f1221032f026b515bbfa8d3c2d3fd747e4a9ef920578ba67eafb6
SHA512

6eb160f87042ca135737daa01c47c15c9df4aedc545fa60ade9b9ac2de0af8c0149ae8fbca0f51b73972c3f18ab31cf2ab015d7b14b471d8c48d6be2e56acf12
SSDEEP

6144:wMTK2so71FdGM7jljrdT42qn+/Sa1YL6El3n3m:wROBljr5s+pW6y3m

Score

N/A

Malware Config

Signatures

Files

70ae2a27fb3f1221032f026b515bbfa8d3c2d3fd747e4a9ef920578ba67eafb6
.dll windows x86

478c95f385d9aef0269e7979530d7060

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
RtlUnwind
HeapReAlloc
RaiseException
VirtualAlloc
Sleep
ExitProcess
HeapSize
GetACP
IsValidCodePage
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
HeapAlloc
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
HeapFree
CreateFileA
GetCurrentProcess
FlushFileBuffers
SetFilePointer
WriteFile
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
InterlockedIncrement
GetModuleHandleW
GlobalFlags
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
CloseHandle
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
InterlockedExchange
lstrcmpA
GetCurrentProcessId
GetModuleFileNameA
InterlockedDecrement
GetModuleFileNameW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
CompareStringA
LoadLibraryA
FreeLibrary
lstrcmpW
GetModuleHandleA
GetProcAddress
GetVersionExA
GetLastError
SetLastError
GlobalAlloc
FormatMessageA
LocalFree
SizeofResource
MulDiv
lstrlenA
WideCharToMultiByte
GlobalLock
GlobalUnlock
GlobalFree
FindResourceA
LoadResource
LockResource
FreeResource
OutputDebugStringA
FreeEnvironmentStringsA
MultiByteToWideChar

user32

DestroyMenu
GetSysColorBrush
UnregisterClassA
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
PostQuitMessage
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetFocus
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
GetTopWindow
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
GetMenuState
GetMenuItemID
GetClassNameA
GetMenuItemCount
GetSubMenu
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetParent
GetNextDlgTabItem
EndDialog
EndPaint
FrameRect
BeginPaint
SetCursor
PtInRect
SetCapture
PostMessageA
ReleaseCapture
ClientToScreen
UpdateLayeredWindow
GetClientRect
GetWindowRect
LoadCursorA
ReleaseDC
wsprintfA
EnableWindow
GetDC
GetWindowLongA
SetWindowLongA
InvalidateRect
SendMessageA
UnhookWindowsHookEx

gdi32

SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
DeleteObject
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
CreateSolidBrush
CreateDIBSection
CreateCompatibleDC
GetTextExtentPoint32A
GetStockObject
SelectObject
CreateFontIndirectW

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegSetValueExA
RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shlwapi

PathFindFileNameA
PathFindExtensionA

oleaut32

VariantClear
VariantChangeType
VariantInit

gdiplus

GdipAddPathPolygonI
GdipResetPath
GdipSaveImageToFile
GdipAddPathLineI
GdipDrawEllipseI
GdipDrawPolygonI
GdipFillPolygonI
GdipAddPathEllipseI
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipAddPathPath
GdipDrawLineI
GdipCreateFromHDC
GdipCreateBitmapFromFile
GdipSetPenLineJoin
GdiplusShutdown
GdiplusStartup
GdipSetPenWidth
GdipGetImageWidth
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipCreateFont
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipCreatePath
GdipDeletePath
GdipGetFamily
GdipGetFontSize
GdipAddPathString
GdipGetPathWorldBounds
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipGetImageHeight
GdipGetImageThumbnail
GdipCreateBitmapFromScan0
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipTranslateWorldTransform
GdipRotateWorldTransform
GdipDrawImageRectRect
GdipSetSmoothingMode
GdipCreateSolidFill
GdipDeleteBrush
GdipCreateBitmapFromGraphics
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipCreateMatrix2
GdipDeleteMatrix
GdipSetWorldTransform
GdipCreatePen1
GdipDeletePen
GdipDrawPath
GdipFillPath

Exports

Exports

CreateImageWatermaskWnd
CreateShapeWnd
CreateTextWatermaskWnd
DestoryShapeWnd
DestoryWatermaskWnd
GetShapeHwnd
GetWatermaskHwnd
ImageWatermaskWndGetOrgSize
ImageWatermaskWndMoveableStatus
ImageWatermaskWndSizeableStatus
ImageWatermaskWndUpdate
SetShapeDrawMode
SetShapeFont
SetShapePenColor
SetShapePenSize
SetWatermaskClickEventFun
SetWatermaskDrawBorderColor
SetWatermaskDrawBorderConnerColor
SetWatermaskDrawBorderLineStatus
SetWatermaskDrawBorderStatus
SetWatermaskKeepAspect
SetWatermaskMouseEventFun
SetWatermaskPosEventFun
SetWatermaskSizeEventFun
SetWatermaskValidRect
ShapeClear
ShapeLButtonDown
ShapeLButtonUp
ShapeMouseMove
ShapeSaveImage
ShapeUndo
TextWatermaskGetBound
TextWatermaskSetHelperWnd
TextWatermaskWndUpdate

Sections

.text
Size: 171KB - Virtual size: 171KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

478c95f385d9aef0269e7979530d7060

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shlwapi

oleaut32

gdiplus

Exports

Exports

Sections

.text Size: 171KB - Virtual size: 171KB

.rdata Size: 51KB - Virtual size: 50KB

.data Size: 9KB - Virtual size: 23KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 30KB - Virtual size: 30KB

.text
Size: 171KB - Virtual size: 171KB

.rdata
Size: 51KB - Virtual size: 50KB

.data
Size: 9KB - Virtual size: 23KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 30KB - Virtual size: 30KB