03d609a694fc82e76389fc21d47216964aaaad6d4a00e7fccb33fcf04ba35803

Sharing

Copy URL Twitter E-mail

General

Target

03d609a694fc82e76389fc21d47216964aaaad6d4a00e7fccb33fcf04ba35803
Size

712KB
MD5

65f3d352f7ae891fd3a52966864fdc74
SHA1

3261a2086637a691ce250829fcb362e4c06dcc98
SHA256

03d609a694fc82e76389fc21d47216964aaaad6d4a00e7fccb33fcf04ba35803
SHA512

a3d363b00fb71d5f9bbe6e7f796f97659e01c7362fdd8a045d6a1195235396a71e5ad142e599a326671ca54ab6ffd50b08aa674fce3e8f332ee4f72551b69394
SSDEEP

12288:qlGUi5S0pV5SxMkJN2Dohi6DvC3EtN2C1qVywaDMthGC/RdUL+/KI3:q8iMkJN2DoDW0t8C1yyf4hfTFik

Score

N/A

Malware Config

Signatures

Files

03d609a694fc82e76389fc21d47216964aaaad6d4a00e7fccb33fcf04ba35803
.dll windows x86

78575dbbf8982c4655fd11aae5a0fb12

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

psregapi

?EnumKey@CRegApi@@QAEJKPADAAK@Z
?QueryValue@CRegApi@@QAEJPBDAAKPAE1@Z
?QueryValue@CRegApi@@QAEJPBDPADAAK@Z
??0CRegApi@@QAE@XZ
?OpenKey@CRegApi@@QAEJPAUHKEY__@@PBDK@Z
?SetValue@CRegApi@@QAEJPBDK0@Z
?CloseKey@CRegApi@@QAEJXZ
??1CRegApi@@UAE@XZ

murocapi

ord93
ord96
ord27
ord47
ord91
ord92
ord75
ord61
ord80
ord68
ord82
ord33
ord22
ord49
ord36
ord77
ord164
ord26

traceapi

EvtInitialize
SetLocalizedHeader
EvtUnInitialize
CreateLogFile

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

setupapi

SetupDiGetClassDevsA
SetupDiOpenDevRegKey
SetupDiEnumDeviceInfo

intstngs

??0CIntelSettings@@QAE@W4IT_SETTING_LOC@@KH@Z
??1CIntelSettings@@QAE@XZ
?GetSetting@CIntelSettings@@QAEJW4INTEL_SETTING@@PADK@Z

icmp

IcmpCreateFile
IcmpSendEcho
IcmpCloseHandle

kernel32

TlsFree
SetErrorMode
InterlockedIncrement
SystemTimeToFileTime
GlobalFlags
GetCPInfo
GetOEMCP
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetCurrentDirectoryA
MoveFileA
DeleteFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
LocalAlloc
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetFileTime
LocalUnlock
LocalLock
GetTempFileNameA
GetDiskFreeSpaceA
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
GetCommandLineA
ExitProcess
HeapReAlloc
ExitThread
CreateThread
TerminateProcess
HeapSize
LCMapStringA
LCMapStringW
FatalAppExitA
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
SetUnhandledExceptionFilter
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetTimeZoneInformation
GetDriveTypeA
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
LocalReAlloc
SetStdHandle
SetConsoleCtrlHandler
GetLocaleInfoW
SetEnvironmentVariableA
InterlockedDecrement
GetCurrentThread
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
GetModuleHandleA
FreeResource
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GlobalFree
CopyFileA
MulDiv
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
lstrcpynA
lstrcatA
WinExec
lstrcpyA
SetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
ReleaseMutex
WaitForSingleObject
CreateMutexA
CreateFileA
CloseHandle
GetCurrentThreadId
Sleep
GetSystemTimeAsFileTime
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetSystemDirectoryA
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
CompareStringW
CompareStringA
lstrlenA
lstrcmpiW
lstrlenW
lstrcmpiA
GetVersion
FindResourceA
LoadResource
LockResource
SizeofResource
GetLastError
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
IsValidCodePage
LeaveCriticalSection
UnlockFile

