982070a3819da112c0490bdc4d7590d2d63ca02b538baa78a6f6b8840e5a2a94

Sharing

Copy URL Twitter E-mail

General

Target

982070a3819da112c0490bdc4d7590d2d63ca02b538baa78a6f6b8840e5a2a94
Size

276KB
MD5

bede27d00b44c4e2c12265fea19651b3
SHA1

6bc279ffe79c3966e028ef35bff94813f4f027eb
SHA256

982070a3819da112c0490bdc4d7590d2d63ca02b538baa78a6f6b8840e5a2a94
SHA512

12a3a08ea2df875ad9780e3e2ea9724aa519d0877f418bfb3707fe75fd3191ec85b131911cee01df419c1f8aef53011e7202691a0b816f164db987a4517b3eb0
SSDEEP

6144:tVeTNdz48gaaukw9mBchYNpROuQh4c9zF/4:STCrBfpRgh4IzF/4

Score

N/A

Malware Config

Signatures

Files

982070a3819da112c0490bdc4d7590d2d63ca02b538baa78a6f6b8840e5a2a94
.dll windows x86

99009eb9b3090b60dd65efd28766bdf3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProfileStringA
GetModuleFileNameA
GetPrivateProfileStringA
GetCurrentProcessId
lstrlenA
_lread
_llseek
lstrcmpA
WritePrivateProfileStringA
lstrcpyA
_lclose
LeaveCriticalSection
InterlockedExchange
InitializeCriticalSection
_lcreat
_lopen
_lwrite
GetVersion
lstrcmpiA
GetShortPathNameA
Sleep
InterlockedIncrement
FindFirstFileA
InterlockedDecrement
GetStringTypeW
GetStringTypeA
RtlUnwind
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
SetEndOfFile
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
SetStdHandle
WriteFile
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
CreateFileA
GetFileType
LoadLibraryA
GetProcAddress
TlsGetValue
TlsFree
GetTickCount
EnterCriticalSection
GetFileAttributesA
GetCommandLineA
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetLastError
MoveFileA
DeleteFileA
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeA
SetLastError
TlsAlloc
VirtualAlloc
HeapReAlloc
GetCurrentThreadId
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
ExitProcess
TlsSetValue
CloseHandle
WideCharToMultiByte
GetFullPathNameA
GetCurrentDirectoryA

user32

SendMessageA
MessageBoxA
GetWindowTextLengthA
GetParent
ShowCursor
SetWindowLongA
CallWindowProcA
TrackPopupMenu
ClientToScreen
RemoveMenu
ModifyMenuA
GetSubMenu
GetClassNameA
KillTimer
ShowWindow
SetTimer
SetDlgItemTextA
GetSystemMetrics
SystemParametersInfoA
GetDesktopWindow
MoveWindow
SetRect
InflateRect
IntersectRect
OffsetRect
UnionRect
EqualRect
GetDlgItemTextA
GetWindowRect
EnableWindow
GetSysColor
GetWindowTextA
SetWindowTextA
GetDlgItem
EndDialog
WinHelpA
SetFocus
DialogBoxParamA
EnumChildWindows
wsprintfA
LoadCursorA
SetCursor
LoadMenuA

gdi32

CreateSolidBrush
DeleteObject
GetObjectA
SetTextColor
SetBkColor
CreateFontIndirectA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegCreateKeyExA

Exports

Exports

EditLexDlgProc
NewLexDlgProc
OptionsDlgProc
SSCE_AddToLex
SSCE_CheckBlock
SSCE_CheckBlockDlg
SSCE_CheckBlockDlgTmplt
SSCE_CheckCtrlBackground
SSCE_CheckCtrlDlg
SSCE_CheckCtrlDlgTmplt
SSCE_CheckString
SSCE_CheckWord
SSCE_ClearLex
SSCE_CloseBlock
SSCE_CloseLex
SSCE_CloseSession
SSCE_CompressLexAbort
SSCE_CompressLexEnd
SSCE_CompressLexFile
SSCE_CompressLexInit
SSCE_CountStringWords
SSCE_CreateLex
SSCE_DelBlockText
SSCE_DelBlockWord
SSCE_DelFromLex
SSCE_DelStringText
SSCE_DelStringWord
SSCE_EditLexDlg
SSCE_EditLexDlgTmplt
SSCE_FindLexWord
SSCE_GetAutoCorrect
SSCE_GetBlock
SSCE_GetBlockInfo
SSCE_GetBlockWord
SSCE_GetHelpFile
SSCE_GetLex
SSCE_GetLexId
SSCE_GetLexInfo
SSCE_GetMainLexFiles
SSCE_GetMainLexPath
SSCE_GetMinSuggestDepth
SSCE_GetOption
SSCE_GetRegTreeName
SSCE_GetSelUserLexFile
SSCE_GetSid
SSCE_GetStatistics
SSCE_GetStringTableName
SSCE_GetStringWord
SSCE_GetUserLexFiles
SSCE_GetUserLexPath
SSCE_InsertBlockText
SSCE_InsertStringText
SSCE_NextBlockWord
SSCE_OpenBlock
SSCE_OpenLex
SSCE_OpenSession
SSCE_OptionsDlg
SSCE_OptionsDlgTmplt
SSCE_ReplaceBlockWord
SSCE_ReplaceStringWord
SSCE_ResetLex
SSCE_SetAutoCorrect
SSCE_SetBlockCursor
SSCE_SetDebugFile
SSCE_SetDialogOrigin
SSCE_SetHelpFile
SSCE_SetIniFile
SSCE_SetKey
SSCE_SetMainLexFiles
SSCE_SetMainLexPath
SSCE_SetMinSuggestDepth
SSCE_SetOption
SSCE_SetRegTreeName
SSCE_SetSelUserLexFile
SSCE_SetStringTableName
SSCE_SetUserLexFiles
SSCE_SetUserLexPath
SSCE_Suggest
SSCE_Version
SndMsgEnumCb
SpellCheckDlgProc

Sections

.text
Size: 120KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99009eb9b3090b60dd65efd28766bdf3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 120KB - Virtual size: 118KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 24KB - Virtual size: 40KB

.rsrc Size: 108KB - Virtual size: 106KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 120KB - Virtual size: 118KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 24KB - Virtual size: 40KB

.rsrc
Size: 108KB - Virtual size: 106KB

.reloc
Size: 8KB - Virtual size: 7KB