73e50095aaaf280a7929315d7071c4ecd00f2c5ce4f8461592fec6b478ce9b97

Sharing

Copy URL Twitter E-mail

General

Target

73e50095aaaf280a7929315d7071c4ecd00f2c5ce4f8461592fec6b478ce9b97
Size

140KB
MD5

d674893783b66c781f3a8ce699833fa7
SHA1

0ab9ef3ebf9f35f9aa702c0aa6a52de809800153
SHA256

73e50095aaaf280a7929315d7071c4ecd00f2c5ce4f8461592fec6b478ce9b97
SHA512

dc35ea47fde5f98e30c3227a625b64906700a6e860c86e60bfc313c197a2e4ad160a064bc2f4dec0c9cbb0424b43a5e688bebbeabaa5f49c8e8b1a4a5143647e
SSDEEP

3072:8cmmiQWJnpVsJ5iavunzmS75ITJXjeMzxGuTqqpZsDdV:8xQgn7aZumEIgMzxG

Score

N/A

Malware Config

Signatures

Files

73e50095aaaf280a7929315d7071c4ecd00f2c5ce4f8461592fec6b478ce9b97
.dll windows x86

2dd1b4437d48a54a46b9e5427906bcf2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetLastError
WinExec
GetVersion
GetCurrentProcessId
GetCurrentThreadId
VirtualQuery
FlushInstructionCache
LoadLibraryA
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
InterlockedExchange
CompareStringA
Sleep
LoadResource
GetLastError
LocalFree
FreeLibrary
GetTickCount
QueryPerformanceCounter
ExitProcess
RaiseException
LocalAlloc
GetSystemTimeAsFileTime

winspool.drv

EnumPrintersA

coredll

?mfStrSplitPath@@YAXABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@PAV12@111@Z
?mfStrSaveStringToFile@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@_N2@Z
?mfConvertTToMBCS@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@I@Z
?mfStrEnsureTrailingBackslash@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV12@@Z
?mfFileGetMmjbAppPath@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@XZ
?mfStrToLower@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV12@@Z

eventmgr

?GetEventMgr@@YAPAVmcIEventMgr@@XZ
?AddParameter@mcEvent@@QAEXPBG0@Z
?AddParameter@mcEvent@@QAEXPBGH@Z
??0mcEvent@@QAE@W4eEventCategory@@PBG@Z
?InitEventMgr@@YAXXZ
??1mcEvent@@UAE@XZ
?UnInitEventMgr@@YAXXZ

objectmanager

?OMLeaveCriticalSection@@YAX_N@Z
?OMInit@@YAXXZ
?OMTerm@@YAXXZ
?OMReleaseObjectRef@@YA_NPAVmiInterface@@PA_N@Z
?OMEnterCriticalSection@@YAX_N@Z
?OMAddObjectRef@@YAXPAVmiInterface@@@Z
?OMCreateObject@@YA_NPBG0_NPAPAVmiInterface@@@Z

trackutils

?GetOutputEncoderName@mnTrackUtils@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV23@@Z

mmvcp70

??0?$_String_val@GV?$allocator@G@std@@@std@@QAE@ABV01@@Z
?_Nomemory@std@@YAXXZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@ABV01@@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??Hstd@@YA?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@ABV10@0@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBG@Z
??4?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
??_D?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEXXZ
?substr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV12@II@Z
?str@?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBE?AV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@2@XZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@H@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@PBG@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@G@Z
?setw@std@@YA?AU?$_Smanip@H@1@H@Z
??0?$basic_stringstream@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@H@Z
??Y?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAEAAV01@PBG@Z
??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@I@Z
?size@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEIXZ
??0?$_String_val@DV?$allocator@D@std@@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?endl@std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@1@AAV21@@Z
?str@?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??0?$basic_stringstream@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@H@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@_N@Z
??6?$basic_ostream@GU?$char_traits@G@std@@@std@@QAEAAV01@K@Z
??6std@@YAAAV?$basic_ostream@GU?$char_traits@G@std@@@0@AAV10@ABV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@0@@Z

mmvcr70

_adjust_fdiv
_initterm
??3@YAXPAX@Z
swprintf
wcsncpy
__CxxFrameHandler
__RTDynamicCast
_CxxThrowException
??_V@YAXPAX@Z
_wtoi
abs
memset
_wasctime
localtime
wcslen
free
malloc
_callnewh
??1type_info@@UAE@XZ
__security_error_handler
?terminate@@YAXXZ
__dllonexit
_onexit
_except_handler3

Exports

Exports

?GetStringFromID@DMMLocalizeDll@@QAEHIAAV?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@ABV23@@Z
?GetStringFromID@DMMLocalizeDll@@QAEHIPAPAG@Z
?MMJB_MultiByteToWideChar@DMMLocalizeDll@@QAEHPBDHPAGH@Z
?MMJB_WideCharToMultiByte@DMMLocalizeDll@@QAEHPBGHPADH@Z
?uCodePage@?1??MMJB_MultiByteToWideChar@DMMLocalizeDll@@QAEHPBDHPAGH@Z@4IA
?uCodePage@?1??MMJB_WideCharToMultiByte@DMMLocalizeDll@@QAEHPBGHPADH@Z@4IA
_RecCancel
_RecDone
_RecGetParam
_RecInit
_RecPause
_RecProgress
_RecSetParam
_RecStart
_RecStop

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dd1b4437d48a54a46b9e5427906bcf2

Headers

File Characteristics

Imports

kernel32

winspool.drv

coredll

eventmgr

objectmanager

trackutils

mmvcp70

mmvcr70

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 20KB - Virtual size: 16KB

.data Size: 64KB - Virtual size: 71KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 20KB - Virtual size: 16KB

.data
Size: 64KB - Virtual size: 71KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 8KB - Virtual size: 5KB