99153a89b5cc0fae141de88f5d2070914f358912ae6bf5aa96af3de8f9e0f9e0

Sharing

Copy URL Twitter E-mail

General

Target

99153a89b5cc0fae141de88f5d2070914f358912ae6bf5aa96af3de8f9e0f9e0
Size

293KB
MD5

69e0e75ee74a2e51f21682d03c2374b8
SHA1

8350b8dca59e58bbab919bb78ac7c2cff67f4ff8
SHA256

99153a89b5cc0fae141de88f5d2070914f358912ae6bf5aa96af3de8f9e0f9e0
SHA512

ab8328fc041e0f1b622421538931762a40381a9fa1533ba5c210fba59c0a7838b260e9a6194cd0964013a323f10927673e49ba8826414272414c2f634d42a2c2
SSDEEP

6144:Cxzu5Aavk2Tz6Xm89idJHwbiJ4Zo7c0qAg:Uas2uEdy44Zo7c0M

Score

N/A

Malware Config

Signatures

Files

99153a89b5cc0fae141de88f5d2070914f358912ae6bf5aa96af3de8f9e0f9e0
.dll windows x86

26a703b5c75e5862fe708bd20db6a179

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadLocale
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GetVersionExW
GetVolumeInformationW
GetWriteWatch
GlobalAddAtomW
GlobalAlloc
GlobalCompact
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InitializeCriticalSection
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsDebuggerPresent
IsValidCodePage
LCMapStringA
LCMapStringW
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalLock
LocalReAlloc
LocalSize
LocalUnlock
LockFile
LockResource
MapUserPhysicalPages
MulDiv
MultiByteToWideChar
GetStringTypeA
GetExitCodeThread
QueryPerformanceCounter
RaiseException
ReadFile
ResetEvent
ResumeThread
RtlUnwind
SetCommBreak
SetConsoleCursor
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadIdealProcessor
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TransmitCommChar
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
_hread
_lclose
_lopen
_lread
lstrcmpA
lstrcmpW
lstrcmpiW
lstrlenA
lstrlenW
GetStdHandle
GetStartupInfoW
GetStartupInfoA
GetProcessIoCounters
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoW
GetLocaleInfoA
GetLocalTime
GetLastError
GetLargestConsoleWindowSize
GetHandleInformation
GetFullPathNameW
GetFileType
GetFileTime
GetFileSize
GetFileInformationByHandle
OpenEventW
GetFileAttributesW
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetCommandLineA
GetCPInfo
GetACP
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
FatalExit
ExitThread
ExitProcess
EscapeCommFunction
EnumResourceLanguagesW
EnterCriticalSection
Beep
DuplicateHandle
DisconnectNamedPipe
DeleteCriticalSection
CreateThread
CreateFileW
CreateFileA
CreateEventW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
CancelIo
Process32Next

gdi32

SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetDIBitsToDevice
SelectObject
ScaleViewportExtEx
SaveDC
RestoreDC
RectVisible
PtVisible
OffsetViewportOrgEx
GetObjectW
GetClipBox
GdiPlayScript
ExtTextOutW
Escape
EnumFontFamiliesExW
DeleteDC
CreatePenIndirect
CreateBitmap
TextOutW

winspool.drv

ClosePrinter
ConvertUnicodeDevModeToAnsiDevmode
DEVICEMODE
DocumentPropertiesW
FlushPrinter
ReadPrinter
OpenPrinterW

comdlg32

dwOKSubclass
WantArrows
Ssync_ANSI_UNICODE_Struct_For_WOW
LoadAlterBitmap
GetFileTitleW

shlwapi

StrCatW
PathFindExtensionW
ColorAdjustLuma
UrlIsNoHistoryW

ws2_32

setsockopt
shutdown
send
ntohs
listen
inet_addr
htonl
getpeername
closesocket
bind
WSAStartup
WSAGetLastError
WSACleanup
WSAAsyncSelect
socket
sendto
recv

