d1a212505d4219f87b90c479eba8bd847224e8169bb42ea5fc91da67ae7c26f8

Sharing

Copy URL

Twitter E-mail

General

Target

d1a212505d4219f87b90c479eba8bd847224e8169bb42ea5fc91da67ae7c26f8
Size

1.2MB
MD5

22e1dfdd243b1d313fddcbd1778c0c90
SHA1

b6f5877cab559cc686330ada4b34606daa1e30f0
SHA256

d1a212505d4219f87b90c479eba8bd847224e8169bb42ea5fc91da67ae7c26f8
SHA512

b4b60fd7fdb75fed3b87d8bf7bbb41295a0c5627e01a437fb91721939d8c71ab4fd4bb0df1318065d187425ae270274d3b66a6512ac48d7ca6973c52c09f2b10
SSDEEP

24576:gxAIJIZIrv6SIOeG/hVqsRZaHYk8hMT3eOXBHa809k4+sx:g3IZ7SI0hzRZaHYk8hMzeOXB68G5Tx

Score

N/A

Malware Config

Signatures

Files

d1a212505d4219f87b90c479eba8bd847224e8169bb42ea5fc91da67ae7c26f8
.dll windows x86

d155b591cab570d64a694abfee372f57

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetVersion
GetCurrentDirectoryA
GetCommandLineA
GetFullPathNameA
GetDriveTypeA
GetLastError
SetCurrentDirectoryA
InterlockedDecrement
InterlockedIncrement
HeapFree
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
GetWindowsDirectoryA
GetTempPathA
VirtualFree
WriteFile
RaiseException
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
RtlUnwind
GetCPInfo
GetACP
GetPrivateProfileIntA
SetFilePointer
SetStdHandle
GetTempFileNameA
FindResourceA
FreeResource
LockResource
LocalHandle
LoadResource
GetProfileStringA
GlobalReAlloc
_lread
_lwrite
CreateFileA
GetFileAttributesA
DeleteFileA
FlushFileBuffers
_llseek
GlobalHandle
GetProcAddress
CloseHandle
LoadLibraryA
lstrlenA
FreeLibrary
LocalFree
LocalLock
lstrcatA
LocalAlloc
GlobalFree
LocalUnlock
GetModuleFileNameA
GlobalLock
GlobalAlloc
OpenFile
GetPrivateProfileStringA
WritePrivateProfileStringA
GlobalUnlock
HeapDestroy
HeapCreate
GetOEMCP
GetShortPathNameA
GlobalSize

user32

ClientToScreen
GetWindowRect
GetSystemMetrics
GetWindowLongA
GetFocus
ScreenToClient
GetMessageA
IsWindow
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
MoveWindow
LoadBitmapA
CharNextA
SetDlgItemTextA
LoadCursorA
SetCursor
MessageBoxA
CreateDialogParamA
GetDC
GetClientRect
ReleaseDC
DlgDirListA
GetParent
CheckRadioButton
GetDlgItem
CheckDlgButton
DestroyWindow
IsWindowEnabled
SetWindowTextA
EnableWindow
SetFocus
IsDlgButtonChecked
wsprintfA
DialogBoxParamA
EndDialog
SendDlgItemMessageA
LoadStringA

gdi32

SelectObject
GetStockObject
Rectangle
DeleteObject
DeleteDC
GetTextExtentPointA
SetWindowExtEx
SetWindowOrgEx
BitBlt
GetObjectA
OffsetClipRgn
CreateCompatibleDC
SetTextColor
SetBkColor
TextOutA
CreateSolidBrush
SetTextAlign
IntersectClipRect
CreateDCA
EnumFontFamiliesA
GetDeviceCaps
GetTextMetricsA
CreateFontIndirectA
SetTextCharacterExtra
SetViewportExtEx
SetMapMode
SetViewportOrgEx
CopyEnhMetaFileA
DeleteMetaFile
DeleteEnhMetaFile
GetObjectType
PlayMetaFile
SetMetaFileBitsEx
GetEnhMetaFileA
GetMetaFileA
SetEnhMetaFileBits

