c19ee16b45cdc674ff2cfd8087b1b264646ca39b4887bce0e6d52c3d0f33cabf

Sharing

Copy URL Twitter E-mail

General

Target

c19ee16b45cdc674ff2cfd8087b1b264646ca39b4887bce0e6d52c3d0f33cabf
Size

508KB
MD5

3a5a7d2b43c0813d0ddcfd2a191626c4
SHA1

ce06628889edb29b12b31b5da9ce31d1f6be193a
SHA256

c19ee16b45cdc674ff2cfd8087b1b264646ca39b4887bce0e6d52c3d0f33cabf
SHA512

c48855f9ee4997b361aa3229a4d6bda96fd6dfcc3fefa1d185fb61aedbb464bc9232149d975252494a95c7c10e952abeefcb0515a61ef3c4876b55d7965dbdeb
SSDEEP

12288:/Z7w723JquPGZzIV1QuNSaAJ1sSK0c7R5:B7w723BPjV1QuEY7r

Score

N/A

Malware Config

Signatures

Files

c19ee16b45cdc674ff2cfd8087b1b264646ca39b4887bce0e6d52c3d0f33cabf
.dll windows x86

1a2eeba4bc642e124a2cef3d1e073a61

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscms

GetColorDirectoryA
CreateColorTransformA
OpenColorProfileA
IsColorProfileValid
CloseColorProfile
TranslateBitmapBits
DeleteColorTransform

kernel32

SetEndOfFile
GetCPInfo
GetOEMCP
GetFileAttributesA
HeapAlloc
HeapFree
HeapReAlloc
GetCommandLineA
RtlUnwind
ExitProcess
TerminateProcess
RaiseException
HeapSize
GetACP
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
GetProcessVersion
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
InterlockedIncrement
WritePrivateProfileStringA
GetModuleFileNameA
GlobalHandle
GlobalFlags
GetLastError
SetLastError
GetVersion
lstrcpynA
lstrcpyA
lstrcatA
SetErrorMode
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalUnlock
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
CloseHandle
GlobalLock
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
lstrlenA
GlobalAlloc
HeapDestroy
HeapCreate
GlobalFree

user32

SetFocus
GetSystemMetrics
GetWindowPlacement
IsIconic
SystemParametersInfoA
ShowWindow
RegisterWindowMessageA
SetWindowPos
GetMessagePos
GetMessageTime
GetForegroundWindow
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CreateWindowExA
DestroyWindow
DefWindowProcA
SetForegroundWindow
RemovePropA
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
GetCapture
GetSysColor
MapWindowPoints
LoadIconA
LoadCursorA
GetSysColorBrush
LoadStringA
DestroyMenu
GetDlgItem
GrayStringA
DrawTextA
TabbedTextOutA
ReleaseDC
GetMenuItemCount
wsprintfA
GetWindowTextA
SetWindowTextA
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
UnregisterClassA
UnhookWindowsHookEx
SetWindowLongA
LoadBitmapA
GetMenuState
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
GetDC
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
PtInRect

gdi32

CreateBitmap
GetICMProfileA
DeleteObject
DeleteDC
SaveDC
RestoreDC
SelectObject
GetStockObject
SetBkColor
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
GetDeviceCaps
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
GetObjectA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA

comctl32

ord17

Exports

Exports

?EndRET@@YAHXZ
?StartFilterArray@@YAHHHHPAD@Z
?StartRET@@YAHXZ
?UpdataRETStatus@@YAHH@Z
ChannelNumber
ColorAdjustmentStyle
Draw_CropLine
EndColorConvert
EndLineOutput
EndNTDCMS
Film_Crop
GetProfilePath
InitialICMForm
NTDCMS
OpenColorProfileFromFile
RGB2CMYK
RGB2YCC
RGB_Crop
StartColorAdjust
StartColorConvert
StartFilter
StartLineOutput
StartNTDCMS
YCC2RGB

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 328KB - Virtual size: 341KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1a2eeba4bc642e124a2cef3d1e073a61

Headers

File Characteristics

Imports

mscms

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 328KB - Virtual size: 341KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 20KB - Virtual size: 18KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 328KB - Virtual size: 341KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 20KB - Virtual size: 18KB