4f3cbe4d87194092a1579ae6ea9cd1823ba2ee8f6b23c225085826285f588806

Sharing

Copy URL

Twitter E-mail

General

Target

4f3cbe4d87194092a1579ae6ea9cd1823ba2ee8f6b23c225085826285f588806
Size

1024KB
MD5

c00e53bb3529e8bd19aad731a1b5c904
SHA1

4d3650a498a49c7c109fa250db79e1fcdf8812a4
SHA256

4f3cbe4d87194092a1579ae6ea9cd1823ba2ee8f6b23c225085826285f588806
SHA512

876f5085f7ff5ad9438b64088a003983e34e862d37422de17df093b70091370d60601284d8e4ce5b17633c4bc4140643b2865db7154cdd047a213c363389b90d
SSDEEP

24576:fcOWZDt0p19BPwvUubVWyV4HaANCCtIn+g:qZp0/Ju4zbI

Score

N/A

Malware Config

Signatures

Files

4f3cbe4d87194092a1579ae6ea9cd1823ba2ee8f6b23c225085826285f588806
.dll windows x86

49a08f9ad72a3cb6bd833a19a0fa5d39

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

SetErrorMode
GlobalFlags
GetProcessVersion
TlsGetValue
GetCPInfo
GetOEMCP
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentDirectoryA
RtlUnwind
RaiseException
TlsSetValue
LocalReAlloc
CreateThread
ExitThread
ExitProcess
TerminateProcess
HeapReAlloc
SetStdHandle
GetFileType
HeapFree
GetACP
GetTimeZoneInformation
HeapAlloc
HeapSize
TlsFree
GetStringTypeA
GetStringTypeW
GetDriveTypeA
SetHandleCount
GetStdHandle
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
DeleteFileA
GetThreadLocale
SetUnhandledExceptionFilter
VirtualAlloc
UnhandledExceptionFilter
TlsAlloc
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsBadReadPtr
IsBadWritePtr
GetCurrentThread
MulDiv
SetLastError
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
LCMapStringW
LCMapStringA
LoadLibraryA
CreateProcessA
CloseHandle
FindResourceA
LoadResource
GetCurrentThreadId
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentProcessId
GetCommandLineA
GlobalReAlloc
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GlobalHandle
GetWindowsDirectoryA
SearchPathA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
lstrcpyA
lstrcpynA
LocalAlloc
lstrlenA
GetLastError
UnlockFile
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
DuplicateHandle
ReadFile
GetCurrentProcess
SuspendThread
lstrcmpA
CreateEventA
SetEvent
SetThreadPriority
ResumeThread
WideCharToMultiByte
LocalFree
MultiByteToWideChar
GetVersion
InterlockedDecrement
InterlockedIncrement
GlobalAddAtomA
lstrcatA
GlobalGetAtomNameA
GetVersionExA
GlobalFindAtomA
GlobalDeleteAtom
MoveFileExA
WritePrivateProfileStringA
WaitForSingleObject
CreateDirectoryA
FormatMessageA
LeaveCriticalSection
GetModuleHandleA
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
CreateFileMappingA
UnmapViewOfFile
GetFileSize
GetTempFileNameA
MapViewOfFile
GetTickCount
LockResource
GetTempPathA
SizeofResource
lstrcmpiA
CreateFileA
WriteFile
GetFileAttributesA
GlobalSize
FreeLibrary
GetProcAddress
GetSystemDirectoryA
GetModuleFileNameA
HeapCreate
Sleep
VirtualFree
IsBadCodePtr