user32

GetMenuCheckMarkDimensions
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMessagePos
GetMessageTime
GetMessageW
GetNextDlgTabItem
GetParent
GetProcessWindowStation
GetPropW
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetTopWindow
GetWindow
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
GrayStringW
ImpersonateDdeClientWindow
IsClipboardFormatAvailable
IsDialogMessageW
IsIconic
IsWindow
IsWindowVisible
LoadBitmapW
LoadCursorW
LoadIconW
LoadStringW
MapDialogRect
MapWindowPoints
MessageBoxW
ModifyMenuW
MsgWaitForMultipleObjectsEx
GetMenu
PeekMessageA
PeekMessageW
GetFocus
PostQuitMessage
PostThreadMessageW
PtInRect
RegisterClassW
RegisterShellHookWindow
RegisterWindowMessageW
ReleaseDC
RemovePropW
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCursor
SetDebugErrorLevel
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetTimer
SetWindowLongW
SetWindowPos
SetWindowTextW
SetWindowsHookExW
ShowWindow
SystemParametersInfoA
TabbedTextOutW
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WaitMessage
WinHelpW
keybd_event
GetLastActivePopup
GetKeyboardType
GetKeyState
PackDDElParam
GetForegroundWindow
AdjustWindowRectEx
AllowSetForegroundWindow
BeginPaint
CallNextHookEx
CallWindowProcW
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetCursorPos
GetClipboardViewer
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCaretBlinkTime
GetCapture
GetAsyncKeyState
GetActiveWindow
ExitWindowsEx
EndPaint
EndDialog
DrawTextW
EnableMenuItem
DrawTextExW
DispatchMessageW
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
DdeClientTransaction
CreateWindowExW
CreateDialogIndirectParamW
CopyRect
CopyImage
PostMessageW
ClientToScreen
CharUpperW
CheckMenuItem

ole32

CoCreateInstance
CoInitializeSecurity
CoRegisterClassObject
CoRevokeClassObject
CoSetProxyBlanket
HENHMETAFILE_UserSize
OpenOrCreateStream
SetDocumentBitStg
CoInitializeEx

opengl32

glTexCoord3fv
glReadBuffer
glPixelTransferi
glNormal3fv
glLightModelf
glGetFloatv
glFogfv
glEvalCoord2dv
glEvalCoord1dv
glCullFace
glColor3bv
glClipPlane
glClearAccum
glCallLists
glBlendFunc
glBitmap
glAccum
glVertex4f

oleaut32

VariantClear
VariantChangeType
VarDateFromI2
SysFreeString
SysAllocStringLen
SysAllocString
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayDestroy
SafeArrayCreate
CreateStdDispatch
VariantInit

version

VerInstallFileA
VerInstallFileW
GetFileVersionInfoSizeW
GetFileVersionInfoSizeA
GetFileVersionInfoW

advapi32

AllocateAndInitializeSid
CloseServiceHandle
CopySid
CreateServiceW
CryptDuplicateKey
DeregisterEventSource
FreeEncryptionCertificateHashList
FreeSid
GetAce
GetLengthSid
GetSidIdentifierAuthority
GetSidSubAuthority
GetSidSubAuthorityCount
GetTokenInformation
InitializeAcl
InitializeSecurityDescriptor
IsValidSid
LookupAccountNameW
LsaGetSystemAccessAccount
MakeAbsoluteSD
OpenSCManagerW
OpenThreadToken
QueryServiceStatus
RegCloseKey
RegCreateKeyExW
RegCreateKeyW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW
RegOpenKeyExW
RegOpenKeyW
RegQueryValueExW
RegQueryValueW
RegSetKeySecurity
RegSetValueExW
RegisterServiceCtrlHandlerW
ReportEventW
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
SetServiceStatus
StartServiceCtrlDispatcherW
AddAccessAllowedObjectAce

Sections

.text
Size: 218KB - Virtual size: 220KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

26a703b5c75e5862fe708bd20db6a179

Headers

File Characteristics

Imports

kernel32

gdi32

winspool.drv

comdlg32

shlwapi

ws2_32

user32

ole32

opengl32

oleaut32

version

advapi32

Sections

.text Size: 218KB - Virtual size: 220KB

.rdata Size: 29KB - Virtual size: 31KB

.data Size: 22KB - Virtual size: 23KB

.idata Size: 11KB - Virtual size: 11KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 218KB - Virtual size: 220KB

.rdata
Size: 29KB - Virtual size: 31KB

.data
Size: 22KB - Virtual size: 23KB

.idata
Size: 11KB - Virtual size: 11KB

.rsrc
Size: 11KB - Virtual size: 11KB