Exports

Exports

AltFontsAvailable
BuildSystemFontList
CAppendText
CApplData
CBegProtRegion
CBeginCompoundTextPath
CBeginFigure
CBeginGroup
CBeginSeg
CBeginTileArray
CBitonalTile
CCellArray
CCirc
CCircArc3Pt
CCircArc3PtClose
CCircArcCtr
CCircArcCtrClose
CConnEdge
CCopySeg
CDisjLine
CEllip
CEllipArc
CEllipArcClose
CEmptyErrorStack
CEndCompoundTextPath
CEndFigure
CEndGroup
CEndProtRegion
CEndSeg
CEndTileArray
CEsc
CGDP
CGetEsc
CHyperbArc
CInqClipRect
CInqDeviceViewport
CInqDispSurf
CInqErrorStack
CInqFontMetrics
CInqTextExtent
CLine
CMarker
CMsg
CNUB
CNURB
CNewRegion
CParabArc
CPelArray
CPolybezier
CPolygon
CPolygonSet
CPopErrorStack
CRect
CResPrimContext
CRestrText
CSavePrimContext
CSetASFs
CSetAltCharSetInd
CSetAuxColr
CSetBackgColr
CSetCharCodingAnn
CSetCharExpanFactor
CSetCharHt
CSetCharHtSpecMode
CSetCharOri
CSetCharSetInd
CSetCharSetList
CSetCharSpace
CSetClipInd
CSetClipInh
CSetClipRect
CSetColrCalibration
CSetColrIndPrec
CSetColrModel
CSetColrPrec
CSetColrSelMode
CSetColrTable
CSetColrValueExtent
CSetDevVpMap
CSetDevVpSpecMode
CSetDeviceViewport
CSetDrawMode
CSetEdgeCap
CSetEdgeColr
CSetEdgeInd
CSetEdgeType
CSetEdgeTypeContinuation
CSetEdgeTypeInitOffset
CSetEdgeVis
CSetEdgeWidth
CSetEdgeWidthSpecMode
CSetFillColr
CSetFillHatchInd
CSetFillInd
CSetFillIntStyle
CSetFillPatInd
CSetFillRefPt
CSetFontList
CSetFontSelMode
CSetGenTextPathMode
CSetGeoPatDef
CSetHatchStyleDef
CSetIndPrec
CSetInhFilter
CSetIntPrec
CSetIntStyleSpecMode
CSetInterpIntDef
CSetLineColr
CSetLineEdgeTypeDef
CSetLineInd
CSetLineType
CSetLineTypeContinuation
CSetLineTypeEx
CSetLineTypeInitOffset
CSetLineWidth
CSetLineWidthSpecMode
CSetMarkerColr
CSetMarkerInd
CSetMarkerSize
CSetMarkerSizeSpecMode
CSetMarkerType
CSetMaxVDCExtent
CSetMiterLimit
CSetNamePrec
CSetPatSize
CSetPatTable
CSetProtRegionInd
CSetRealPrec
CSetRestrTextType
CSetScalingMode
CSetSegDispPri
CSetSegHighl
CSetSegPickPri
CSetSegPriExtent
CSetSymbolColr
CSetSymbolLibIndex
CSetSymbolLibList
CSetSymbolOri
CSetSymbolSize
CSetTextAlign
CSetTextColr
CSetTextFont
CSetTextFontInd
CSetTextInd
CSetTextPath
CSetTextPrec
CSetTextScoreType
CSetTran
CSetTranspCellColr
CSetVDCExtent
CSetVDCIntPrec
CSetVDCRealPrec
CSetVDCType
CSymbol
CText
CTile
C_AddMeshCurve
C_AppendText
C_BeginBlockTextRegion
C_BeginCellArray
C_BeginData
C_BeginEffectDef
C_BeginLayer
C_BeginMF
C_BeginMFDefaultReplace
C_BeginMeshFill
C_BeginObject3D
C_BeginPatchDef
C_BeginPattern
C_BeginPic
C_BeginPicBody
C_BeginSymbol
C_BeginViewDescription
C_BlockText
C_CadRay
C_Circ3D
C_CircArc3Pt3D
C_ClearTransforms
C_CloseCGI
C_CloseDevice
C_CopySeg3D
C_Cvpoint3D
C_Data
C_EPSMode
C_Ellip3D
C_EllipArc3D
C_EllipArc3Pt
C_EndBlockTextRegion
C_EndCellArray
C_EndData
C_EndEffectDef
C_EndLayer
C_EndMF
C_EndMFDefaultReplace
C_EndMeshFill
C_EndObject3D
C_EndPatchDef
C_EndPattern
C_EndPic
C_EndSymbol
C_EndViewDescription
C_GetGDSFAddr
C_HyperLinkDef
C_Init
C_Init3D
C_InitBuffering
C_InqCGIDefault
C_InqCGIVersion
C_InqCurPosition
C_InqForeignDataMode
C_InqFunctionSupport
C_InqInsObjExtent
C_InqOrigin
C_InqSupport
C_InsertFile
C_InsertObject
C_InsertObject3D
C_InterpItem
C_Line3D
C_MFDesc
C_MFElemList
C_MFVersion
C_Marker3D
C_NURB3D
C_NewFace
C_NoOp
C_OpenCGI
C_OpenDevice
C_PolyBezier
C_PolySpline
C_PolySpline3D
C_PopTran
C_PopTransform
C_PushTranWarp
C_RestrText
C_RoundRect
C_SetBackgStyle