user32

DrawTextA
SetWindowContextHelpId
MapDialogRect
DestroyMenu
CharNextA
UnregisterClassA
GetDesktopWindow
GetSysColorBrush
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
RegisterClipboardFormatA
PostThreadMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
AdjustWindowRectEx
GetScrollRange
GetScrollPos
GetTopWindow
MessageBoxA
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GrayStringA
PostQuitMessage
EndDialog
SetActiveWindow
GetSystemMetrics
CreateDialogIndirectParamA
GetAsyncKeyState
DrawMenuBar
GetMenu
GetWindowDC
GetUpdateRect
GetLastActivePopup
TrackPopupMenu
DestroyWindow
GetCursorPos
SetFocus
EnumThreadWindows
GetDC
ReleaseDC
FillRect
GetCapture
ReleaseCapture
SetCapture
ClientToScreen
PtInRect
LoadMenuA
GetSubMenu
RemoveMenu
ModifyMenuA
GetMenuStringA
GetMenuItemCount
InsertMenuA
DeleteMenu
IsChild
MoveWindow
EnumWindows
IsWindowVisible
RegisterWindowMessageA
IntersectRect
UnionRect
EqualRect
GetWindowRect
BeginPaint
EndPaint
IsRectEmpty
UpdateWindow
GetCursor
SetCursor
SetRect
GetWindowPlacement
SetWindowPlacement
FindWindowExA
PeekMessageA
TranslateMessage
DispatchMessageA
CreatePopupMenu
AppendMenuA
LoadCursorA
GetForegroundWindow
GetMessageTime
FindWindowA
TabbedTextOutA
GetMessageA
ValidateRect
GetNextDlgTabItem
IsIconic
GetActiveWindow
GetWindowThreadProcessId
CallNextHookEx
LoadStringA
SetWindowsHookExA
UnhookWindowsHookEx
GetFocus
GetKeyState
GetMessagePos
ScreenToClient
InvalidateRect
PostMessageA
SetWindowPos
GetWindowTextLengthA
GetDlgCtrlID
GetDlgItem
SetDlgItemTextA
GetClassNameA
CharUpperA
LoadImageA
GetSysColor
GetWindowTextA
OffsetRect
InflateRect
DrawFocusRect
GetParent
CallWindowProcA
IsWindowEnabled
GetWindow
SendMessageA
GetWindowLongA
DefWindowProcA
SetWindowLongA
GetClientRect
CopyRect
IsWindow
EnableWindow
SetForegroundWindow
ShowWindow
SystemParametersInfoA

gdi32

GetObjectA
RealizePalette
StretchBlt
ScaleWindowExtEx
ExcludeClipRect
LineTo
SetWindowExtEx
MoveToEx
GetDeviceCaps
GetViewportExtEx
CreatePen
GetWindowExtEx
CreateSolidBrush
CreatePatternBrush
RectVisible
TextOutA
PtVisible
GetMapMode
Escape
DPtoLP
GetTextColor
LPtoDP
ScaleViewportExtEx
SetViewportExtEx
SetViewportOrgEx
SetMapMode
OffsetViewportOrgEx
SetStretchBltMode
SelectPalette
RestoreDC
SaveDC
DeleteDC
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
DeleteObject
Rectangle
GetBkColor
SelectObject
PatBlt
GetStockObject
GetDIBColorTable
CreateHalftonePalette
CreatePalette
CreateCompatibleDC
BitBlt
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

FindExecutableA
ShellExecuteA

comctl32

ImageList_Replace
ImageList_GetImageInfo
ImageList_AddMasked
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CreateILockBytesOnHGlobal
OleIsCurrentClipboard
CoTaskMemAlloc
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
CreateStreamOnHGlobal
GetHGlobalFromStream
CreateFileMoniker
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
OleUninitialize
OleFlushClipboard
CoTaskMemFree

olepro32

ord253

oleaut32

SysFreeString
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantTimeToSystemTime
VariantCopy
VariantChangeType
VariantClear
SysAllocStringLen

Exports

Exports

AboutWinHelp2000
InitWinHelp2000
JumpHtml
JumpUrlIEBack
JumpUrlIEBrowseNext
JumpUrlIEBrowsePrev
JumpUrlIEForward
JumpUrlIEPrint
JumpUrlIERefresh
JumpUrlIEStop
LDLLHandler
RoboHelpExAbout
RoboHelpExEHelp
RoboHelpExInitialize
RoboHelpExSeeAlso
RoboHelpExShowNavPane
RoboHelpExShowSeeAlso
RoboHelpExWatermark
RoboHelpExWatermarkNonScroll
Wh98About
Wh98Initialize
Wh98SeeAlso
Wh98ShowNavPane
Wh98ShowSeeAlso
Wh98Watermark
Wh98WatermarkNSR

Sections

.text
Size: 448KB - Virtual size: 446KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 396KB - Virtual size: 395KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49a08f9ad72a3cb6bd833a19a0fa5d39

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Exports

Exports

Sections

.text Size: 448KB - Virtual size: 446KB

.rdata Size: 88KB - Virtual size: 86KB

.data Size: 36KB - Virtual size: 70KB

.rsrc Size: 396KB - Virtual size: 395KB

.reloc Size: 52KB - Virtual size: 51KB

.text
Size: 448KB - Virtual size: 446KB

.rdata
Size: 88KB - Virtual size: 86KB

.data
Size: 36KB - Virtual size: 70KB

.rsrc
Size: 396KB - Virtual size: 395KB

.reloc
Size: 52KB - Virtual size: 51KB