00ad8b53e2879b3955e99754763f4991520df96db2386f0284e91e748ddf41b1

Sharing

Copy URL Twitter E-mail

General

Target

00ad8b53e2879b3955e99754763f4991520df96db2386f0284e91e748ddf41b1
Size

280KB
MD5

a8f704ff292551e760eccbda873a0ea2
SHA1

f6046ac2a17e5df69294f9285e1b618cc7e313ac
SHA256

00ad8b53e2879b3955e99754763f4991520df96db2386f0284e91e748ddf41b1
SHA512

ec2f9e653ead4dbf74ef3f515c11451a2e3130ab48248484e8c8b3f5ec901f60cb6eb796965936a6d21f94494002f51265a44a2e54b48a85dbcdd91dd08022a8
SSDEEP

3072:6v0BrkZ0uoFcAnmSogQ44sWNZcG4RZobOW5I4wbPSH:KgrpTcAmS044sW4fYbp5I4wba

Score

N/A

Malware Config

Signatures

Files

00ad8b53e2879b3955e99754763f4991520df96db2386f0284e91e748ddf41b1
.dll windows x86

67969073888ba9bc61a44fc10fef2e08

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalUnlock
LocalLock
GlobalFree
GlobalUnlock
GlobalLock
LoadLibraryA
GetUserDefaultLangID
GetTickCount
GlobalAlloc
CloseHandle
SetHandleCount
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
RtlUnwind
SetStdHandle
GetProcAddress
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
InitializeCriticalSection
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
GetLastError
GetStdHandle
HeapFree
VirtualFree
WriteFile
HeapDestroy
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
SetFilePointer
GetVersionExA
HeapCreate
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetModuleHandleA
GetEnvironmentVariableA

user32

GetSystemMetrics
MoveWindow
IsWindowVisible
GetWindowRect
ClientToScreen
GetClientRect
GetParent
ScreenToClient
GetDlgItem
SetDlgItemTextA
GetDlgItemTextA
SetActiveWindow
SetWindowPos
EndDialog
DialogBoxParamA
GetActiveWindow
EndPaint
FillRect
GetSysColor
BeginPaint
GetWindowLongA
DefWindowProcA
SetWindowLongA
LoadBitmapA
LoadStringA
SetTimer
CreateDialogParamA
ShowWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
SetWindowTextA
GetDC
ReleaseDC
DestroyWindow
LoadCursorA
RegisterClassA

gdi32

GetClipBox
CreateCompatibleBitmap
CreateBitmap
DeleteDC
BitBlt
SetStretchBltMode
SelectObject
CreateCompatibleDC
DeleteObject
GetStockObject
CreateSolidBrush
StretchBlt
DPtoLP
PatBlt
GetObjectA
GetMapMode
SetMapMode
SetBkColor

winspool.drv

GetPrinterDriverDirectoryA

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegEnumValueA
RegCreateKeyExA

Exports

Exports

DiskFulErrorDialog
FRegisterBitmapControl
GetDeviceDependentInfo
MemfullErrorDialog
OpenDuplexDlg
RawWarningDialog

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

67969073888ba9bc61a44fc10fef2e08

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 27KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 76KB - Virtual size: 79KB

.rsrc Size: 156KB - Virtual size: 154KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 27KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 76KB - Virtual size: 79KB

.rsrc
Size: 156KB - Virtual size: 154KB

.reloc
Size: 8KB - Virtual size: 4KB