user32

GetDialogBaseUnits
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
WindowFromPoint
ShowOwnedPopups
PostQuitMessage
wsprintfA
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
SetParent
ClientToScreen
GetDesktopWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetMessageA
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
MessageBeep
GetSysColor
GetMessagePos
IsWindow
KillTimer
SetTimer
ReleaseDC
ScreenToClient
PtInRect
LoadCursorA
SetCursor
SetProcessDefaultLayout
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
InvalidateRect
UpdateWindow
InflateRect
SetRect
CopyRect
DrawStateA
MessageBoxA
RegisterWindowMessageA
GetFocus
GetSystemMetrics
LoadIconA
GetSystemMenu
SetCapture
LockWindowUpdate
GetDCEx
UnionRect
IsRectEmpty
LoadMenuA
UnpackDDElParam
ReuseDDElParam
GetParent
GetDC
GetWindowRect
IsIconic
PostMessageA
DrawIcon
SetWindowsHookExA
SetWindowLongA
CallNextHookEx
GetClientRect
FillRect
EnumChildWindows
CallWindowProcA
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
SetRectEmpty
BringWindowToTop
UnhookWindowsHookEx
GetClassNameA
GetWindowLongA
EnableWindow
SetActiveWindow
UnregisterClassA
SendMessageA
CharUpperW
CharUpperA
CharLowerW
CharLowerA
SetMenu
TranslateAcceleratorA
GetTabbedTextExtentA
IsClipboardFormatAvailable
DestroyIcon
DeleteMenu
DestroyMenu
GetWindowDC
GetMenuItemInfoA
TranslateMessage

gdi32

GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
PatBlt
SetRectRgn
CombineRgn
SetMapMode
ExtSelectClipRgn
GetCharWidthA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
StretchDIBits
CreateFontA
PolyBezierTo
PolylineTo
PolyDraw
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
GetDeviceCaps
GetObjectA
CreateFontIndirectA
GetStockObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
RoundRect
LPtoDP
DPtoLP
GetMapMode
GetBkColor
CreateCompatibleDC
CreateCompatibleBitmap
CreatePen
GetTextExtentPoint32A
SetBkMode
SetBkColor
DeleteObject
GetTextMetricsA
CreateSolidBrush
StartDocA
GetPixel
GetWindowExtEx
GetViewportExtEx
SelectClipPath
CreateRectRgn
GetClipRgn
SelectClipRgn
SetColorAdjustment
SetArcDirection
SetMapperFlags
DeleteDC

comdlg32

PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
ReplaceTextA
FindTextA
PageSetupDlgA
CommDlgExtendedError
GetFileTitleA

winspool.drv

ClosePrinter
GetJobA
DocumentPropertiesA
OpenPrinterA

advapi32

RegCreateKeyA
CheckTokenMembership
AllocateAndInitializeSid
RegQueryValueExA
RegCloseKey
RegEnumKeyA
RegOpenKeyExA
GetUserNameA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegDeleteKeyA
GetFileSecurityA
SetFileSecurityA
FreeSid
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA

shell32

ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA
ExtractIconA
DragFinish
DragQueryFileA

comctl32

_TrackMouseEvent
ord17
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
ImageList_Merge
ImageList_Draw
ImageList_GetImageInfo

shlwapi

PathRemoveExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathFindExtensionA

ole32

StringFromCLSID
ReadClassStg
CreateBindCtx
ReadFmtUserTypeStg
CoUninitialize
OleRegGetUserType
CoInitialize
CoTaskMemFree
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
CoTreatAsClass
CoTaskMemAlloc
ReleaseStgMedium
OleDuplicateData
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CLSIDFromString

oleaut32

VariantCopy
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayAllocData
VariantInit
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
SysFreeString
VariantChangeType
VariantClear
SysStringByteLen
SysAllocStringByteLen
SysStringLen
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
SysReAllocStringLen
VarDateFromStr
VarBstrFromDec
VarDecFromStr
SysAllocStringLen

ws2_32

WSAStartup
inet_addr
WSACleanup

Exports

Exports

CreatePlugin

Sections

.text
Size: 368KB - Virtual size: 365KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 188KB - Virtual size: 188KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

78575dbbf8982c4655fd11aae5a0fb12

Headers

File Characteristics

Imports

psregapi

murocapi

traceapi

version

setupapi

intstngs

icmp

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

Exports

Exports

Sections

.text Size: 368KB - Virtual size: 365KB

.rdata Size: 96KB - Virtual size: 94KB

.data Size: 12KB - Virtual size: 22KB

.rsrc Size: 8KB - Virtual size: 7KB

.reloc Size: 36KB - Virtual size: 32KB

.text Size: 188KB - Virtual size: 188KB

.text
Size: 368KB - Virtual size: 365KB

.rdata
Size: 96KB - Virtual size: 94KB

.data
Size: 12KB - Virtual size: 22KB

.rsrc
Size: 8KB - Virtual size: 7KB

.reloc
Size: 36KB - Virtual size: 32KB

.text
Size: 188KB - Virtual size: 188KB