dd5449a25d4e83b07e1cc272fed9a9c151281a2edf21b58b230bb45a755bdec9

Sharing

Copy URL Twitter E-mail

General

Target

dd5449a25d4e83b07e1cc272fed9a9c151281a2edf21b58b230bb45a755bdec9
Size

90KB
MD5

a3acff8130b8265d3ded0ea307f3f844
SHA1

ddc9e6aba4d432ef462763dccf672d29153d2d90
SHA256

dd5449a25d4e83b07e1cc272fed9a9c151281a2edf21b58b230bb45a755bdec9
SHA512

c36ebd0c2097899b1a0697dfab4d14c11842781bffffa98c96ad784f62fe8e9a00550a6e0bb504456f6454e1e5c9f1e6bb1738cdac4a17a4594dce4302eacf93
SSDEEP

1536:hd7H9EOhM0E7aHMh0fPRu1cQGsRCdV2PZ6GHEhheXy5ni+SQqKH8PaDS1fYb:hqNa1R0cQvyV2R6RhheXyseMY

Score

N/A

Malware Config

Signatures

Files

dd5449a25d4e83b07e1cc272fed9a9c151281a2edf21b58b230bb45a755bdec9
.dll windows x86

673f7c625918a96dfc3010792305f39e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtol
wcschr
??3@YAXPAX@Z
_except_handler3
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
_wsplitpath
wcsncmp
_wcsnicmp
_itow
_wsetlocale
__CxxFrameHandler
wcsncpy
_wmakepath
_wcsdup
wcsstr
wcstod
free
wcsrchr
_wtoi
_ftol
wcscmp
_vsnwprintf
??2@YAPAXI@Z
_wcsicmp
wcslen

user32

EnableWindow
GetDlgItem
SetWindowTextW
LoadStringW
CheckDlgButton
LoadIconW
SendMessageW
GetDesktopWindow
SendDlgItemMessageW
GetDlgItemTextW
SetFocus
MessageBoxW
GetForegroundWindow
CharPrevW
CharNextW
GetWindowLongW
SetDlgItemTextW
GetActiveWindow
SetWindowLongW
PostMessageW
IsDlgButtonChecked

kernel32

FreeLibrary
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
LockResource
IsBadWritePtr
lstrcpynW
GetLongPathNameW
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
GetModuleFileNameW
SetLastError
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetLastError
lstrcmpiW
CompareStringW
GetNumberFormatW
GetVersionExW
InterlockedDecrement
lstrlenW
GetLocaleInfoW
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
GetUserDefaultLCID
LocalAlloc
MultiByteToWideChar
GetCurrentProcessId
ProcessIdToSessionId
LocalFree
DeleteFileW
CloseHandle
GetFileType
CreateFileW
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesW

winspool.drv

SetJobW
AdvancedDocumentPropertiesW
SetPrinterW
GetPrinterW
EnumFormsW
GetJobW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegDeleteValueW
RegSetValueExW

ole32

OleUninitialize
OleInitialize
StringFromGUID2

shell32

SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
SHGetDesktopFolder
SHGetFolderLocation

gdi32

ExtEscape

shlwapi

StrRetToBufW
PathAddBackslashW
PathCompactPathExW
StrChrW
PathIsDirectoryW
wnsprintfA
wnsprintfW

msi

ord109
ord39

Exports

Exports

DllMain
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentPropertySheets
DrvPrinterEvent

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

673f7c625918a96dfc3010792305f39e

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

winspool.drv

advapi32

ole32

shell32

gdi32

shlwapi

msi

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 56KB - Virtual size: 58KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 56KB - Virtual size: 58KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 2KB - Virtual size: 1KB