356eea1e0ffd665949bef066115ac5e5a691c16c4f6698d2a15450f15fd7b5f7

Sharing

Copy URL Twitter E-mail

General

Target

356eea1e0ffd665949bef066115ac5e5a691c16c4f6698d2a15450f15fd7b5f7
Size

668KB
MD5

b84f11313d244955f9f03a7ebb922806
SHA1

b9eeca91128220b60ee2b6346a46e7c46d8f57a4
SHA256

356eea1e0ffd665949bef066115ac5e5a691c16c4f6698d2a15450f15fd7b5f7
SHA512

25a8130ff94ac1f1fbe053e90fbde156f8e6ac8a9d2557ad7499c4955ef4dba948b7f064a6912ad2217da4aa010da68a6ba89e4e52a7c13e14f3e207cbdd3ca0
SSDEEP

12288:2xup2lh6kuf7fqOX6VuPBBPNwDF7dkt7NnyDIM6pVg3vO0DgQs4P4P5+FWpLfOqd:0lDuf7CYPvI/zHjmTx2BXL7SFy3c

Score

N/A

Malware Config

Signatures

Files

356eea1e0ffd665949bef066115ac5e5a691c16c4f6698d2a15450f15fd7b5f7
.dll windows x86

f465501239e543ee739e2bb842b3c6d0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmNotifyIME
ImmGetContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontA
ImmReleaseContext

kernel32

GetTimeZoneInformation
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
GetStdHandle
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoA
GlobalReAlloc
GlobalUnlock
WideCharToMultiByte
LeaveCriticalSection
EnterCriticalSection
MulDiv
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
IsDBCSLeadByteEx
InitializeCriticalSection
GetVersionExA
DeleteCriticalSection
GetTickCount
GlobalFree
GlobalAlloc
GlobalSize
GlobalLock
GetCPInfo
IsValidCodePage
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GetModuleFileNameA
CloseHandle
InterlockedDecrement
lstrcpyA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
SetLastError
GetLastError
lstrcpynA
lstrlenA
DuplicateHandle
GetCurrentProcess
CreateFileA
ReadFile
WriteFile
SetFilePointer
GetACP
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
InterlockedIncrement
LocalAlloc
LocalFree
TlsAlloc
GlobalHandle
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
SetErrorMode
GlobalFlags
WritePrivateProfileStringA
GetProcessVersion
GetOEMCP
GetFileAttributesA
GetFileSize
GetFileTime
FileTimeToSystemTime
FileTimeToLocalFileTime
RtlUnwind
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetCommandLineA
ExitProcess
TerminateProcess
RaiseException
HeapReAlloc
HeapSize
MultiByteToWideChar

user32

GetClassInfoA
wsprintfA
WinHelpA
GetSubMenu
GetTopWindow
CopyRect
LoadIconA
TabbedTextOutA
GrayStringA
CharUpperA
GetClassNameA
PtInRect
GetSysColorBrush
LoadStringA
GetMenuItemID
GetDlgItem
GetWindowTextA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
IsIconic
GetWindowPlacement
UnhookWindowsHookEx
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
RegisterClassA
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
SetWindowsHookExA
GetLastActivePopup
IsWindowEnabled
PostQuitMessage
HideCaret
DestroyCaret
CreateCaret
ShowCaret
EmptyClipboard
SetClipboardData
SystemParametersInfoA
AppendMenuA
OpenClipboard
GetClipboardData
CloseClipboard
GetScrollInfo
SetScrollInfo
SetCaretPos
ScrollWindow
UpdateWindow
SetTimer
KillTimer
GetDlgCtrlID
IsChild
ScreenToClient
ClientToScreen
GetMessageTime
SetFocus
MsgWaitForMultipleObjects
PostMessageA
RegisterClipboardFormatA
RegisterClassExA
MessageBoxA
GetDoubleClickTime
TrackPopupMenu
DestroyMenu
CreatePopupMenu
UnregisterClassA
ReleaseCapture
BeginPaint
GetParent
EndPaint
CallWindowProcA
DefWindowProcA
SetCapture
GetCursorPos
AdjustWindowRectEx
InflateRect
DrawTextW
DrawTextA
DrawFocusRect
GetDC
ReleaseDC
GetSystemMetrics
MapWindowPoints
SetWindowTextA
SetCursor
InvalidateRect
GetClientRect
GetWindowRect
GetFocus
DestroyWindow
FillRect
GetWindowLongA
SetWindowLongA
GetSysColor
GetKeyState
SetWindowPos
GetKeyboardLayout
LoadCursorA
GetMenu
GetActiveWindow
GetMenuItemCount
CreateWindowExA
SendMessageA
ShowWindow
EnableWindow
GetCapture
IsClipboardFormatAvailable

gdi32

DeleteDC
CreatePalette
DeleteObject
CreateFontIndirectA
SelectPalette
SelectObject
Escape
TextOutA
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
RestoreDC
SaveDC
GetClipBox
CreateBitmap
TranslateCharsetInfo
GetObjectA
IntersectClipRect
RealizePalette
GetTextMetricsA
GetTextExtentExPointW
GetTextExtentExPointA
GetTextExtentPoint32W
GetTextExtentPoint32A
SetBkMode
SetTextColor
ExtTextOutW
BitBlt
Ellipse
RoundRect
CreatePatternBrush
SetBkColor
ExtTextOutA
Rectangle
Polygon
LineTo
MoveToEx
GetDeviceCaps
GetNearestColor
CreateSolidBrush
CreatePen
CreateCompatibleBitmap
CreateCompatibleDC
SetTextAlign
GetStockObject

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

ord17

ole32

OleInitialize
OleUninitialize
RevokeDragDrop
DoDragDrop
RegisterDragDrop

Exports

Exports

GetNewInf
_Scintilla_DirectFunction@16

Sections

.text
Size: 500KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f465501239e543ee739e2bb842b3c6d0

Headers

File Characteristics

Imports

imm32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

ole32

Exports

Exports

Sections

.text Size: 500KB - Virtual size: 496KB

.rdata Size: 28KB - Virtual size: 27KB

.data Size: 92KB - Virtual size: 107KB

.rsrc Size: 12KB - Virtual size: 8KB

.reloc Size: 32KB - Virtual size: 30KB

.text
Size: 500KB - Virtual size: 496KB

.rdata
Size: 28KB - Virtual size: 27KB

.data
Size: 92KB - Virtual size: 107KB

.rsrc
Size: 12KB - Virtual size: 8KB

.reloc
Size: 32KB - Virtual size: 30KB