abf2b711e5c94f37714baa61cf13a9f218db5b35e7f4c1a9a68f739c01a4b80f

Sharing

Copy URL Twitter E-mail

General

Target

abf2b711e5c94f37714baa61cf13a9f218db5b35e7f4c1a9a68f739c01a4b80f
Size

508KB
MD5

0a31525bad305e9518ec1e0c71bf5ba0
SHA1

7560de445ca1682e13f485602410e890d0630389
SHA256

abf2b711e5c94f37714baa61cf13a9f218db5b35e7f4c1a9a68f739c01a4b80f
SHA512

c72536536847c2cc0f759cd3912387b8cf8cab3eb162e886d6e6868045709ec35d74d4518453232f3da74110d7b87188e82bf1c624c85bbfecc59b806c37328e
SSDEEP

6144:IDPy6HO9+L8AKZuE7YkxMoQYQFwOZG5vLYzxFnW9ur/hc4fpA+6HRZqsOcAfh0j4:LuO9+AZZx9MzxN/hccpSHusOc+2

Score

N/A

Malware Config

Signatures

Files

abf2b711e5c94f37714baa61cf13a9f218db5b35e7f4c1a9a68f739c01a4b80f
.dll windows x86

d53e534d52fa839d4be18c95ad1dfadc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

DuplicateHandle
GetCurrentProcess
LockFile
UnlockFile
GetFullPathNameA
SetLastError
MulDiv
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LocalReAlloc
GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
GetCPInfo
GetOEMCP
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetTimeZoneInformation
ExitProcess
FileTimeToSystemTime
GetACP
SetStdHandle
GetFileType
RaiseException
HeapSize
HeapReAlloc
GetEnvironmentVariableA
HeapDestroy
HeapCreate
IsBadWritePtr
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
ReleaseMutex
CreateMutexA
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GlobalDeleteAtom
GetCurrentThread
GetFileSize
LocalAlloc
LocalFree
VirtualAlloc
VirtualLock
VirtualFree
FreeResource
VirtualUnlock
GetFileInformationByHandle
GetLastError
CreateDirectoryA
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetCurrentDirectoryA
GetLocalTime
DeviceIoControl
SetVolumeLabelA
MoveFileA
FileTimeToLocalFileTime
RemoveDirectoryA
FileTimeToDosDateTime
IsDBCSLeadByte
GetTickCount
GetWindowsDirectoryA
GetCurrentDirectoryA
GetVolumeInformationA
GetCurrentThreadId
TlsGetValue
TlsFree
TlsSetValue
GlobalHandle
TlsAlloc
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
IsBadReadPtr
IsBadStringPtrA
FindFirstFileA
FindNextFileA
FindClose
GetLogicalDrives
GetVersionExA
GetDiskFreeSpaceA
GetDriveTypeA
GlobalSize
GlobalReAlloc
GetFileTime
SetFileTime
SetFileAttributesA
Sleep
SetEndOfFile
SetFilePointer
ReadFile
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetSystemTime
GetFileAttributesA
lstrcmpiA
GetTempPathA
LoadLibraryA
GetProcAddress
FreeLibrary
FlushFileBuffers
SetErrorMode
lstrcatA
GetTempFileNameA
FindResourceA
SizeofResource
LoadResource
LockResource
WriteFile
lstrcpynA
lstrcmpA
DeleteFileA
lstrlenA
GetModuleHandleA
GetModuleFileNameA
lstrcpyA
CreateFileA
CloseHandle
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
TerminateProcess
GetCurrentProcessId

user32

GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
AdjustWindowRectEx
SetFocus
MapWindowPoints
SendDlgItemMessageA
LoadIconA
IsDialogMessageA
MoveWindow
UnregisterClassA
PtInRect
GetSysColorBrush
DestroyMenu
GetWindowTextLengthA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
GetWindow
SetWindowPos
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GrayStringA
TabbedTextOutA
ClientToScreen
ScreenToClient
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
LoadStringA
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
SetDlgItemTextA
EndDialog
GetSysColor
DialogBoxParamA
SetCursor
GetActiveWindow
MessageBoxA
CharPrevA
CharUpperBuffA
CharToOemA
OemToCharA
OemToCharBuffA
CharNextA
PostMessageA
IsWindow
EnumWindows
GetWindowThreadProcessId
GetClassNameA
UpdateWindow
GetWindowRect
GetSystemMetrics
SetForegroundWindow
GetDesktopWindow
EnableWindow
SendMessageA
LoadBitmapA
PeekMessageA
DispatchMessageA
TranslateMessage
GetWindowLongA
SetWindowLongA
GetUpdateRect
OffsetRect
SetWindowWord
SetWindowTextA
DefWindowProcA
GetClientRect
CopyRect
InflateRect
GetWindowWord
DrawTextA
BeginPaint
GetWindowTextA
EndPaint
InvalidateRect
ShowWindow
BringWindowToTop
GetIconInfo
DestroyIcon
GetDC
ReleaseDC
CharUpperA
CharLowerA
wsprintfA
LoadCursorA
RegisterClassA
WaitForInputIdle

gdi32

DeleteDC
BitBlt
CreateCompatibleDC
SetBkColor
GetBkColor
CreateBitmap
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
CreatePen
CreateCompatibleBitmap
RealizePalette
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
StretchBlt
CreatePalette
CreateDIBitmap
CreateSolidBrush
SetTextColor
CreateFontIndirectA
SelectObject
MoveToEx
LineTo
GetTextExtentPoint32A
GetObjectA
Rectangle
SetBkMode
CreateFontA
GetDIBits
DeleteObject
GetStockObject
SelectPalette

comdlg32

GetFileTitleA
GetSaveFileNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey

shell32

ExtractIconA

comctl32

ord17
ImageList_Destroy
ImageList_LoadImageA

Exports

Exports

ADPicWndProc
CacheADScript
CopyElements
CreateADPackage
CreateADPackageEx
CreateADScript
DeleteADScript
GetADInt
GetADStatus
GetADString
GetADVersionInfo
MakeADDFile
MakeADDString
RemoveADKey
RemoveADKeyList
SetADInt
SetADString
StatusWndProc
UnCacheADScript
ZIPByFile
ZIPByString

Sections

.text
Size: 320KB - Virtual size: 316KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d53e534d52fa839d4be18c95ad1dfadc

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Exports

Exports

Sections

.text Size: 320KB - Virtual size: 316KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 32KB - Virtual size: 47KB

.rsrc Size: 32KB - Virtual size: 28KB

.reloc Size: 28KB - Virtual size: 24KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 320KB - Virtual size: 316KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 32KB - Virtual size: 47KB

.rsrc
Size: 32KB - Virtual size: 28KB

.reloc
Size: 28KB - Virtual size: 24KB

.rmnet
Size: 60KB - Virtual size: 60KB