24bc17d953809e6ad7ece371ee0e20e53de5cdd952b928593a7b80a8a9874421

Sharing

Copy URL Twitter E-mail

General

Target

24bc17d953809e6ad7ece371ee0e20e53de5cdd952b928593a7b80a8a9874421
Size

1008KB
MD5

f623d663a1ddff1185965fead3827a48
SHA1

6d60cc12103f3a08c60a80f8f35d7f4f5a5caebb
SHA256

24bc17d953809e6ad7ece371ee0e20e53de5cdd952b928593a7b80a8a9874421
SHA512

b7b05c987bf0f03b315021b6e54da5ecd623a15a81a04df3233a2b60d8f4aeef035501bb0831c7eeb5cc1eb17358aa666fed94a12bc08858a74ffd2b7cc7c279
SSDEEP

6144:twIDwpLlVuQOZrDzFV2O5W+Dw0b0GWTMwRMNsYAeHWvRe38RcxxpcAcA6Pw1vu6:fEB4QOZrDBV2GWYHnH4v0u

Score

N/A

Malware Config

Signatures

Files

24bc17d953809e6ad7ece371ee0e20e53de5cdd952b928593a7b80a8a9874421
.dll windows x64

cda79dff5b221e63eb11ee9c5dbc5b4b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

??2@YAPEAX_K@Z
cos
__C_specific_handler
wcsstr
memset
_onexit
__dllonexit
_initterm
wcsncpy
sin
??3@YAXPEAX@Z
sprintf
strncpy
_ltow
_itow
strstr
sqrt
swprintf
wcschr
fopen
fread
fclose
malloc
free
fseek
fwrite
memcpy

ntdll

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
LoadLibraryW
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
SetLastError
lstrcpynW
FreeLibrary
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
GetModuleFileNameW
OutputDebugStringA
GetPrivateProfileIntW
CopyFileW
GetWindowsDirectoryW
GetSystemDefaultLangID
GetPrivateProfileStringW
FindClose
CreateDirectoryW
FindFirstFileW
OutputDebugStringW
GetSystemDirectoryW
LoadLibraryA
SetFileAttributesW
SetFilePointer
WriteFile
ReadFile
CloseHandle
CreateFileW
GetFileSize
LocalFree
LocalAlloc
GetSystemInfo
Sleep
WideCharToMultiByte
MultiByteToWideChar
GetVersionExW
WritePrivateProfileStringW
DeleteFileW
MulDiv
GetTempPathW
GlobalFree
GlobalAlloc
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId

user32

FillRect
wsprintfW
SetCursor
LoadCursorW
CallWindowProcW
SendMessageW
GetClientRect
PtInRect
GetWindowRect
GetDlgItem
GetParent
GetCursorPos
SendDlgItemMessageW
GetClassNameW
EnumChildWindows
GetWindowTextW
PostMessageW
GetKeyState
GetDC
SetDlgItemTextW
CreateWindowExW
DialogBoxParamW
MessageBoxW
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
EnableWindow
ShowWindow
SetWindowPos
SetWindowLongPtrW
DefWindowProcW
GetWindowLongPtrW
EnumWindows
DestroyWindow
EndPaint
BeginPaint
EndDialog
SetFocus
ReleaseDC
LoadBitmapW
IsDlgButtonChecked
DestroyIcon
LoadIconW
SetWindowTextW
LoadImageW

winspool.drv

StartPagePrinter
GetPrinterW
EnumFormsW
EndPagePrinter
WritePrinter
EndDocPrinter
StartDocPrinterW
SetFormW
AddFormW
DeleteFormW

advapi32

RegQueryValueExW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW

gdi32

SetBkMode
FloodFill
ExtTextOutW
GetDIBits
BitBlt
SetTextAlign
CreateCompatibleDC
GetObjectW
SelectObject
SetStretchBltMode
StretchBlt
DeleteDC
GetTextExtentPoint32W
CreateFontW
CreateCompatibleBitmap
CreateFontIndirectW
GetDeviceCaps
EnumFontFamiliesExW
DeleteObject
SetDIBits

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW

Exports

Exports

DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 296KB - Virtual size: 295KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 40.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 672KB - Virtual size: 671KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 492B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cda79dff5b221e63eb11ee9c5dbc5b4b

Headers

File Characteristics

Imports

msvcrt

ntdll

kernel32

user32

winspool.drv

advapi32

gdi32

shell32

Exports

Exports

Sections

.text Size: 296KB - Virtual size: 295KB

.data Size: 35KB - Virtual size: 40.4MB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 672KB - Virtual size: 671KB

.reloc Size: 512B - Virtual size: 492B

.text
Size: 296KB - Virtual size: 295KB

.data
Size: 35KB - Virtual size: 40.4MB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 672KB - Virtual size: 671KB

.reloc
Size: 512B - Virtual size: 492B