d0529365c85f82ba68c118eabb6fb07033f50a7c03329e4e01359b2e9d41a236

Sharing

Copy URL Twitter E-mail

General

Target

d0529365c85f82ba68c118eabb6fb07033f50a7c03329e4e01359b2e9d41a236
Size

744KB
MD5

3a37ed8b01b87a5c75aacbf04d22a120
SHA1

c93bbbbbcd181977a349a4397f6d21fc7f1083f5
SHA256

d0529365c85f82ba68c118eabb6fb07033f50a7c03329e4e01359b2e9d41a236
SHA512

9016289d55d099ac298f63445d0a98c3d5d0d0e377bbc27ff95cda019a0c7f670a63d3d65eb89229c21674f916ddbce387c989fe583b5a7e70308d9f1016cde8
SSDEEP

12288:HI9OPQea04xtLCWRx44ZAXDFv8XS5gGVH/5A7ISCz:o9cVWRxVZ2SSkIt

Score

N/A

Malware Config

Signatures

Files

d0529365c85f82ba68c118eabb6fb07033f50a7c03329e4e01359b2e9d41a236
.exe windows x86

234be78bc468355f90850308c1bbf16f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

easyisp1581ex

Ex_ReadData
Ex_Vender_Read
Ex_WriteData
Ex_Vender_ScanOrPrint

kernel32

VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
FindClose
FindNextFileW
FindResourceA
GlobalAddAtomA
GetProfileStringA
FindFirstFileW
DeleteFileW
Sleep
CopyFileW
WaitForSingleObject
CloseHandle
UnmapViewOfFile
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameW
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetSystemDirectoryW
MultiByteToWideChar
lstrlenA
GetModuleFileNameA
LoadResource
FindResourceW
LockResource
GetProcAddress
GetModuleHandleW
lstrcpyW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetCurrentThreadId
lstrcatW
GetVersion
FreeLibrary
LoadLibraryA
GetModuleHandleA
SetLastError
MulDiv
InterlockedIncrement
InterlockedDecrement
lstrlenW
WideCharToMultiByte
lstrcpynW
LocalFree
FormatMessageW
lstrcmpA
FileTimeToSystemTime
FileTimeToLocalFileTime
SetEvent
ResumeThread
SetThreadPriority
SuspendThread
CreateEventW
lstrcmpW
GetCurrentThread
lstrcmpiA
GetFileAttributesW
GetTempFileNameW
GetFullPathNameW
SetFileTime
GetFileTime
GetDiskFreeSpaceW
GetLastError
GlobalGetAtomNameW
DuplicateHandle
GetCurrentProcess
CreateFileW
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
MoveFileW
LoadLibraryW
GetVolumeInformationW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
GetShortPathNameW
GlobalFlags
SizeofResource
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCurrentDirectoryW
GetFileSize
LocalFileTimeToFileTime
SystemTimeToFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
ExitProcess
RtlUnwind
HeapFree
RaiseException
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
CreateThread
ExitThread
TerminateProcess
HeapReAlloc
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
VirtualFree
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate

user32

GrayStringW
DrawTextW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
GetDlgItemTextW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
MapWindowPoints
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxW
IsChild
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthW
GetWindowTextW
GetDlgCtrlID
CreateWindowExW
SetWindowsHookExW
LoadStringW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
InvertRect
SetWindowPos
RegisterWindowMessageW
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
IsWindow
LockWindowUpdate
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
IsWindowEnabled
wsprintfW
GetKeyState
EnableMenuItem
LoadCursorW
KillTimer
SetTimer
UpdateWindow
GetCursorPos
ScreenToClient
FrameRect
EnableWindow
SendMessageW
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
LoadMenuW
LoadImageW
GetIconInfo
CreateIconIndirect
GetDC
ReleaseDC
GetSysColor
FillRect
DrawStateW
OffsetRect
GetClientRect
CopyRect
InflateRect
DrawFocusRect
GetWindowRect
SetRectEmpty
IsZoomed
ValidateRect
TranslateMessage
PostThreadMessageW
RegisterClipboardFormatW
CallNextHookEx
GetSubMenu
TrackPopupMenuEx
PostMessageW
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
GetWindowLongW
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
IsWindowUnicode
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
DestroyMenu
DestroyCursor
DestroyIcon
GetTabbedTextExtentA
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableW
CharNextW
GetMenuStringW
InsertMenuW
GetSysColorBrush
GetClassNameW
CharUpperW
GetSystemMenu
DeleteMenu
AppendMenuW
SetParent
SetCursorPos
SetCapture
RedrawWindow
BringWindowToTop
UnpackDDElParam
GetSystemMetrics
GetDCEx
ReuseDDElParam
SetMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorW
LoadAcceleratorsW
IsRectEmpty
FindWindowW
PtInRect
SetRect
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
SetWindowLongW
GetMessageW

gdi32

GetTextExtentPointA
ExtTextOutA
GetWindowOrgEx
GetTextExtentPoint32A
GetTextFaceW
GetROP2
GetBkMode
GetTextAlign
GetPolyFillMode
GetStretchBltMode
GetNearestColor
GetBkColor
GetTextColor
GetCharWidthW
StretchDIBits
LPtoDP
SetAbortProc
StartPage
EndPage
EndDoc
AbortDoc
GetViewportOrgEx
GetTextExtentPoint32W
DPtoLP
CreateFontIndirectW
CreateRectRgnIndirect
CombineRgn
SetRectRgn
PatBlt
GetMapMode
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreatePatternBrush
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
CreateRectRgn
GetCurrentPositionEx
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocW
GetClipBox
Rectangle
CreateDCW
CreateFontW
GetTextMetricsW
CreatePen
GetGlyphOutlineW
GetObjectW
GetPixel
SetPixel
CreateBitmap
SelectObject
SetBkColor
SetTextColor
DeleteDC
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetStockObject
DeleteObject
CreateDIBitmap

comdlg32

GetFileTitleW
PrintDlgW
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegCloseKey
RegEnumKeyW
RegOpenKeyW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegDeleteValueW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyW
RegSetValueW
RegQueryValueExW

shell32

SHGetFileInfoW
DragQueryFileW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteExW
ExtractIconW

comctl32

ord17
_TrackMouseEvent
ImageList_Destroy

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

VariantChangeType
SysAllocString
VariantCopy
VariantClear
SysAllocStringLen
SysFreeString
VariantTimeToSystemTime
SysStringLen

Sections

.text
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 80KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

ft�A�
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

234be78bc468355f90850308c1bbf16f

Headers

File Characteristics

Imports

easyisp1581ex

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 364KB - Virtual size: 363KB

.rdata Size: 80KB - Virtual size: 76KB

.data Size: 28KB - Virtual size: 44KB

.rsrc Size: 184KB - Virtual size: 183KB

ft�A� Size: 84KB - Virtual size: 84KB

.text
Size: 364KB - Virtual size: 363KB

.rdata
Size: 80KB - Virtual size: 76KB

.data
Size: 28KB - Virtual size: 44KB

.rsrc
Size: 184KB - Virtual size: 183KB

ft�A�
Size: 84KB - Virtual size: 84KB