f8a0e4f71d1955fcadaa534294a5ea168340814720b53eecb76968727fdb1fbb

Sharing

Copy URL Twitter E-mail

General

Target

f8a0e4f71d1955fcadaa534294a5ea168340814720b53eecb76968727fdb1fbb
Size

340KB
MD5

64b49b64bc5bc2fd964ca53ff85c7fb3
SHA1

f18e2f452d8e94c48fe64ffbc89cb93320217a98
SHA256

f8a0e4f71d1955fcadaa534294a5ea168340814720b53eecb76968727fdb1fbb
SHA512

419367f9b0a258c4f7488823a5753984b4a9f0d915c761026d8e495843b25d4d0d05f8e05e1e8d2283028ec5bb778a15aefebbc13f76a6dc35e75078a32f4371
SSDEEP

6144:qEANM8T3bSLZIi5W1S1i9TB6K6LB2/gwT:qENGbSLZI0v1i9Tcw

Score

N/A

Malware Config

Signatures

Files

f8a0e4f71d1955fcadaa534294a5ea168340814720b53eecb76968727fdb1fbb
.dll windows x86

3a77c059cd0b0d801f3ff1b62b6bd102

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetShortPathNameA
GetFileAttributesA
GetFileSize
GetFileTime
GetStringTypeExA
GetVolumeInformationA
GetFullPathNameA
SetFileTime
SetFileAttributesA
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapAlloc
SystemTimeToFileTime
LocalFileTimeToFileTime
HeapFree
ExitThread
RaiseException
HeapSize
HeapReAlloc
ExitProcess
TerminateProcess
GetACP
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
GetCommandLineA
DeleteFileA
FindFirstFileA
CreateThread
FindClose
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
SuspendThread
GetCurrentThreadId
SetThreadPriority
ResumeThread
CloseHandle
WaitForSingleObject
SetEvent
CreateEventA
UnlockFile
MoveFileA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
CreateFileA
WriteFile
ReadFile
GetCurrentDirectoryA
GetCurrentProcess
DuplicateHandle
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetOEMCP
MultiByteToWideChar
WideCharToMultiByte
GlobalFlags
GetCPInfo
GetCurrentThread
GetProcessVersion
lstrcmpA
MulDiv
FindResourceA
LoadLibraryA
FreeLibrary
GlobalGetAtomNameA
InterlockedIncrement
lstrcmpiA
LoadResource
LockResource
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GetLastError
GetModuleHandleA
GetProcAddress
IsBadWritePtr
lstrlenA
SetLastError
InterlockedDecrement
GetVersion
lstrcpyA
lstrcpynA
GetModuleFileNameA
TlsGetValue
lstrcatA
SetErrorMode
EnterCriticalSection
LocalReAlloc
TlsSetValue
GlobalLock
GlobalAlloc
GlobalReAlloc
GlobalHandle
LeaveCriticalSection
TlsFree
DeleteCriticalSection
GlobalUnlock
GlobalFree
LocalFree
TlsAlloc
InitializeCriticalSection
FatalAppExitA
LocalAlloc
SetHandleCount
VirtualFree
VirtualAlloc
Sleep

user32

ScrollWindow
EndDeferWindowPos
CopyRect
BeginDeferWindowPos
GetClientRect
GetScrollInfo
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
SetFocus
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SendDlgItemMessageA
UpdateWindow
PostMessageA
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
SetWindowTextA
MoveWindow
IsWindowEnabled
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
GetDesktopWindow
LoadStringA
CharToOemA
OemToCharA
DestroyMenu
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
ShowOwnedPopups
SetCursor
InsertMenuA
DeleteMenu
GetMenuStringA
CharUpperA
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
SetScrollInfo
EnableWindow
GetClassInfoA
RegisterClassA
ShowScrollBar
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
SetWindowPlacement
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
GetWindowLongA
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetParent
GetNextDlgTabItem
UnregisterClassA
UnhookWindowsHookEx
GetActiveWindow
SendMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
LoadIconA
LoadCursorA
RegisterClassExA
CreateDialogParamA
GetMessageA
IsDialogMessageA
WinHelpA
GetCapture
GetMenu
TranslateMessage
DispatchMessageA
DefWindowProcA
PostQuitMessage
ShowWindow
wsprintfA
IsIconic
SystemParametersInfoA
GetMessageTime

gdi32

GetDCOrgEx
SetBkColor
GetObjectA
SetTextColor
DeleteObject
DeleteDC
GetDeviceCaps
SaveDC
RestoreDC
StartDocA
GetStockObject
SelectPalette
SelectObject
SetPolyFillMode
SetROP2
SetBkMode
SetMapMode
SetViewportOrgEx
SetStretchBltMode
SetViewportExtEx
ScaleViewportExtEx
OffsetViewportOrgEx
OffsetWindowOrgEx
SetWindowExtEx
SetWindowOrgEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
OffsetClipRgn
SetTextJustification
SetTextCharacterExtra
SetTextAlign
CreateBitmap
ArcTo
GetCurrentPositionEx
PolyDraw
PolylineTo
SetArcDirection
PolyBezierTo
GetClipRgn
SetColorAdjustment
SelectClipPath
ExtSelectClipRgn
CreateRectRgn
GetObjectType
EnumMetaFile
PlayMetaFileRecord
GetViewportExtEx
GetWindowExtEx
PlayMetaFile
ExtCreatePen
CreateSolidBrush
CreatePen
CreatePatternBrush
CreateDIBPatternBrushPt
CreateHatchBrush
RectVisible
TextOutA
PtVisible
Escape
ExtTextOutA
ScaleWindowExtEx
SetMapperFlags
GetClipBox

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

comdlg32

GetFileTitleA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA

shell32

DragAcceptFiles
SHGetFileInfoA

ws2_32

connect
htons
inet_addr
WSACleanup
socket
WSAStartup
closesocket
send
__WSAFDIsSet
select
recv
listen
bind
inet_ntoa
gethostbyname
accept

comctl32

ord17

Exports

Exports

_AvisynthPluginInit2@4

Sections

.text
Size: 236KB - Virtual size: 233KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3a77c059cd0b0d801f3ff1b62b6bd102

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

comdlg32

advapi32

shell32

ws2_32

comctl32

Exports

Exports

Sections

.text Size: 236KB - Virtual size: 233KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 24KB - Virtual size: 32KB

.idata Size: 12KB - Virtual size: 11KB

.rsrc Size: 4KB - Virtual size: 2KB

.reloc Size: 16KB - Virtual size: 12KB

.text
Size: 236KB - Virtual size: 233KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 24KB - Virtual size: 32KB

.idata
Size: 12KB - Virtual size: 11KB

.rsrc
Size: 4KB - Virtual size: 2KB

.reloc
Size: 16KB - Virtual size: 12KB