C_SetBackgroundStyle
C_SetBlockTextExternalLeading
C_SetBlockTextForwardAdvDist
C_SetBlockTextLineFlow
C_SetBlockTextParaBullet
C_SetBlockTextParaBulletLevel
C_SetBlockTextParaHorizAlign
C_SetBlockTextParaIndent
C_SetBlockTextParaLineHorizAlign
C_SetBlockTextParaLineSpacing
C_SetBlockTextParaLineVertAlign
C_SetBlockTextParaSpacing
C_SetBlockTextParaTabs
C_SetBlockTextParaVertAlign
C_SetBlockTextRegionAnchor
C_SetBlockTextRegionExpansion
C_SetBlockTextRegionMargins
C_SetBlockTextWordSpacing
C_SetBlockTextWordWrap
C_SetCharHtMode
C_SetCharMap
C_SetCharMapIndex
C_SetCharMode
C_SetCharacterSet
C_SetColorName
C_SetColrReversal
C_SetColrValueDescExtent
C_SetCurPosMode
C_SetCurPosition
C_SetCurveSurfaceParameters
C_SetDropShadowMode
C_SetDropShadowSpecs
C_SetEdgeJoinType
C_SetExtrusion
C_SetFillMode
C_SetFontWidths
C_SetFontWidthsIndex
C_SetGenTextPathStartFigure
C_SetGeoPatDrawStyle
C_SetGradientAngle
C_SetGradientDescription
C_SetGradientEdge
C_SetGradientOffset
C_SetGradientStyle
C_SetLayerVis
C_SetLineCapAttr
C_SetLineCapType
C_SetLineEndStyleAttr
C_SetLineJoinType
C_SetMaxColrInd
C_SetMediaSize
C_SetMediaType
C_SetMeshFillColors
C_SetNumCopies
C_SetObjectAttributes
C_SetOrientation
C_SetOverprintFill
C_SetOverprintStroke
C_SetPatchID
C_SetPrimContextAssoc
C_SetRectMeshAttrs
C_SetResMode
C_SetRulings
C_SetScriptMode
C_SetShadowMode
C_SetSilEdgeMode
C_SetSurfaceAttrs
C_SetTextOffset
C_SetTextPathAlign
C_SetTranMatrix2D
C_SetTranMatrix3D
C_SetTranRotation2D
C_SetTranRotation3D
C_SetTranScale2D
C_SetTranScale3D
C_SetTranStackMark
C_SetTranTranslation2D
C_SetTranTranslation3D
C_SetUnderlineMode
C_SetVDCExtent3D
C_SetViewMapping
C_SetViewOrientation
C_SetViewOrientationMatrix
C_SetViewStatus
C_Setup
C_SharpPolyBezier
C_Term
C_Text
C_Unknown
C_Vertex3D
C_VertexInd
C_Weights
C__BlockText
CenterWindow
CreatePMIDialog
CreateSetup
DestroyPMIDialog
DestroySetup
EditSetup
EscapeSetup
GetFontPath
GetNativeFileHandle
GetSet_DialogStatus
HelpDlgProc
IMSGetFilterVersion
OpenImsBuffer
PMIImportPref
PMIStatusDlgProc
ProfileDlgProc
ResourceMessageBox
_cmessage
_cspaths
dd_entry
dd_entry32
escape
getcd
getdefault
imsClose
imsCloseStorage
imsCloseStream
imsCloseandDelete
imsCreateStorage
imsCreateStream
imsError
imsGetDataFormat
imsGetLineFormat
imsNativeToBE
imsNativeToLE
imsOpen
imsOpenStorage
imsOpenStream
imsRead
imsReadChar
imsReadDouble
imsReadFloat
imsReadLine
imsReadLong
imsReadShort
imsReadString
imsReadStruct
imsSeek
imsSetDataFormat
imsSetLineFormat
imsWrite
imsWriteChar
imsWriteDouble
imsWriteFloat
imsWriteLine
imsWriteLong
imsWriteShort
imsWriteStruct
message
push_er
s_getbody
s_getext
s_getname
s_getpath
s_putname
setdefault
stccpy

Sections

.text
Size: 764KB - Virtual size: 762KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d155b591cab570d64a694abfee372f57

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 764KB - Virtual size: 762KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 64KB - Virtual size: 67KB

.rsrc Size: 284KB - Virtual size: 283KB

.reloc Size: 36KB - Virtual size: 33KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 764KB - Virtual size: 762KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 64KB - Virtual size: 67KB

.rsrc
Size: 284KB - Virtual size: 283KB

.reloc
Size: 36KB - Virtual size: 33KB

.rmnet
Size: 60KB - Virtual size: 60KB