20412f5c6f431a86a782eb729e69dd05f8ae7cd0aa479896503cd2b5b71540ee

Sharing

Copy URL Twitter E-mail

General

Target

20412f5c6f431a86a782eb729e69dd05f8ae7cd0aa479896503cd2b5b71540ee
Size

197KB
MD5

780d34ef5e31a3b9dcaefb78429681fb
SHA1

a814c5929d261f90525faac9476de15372046914
SHA256

20412f5c6f431a86a782eb729e69dd05f8ae7cd0aa479896503cd2b5b71540ee
SHA512

a5aab5c523496a34d6716dadac09b3ef25936dc9ef95faf13bcb27bc3cbd7cb35f07ddf4326d4af796aa5a87651882b820e46ef6c066bea8de0af1e0605c5ec2
SSDEEP

3072:bOgpNqTPW/9gGg9XICemzKtS5YjXdXwyRRh/ZoJnNBvH2:bO+ITPWFgLX6KKtS5eXdX3/ZUnHv

Score

N/A

Malware Config

Signatures

Files

20412f5c6f431a86a782eb729e69dd05f8ae7cd0aa479896503cd2b5b71540ee
.dll windows x86

1053478c3502420e342022181930c8cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
HeapCreate
MulDiv
CloseHandle
DeleteFileW
CreateFileW
WriteFile
ReadFile
GetTempFileNameW
MoveFileExW
CreateDirectoryW
FreeLibrary
GetProcAddress
LoadLibraryW
WideCharToMultiByte
HeapFree
InterlockedIncrement
InterlockedDecrement
SetFilePointer
FindClose
FindNextFileW
FindFirstFileW
SetErrorMode
MultiByteToWideChar
GetFileSize
HeapDestroy
MapViewOfFile
CreateFileMappingW
GetFileAttributesW
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetLocaleInfoW
GetFileAttributesExW
GetSystemDefaultLCID
GetFileTime
CompareFileTime
CopyFileW
lstrlenW
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
SetLastError
LocalAlloc
HeapAlloc
UnmapViewOfFile
LocalFree
LoadLibraryExW

msvcrt

_adjust_fdiv
_initterm
free
strncpy
wcsncpy
??2@YAPAXI@Z
??3@YAXPAX@Z
_wcsnicmp
_stricmp
wcsrchr
memmove
_vsnwprintf
wcscmp
wcslen
qsort
_wcsicmp
malloc
strncmp
_wtol
iswctype
_strnicmp
isspace

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW

user32

LoadCursorW
GetDlgItemTextW
WinHelpW
SendDlgItemMessageW
MessageBeep
MessageBoxW
LoadStringW
CheckRadioButton
ShowWindow
GetDlgItem
SetDlgItemTextW
SetWindowLongW
EndDialog
GetWindowLongW
DialogBoxParamW
LoadIconW
SetDlgItemTextA
EnableWindow
SetCursor
InvalidateRect
SendMessageW

winspool.drv

GetFormW
GetPrinterDriverW
EnumFormsW
SetPrinterW
ClosePrinter
DeletePrinterDataW
OpenPrinterW
AddFormW
DeleteFormW
GetPrinterDriverDirectoryW
GetPrinterDataW
GetPrinterW
SetPrinterDataW

gdi32

DeleteDC
EnumFontFamiliesW
SetGraphicsMode
CreateICW

Exports

Exports

DevQueryPrintEx
DllMain
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentPropertySheets
DrvDriverEvent
DrvPrinterEvent
DrvQueryColorProfile
DrvQueryJobAttributes
DrvSplDeviceCaps
DrvUpgradePrinter

Sections

.text
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1053478c3502420e342022181930c8cc

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

rpcrt4

user32

winspool.drv

gdi32

Exports

Exports

Sections

.text Size: 173KB - Virtual size: 172KB

.data Size: 512B - Virtual size: 548B

.rsrc Size: 18KB - Virtual size: 18KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 173KB - Virtual size: 172KB

.data
Size: 512B - Virtual size: 548B

.rsrc
Size: 18KB - Virtual size: 18KB

.reloc
Size: 4KB - Virtual size: 4KB