0a977169c8588d6457c69f3ce8f4d6e8bc359a55fefac7f3dfe061b757202167

Sharing

Copy URL

Twitter E-mail

General

Target

0a977169c8588d6457c69f3ce8f4d6e8bc359a55fefac7f3dfe061b757202167
Size

180KB
MD5

5809867c95cf8a16e957c5cae8416e14
SHA1

6dc2d6b8a371adda3d074b9df98c11886d77ef94
SHA256

0a977169c8588d6457c69f3ce8f4d6e8bc359a55fefac7f3dfe061b757202167
SHA512

7a08f958e25df2ff5954dcd8b6a3164b5aa05939b455253e5cc31325ab5170506e74df934b0567f673916c5ef137fbcbb52cf35eb4047ca53c7bc6ab04b9b8ea
SSDEEP

3072:+4E8DYfh9r2wXvFhdT2tPaG8jLc9c5bIj/dhufTbT:+43tSQTiecSj/mb

Score

N/A

Malware Config

Signatures

Files

0a977169c8588d6457c69f3ce8f4d6e8bc359a55fefac7f3dfe061b757202167
.dll windows x86

3b102a36a628d89633563ff1e8d07b3e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrStrIW
StrStrIA
StrCmpIW

kernel32

LoadLibraryW
GetModuleHandleA
GetLastError
GetProcAddress
FreeLibrary
LoadLibraryA
GetTempPathW
DeleteFileW
GetModuleFileNameW
HeapAlloc
GetProcessHeap
GetModuleFileNameA
WritePrivateProfileStringW
GetPrivateProfileStringW
HeapFree
GetTempPathA
DeleteFileA
CreateProcessW
WritePrivateProfileStringA
GetPrivateProfileStringA
WaitForSingleObject
CloseHandle
CreateProcessA
OpenProcess
GetCurrentProcess
GetModuleHandleW
GetFileAttributesA
FlushFileBuffers
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
RtlUnwind
InitializeCriticalSection
HeapReAlloc
VirtualAlloc
lstrcmpiA
lstrlenA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetVersionExA
IsValidCodePage
GetOEMCP
GetACP
GetCurrentThreadId
GetCommandLineA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
RaiseException
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
WideCharToMultiByte
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetLocaleInfoA

user32

wvsprintfW
wvsprintfA
WaitForInputIdle
GetWindowThreadProcessId
wsprintfW
wsprintfA
FindWindowA

winspool.drv

OpenPrinterW
SetPrinterDataW
ClosePrinter
OpenPrinterA
SetPrinterDataA
EnumPrintersW
EnumPrintersA
SetPrinterW
SetPrinterA
EnumPortsW
EnumPortsA

advapi32

RegOpenKeyExA
RegCloseKey
RegEnumKeyExW
DuplicateTokenEx
RegOpenKeyExW
OpenProcessToken
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExA

shell32

ShellExecuteExA
ShellExecuteExW
DoEnvironmentSubstA

Exports

Exports

AddStandardTCPIPPortEx
AddStandardTCPIPPortExW
BrmfInstallPrinterEx
BrmfInstallPrinterExW
BrmfPrintUI
BrmfPrintUIW
GetLocalUSBPrinterInformation
GetLocalUSBPrinterInformationW
GetPrinterComment
GetPrinterCommentW
GetPrinterDriverName
GetPrinterDriverNameW
GetPrinterPort
GetPrinterPortW
GetTCPIPPortName
GetTCPIPPortNameW
IsPortNameNetAttached
IsPortNameNetAttachedW
SearchPrinterDriverName
SearchPrinterDriverNameW
SearchPrinterName
SearchPrinterNameW
SearchPrinterPortName
SearchPrinterPortNameW
SetPrinterComment
SetPrinterCommentW
SetPrinterDriverDataRegDword
SetPrinterDriverDataRegDwordW
SetPrinterPort
SetPrinterPortW

Sections

.text
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 940B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b102a36a628d89633563ff1e8d07b3e

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

winspool.drv

advapi32

shell32

Exports

Exports

Sections

.text Size: 72KB - Virtual size: 68KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 68KB - Virtual size: 71KB

.rsrc Size: 4KB - Virtual size: 940B

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 72KB - Virtual size: 68KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 68KB - Virtual size: 71KB

.rsrc
Size: 4KB - Virtual size: 940B

.reloc
Size: 8KB - Virtual size: 7KB