08cc095113e1f5015425eadb5601915ee1852cdb5e99442090997f41d4cd8290

Sharing

Copy URL Twitter E-mail

General

Target

08cc095113e1f5015425eadb5601915ee1852cdb5e99442090997f41d4cd8290
Size

875KB
MD5

dc0a4a0b1357002e7c4381b7c3d6aec0
SHA1

7542c3123c408e508386d499c02185f9de87e462
SHA256

08cc095113e1f5015425eadb5601915ee1852cdb5e99442090997f41d4cd8290
SHA512

b308c77ba059529ab0e554c06a0b1533d8848dc7001a17f7e4c1acc24b3088d9f7e93d1e2adf48e1025c49d003e0649d99b734ae531bc3371018ed20e03adfd8
SSDEEP

12288:BCFfLeUFyCgBQeNfj5tD978jJ1tGLRZGO70+io0j05XuTSjJ:BC1iqUQ8R8vELXGG0+i/0BuT

Score

N/A

Malware Config

Signatures

Files

08cc095113e1f5015425eadb5601915ee1852cdb5e99442090997f41d4cd8290
.dll windows x86

e2f6ba9b8743967f8f89fc32c43b5266

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

iswctype
isspace
_adjust_fdiv
_amsg_exit
_initterm
free
malloc
_XcptFilter
strchr
_vsnprintf
wcschr
_wcsicmp
_errno
floor
ceil
wcstod
iswspace
_purecall
vfprintf
towupper
wcsstr
_wtol
_strnicmp
wcsncmp
strncmp
??3@YAXPAX@Z
??2@YAPAXI@Z
_wtoi
_stricmp
_wcsnicmp
wcsrchr
_itow
atoi
memmove
_vsnwprintf
memcpy
memset
qsort
_ultoa
strrchr
fprintf

user32

DialogBoxParamW
MessageBeep
MessageBoxW
LoadStringW
GetDlgItemTextW
SendDlgItemMessageW
GetWindowLongW
SetFocus
CheckDlgButton
WinHelpW
EnableWindow
EndDialog
SetWindowLongW
GetAppCompatFlags2
SetDlgItemTextW
GetDlgItem
ShowWindow
CheckRadioButton
GetGUIThreadInfo
SendMessageW

ole32

CoInitializeEx
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize

kernel32

MulDiv
HeapCreate
HeapDestroy
SetLastError
LocalAlloc
HeapAlloc
CloseHandle
WideCharToMultiByte
GetLastError
SetErrorMode
UnmapViewOfFile
GetFileSize
CreateFileMappingW
MapViewOfFile
GetLocaleInfoW
CompareFileTime
GetSystemDirectoryW
LoadLibraryW
VerSetConditionMask
VerifyVersionInfoW
GetFileAttributesExW
GetFullPathNameW
VirtualFree
GetCPInfo
GetFileTime
FindResourceW
LoadResource
LockResource
RaiseException
GetUserDefaultUILanguage
GetACP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetVersion
GetSystemInfo
GetModuleHandleW
VirtualAlloc
LoadLibraryExW
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
HeapFree
GetProcAddress
FreeLibrary
CreateDirectoryW
MoveFileExW
CreateFileW
GetTempFileNameW
ReadFile
WriteFile
DeleteFileW
LocalFree

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

winspool.drv

EnumFormsW
GetPrinterDataW
GetPrinterDriverW
GetPrinterW
GetFormW
DeleteFormW
AddFormW
SetPrinterW
OpenPrinterW
ClosePrinter
SetPrinterDataW
DeletePrinterDataW
DeviceCapabilitiesW

gdi32

DeleteDC
EnumFontFamiliesW
GetDeviceCaps
CreateDCW
ExtEscape
CreateICW

oleaut32

SysFreeString
VariantChangeType
SysAllocStringLen
SysAllocString
VariantInit
VariantClear
SysStringLen

Exports

Exports

DevQueryPrintEx
DllCanUnloadNow
DllGetClassObject
DllMain
DrvConvertDevMode
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentPropertySheets
DrvDriverEvent
DrvPopulateFilterServices
DrvPrinterEvent
DrvQueryColorProfile
DrvQueryJobAttributes
DrvSplDeviceCaps
DrvUpgradePrinter

Sections

.text
Size: 404KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e2f6ba9b8743967f8f89fc32c43b5266

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

user32

ole32

kernel32

version

winspool.drv

gdi32

oleaut32

Exports

Exports

Sections

.text Size: 404KB - Virtual size: 404KB

.data Size: 176KB - Virtual size: 176KB

.rsrc Size: 280KB - Virtual size: 280KB

.reloc Size: 14KB - Virtual size: 13KB

.text
Size: 404KB - Virtual size: 404KB

.data
Size: 176KB - Virtual size: 176KB

.rsrc
Size: 280KB - Virtual size: 280KB

.reloc
Size: 14KB - Virtual size: 13KB