5e69b97acf4fe2b9d2778b45a4ae26b82b79a98088b6575380fea5cf813d7684

Sharing

Copy URL

Twitter E-mail

General

Target

5e69b97acf4fe2b9d2778b45a4ae26b82b79a98088b6575380fea5cf813d7684
Size

128KB
MD5

1a6e062d6bf56d209128ee47c40fbe2b
SHA1

9eab80ad73869bc27ec632a21ae82f027aab2d51
SHA256

5e69b97acf4fe2b9d2778b45a4ae26b82b79a98088b6575380fea5cf813d7684
SHA512

904383b5abd9037b215c34eb35f569133527218f7ca56fac0c6405c1296c89d5a411c7414c76a6c484d451103425bf187e1a276e87ef75092e82af1b441aae21
SSDEEP

3072:cHLwUoqYE0vTHowA+XaLyl6QZe5wAG3kLLbVLWlk+JZ:GwHE07HTPZee13kL3VLWll

Score

N/A

Malware Config

Signatures

Files

5e69b97acf4fe2b9d2778b45a4ae26b82b79a98088b6575380fea5cf813d7684
.dll windows x86

7ad24e79fee0d443e920ba82fe9b757a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasExesLengthA
CreateIoCompletionPort
EnumDateFormatsW
FileTimeToLocalFileTime
lstrcmpiA
CreateDirectoryA
WriteConsoleW
VerLanguageNameA
LoadModule
DeleteAtom
GetProcAddress
FoldStringW
GetDiskFreeSpaceA
WriteProfileSectionA
VirtualAlloc
lstrcatA
GetPrivateProfileStringA
PeekNamedPipe
GetConsoleInputExeNameW
OutputDebugStringW
GetDateFormatW
LCMapStringA
GetDriveTypeW
GetProfileSectionA
GetNamedPipeHandleStateW
AssignProcessToJobObject
GetVersion
VerLanguageNameW
LoadLibraryA
GetModuleHandleA
WaitForMultipleObjects
IsValidLocale
GetSystemTime
CmdBatNotification
GetHandleInformation

user32

RegisterClassA
SetWindowLongA
CharToOemBuffW
TrackMouseEvent
SetShellWindow
MessageBeep
DdeConnect
GetWindowWord
DestroyWindow
SystemParametersInfoW
DrawTextA
InvalidateRgn
SetFocus
IsDialogMessageW
LockWorkStation
AdjustWindowRectEx
GetFocus
GetKeyNameTextW
EnableScrollBar
GetClassInfoExW
DefDlgProcA
DrawStateW
DdeGetQualityOfService
CharPrevW
SetCaretPos
GetScrollRange
DispatchMessageA
GetComboBoxInfo
IsCharLowerA
EnableMenuItem
GetWindowLongA

gdi32

StrokeAndFillPath
EnableEUDC
AddFontMemResourceEx
ExtCreateRegion
CreateDIBPatternBrush
CreateRectRgn
CloseEnhMetaFile
RemoveFontResourceExA
CreateRectRgnIndirect
SetLayout
GetNearestPaletteIndex
SetMetaFileBitsEx
GdiDeleteSpoolFileHandle
SaveDC
AbortDoc
RestoreDC
CreateScalableFontResourceW
GetCharWidth32A
GetCharABCWidthsA
CopyEnhMetaFileA
SetMagicColors
GetWinMetaFileBits
ExcludeClipRect
SelectObject
GetBkMode
MaskBlt
GetDCOrgEx
CopyMetaFileA
GetColorSpace
GetTextCharsetInfo
GetGlyphIndicesW
FillPath

advapi32

CryptVerifySignatureW
TrusteeAccessToObjectW
ElfOpenBackupEventLogA
InitiateSystemShutdownA
CryptGetProvParam
AccessCheckAndAuditAlarmW
RegQueryValueA
QueryServiceObjectSecurity
QueryUsersOnEncryptedFile
EnumDependentServicesW
OpenBackupEventLogA
SetNamedSecurityInfoExA
LsaAddAccountRights
AddAuditAccessObjectAce
LsaNtStatusToWinError
ConvertSecurityDescriptorToAccessNamedA
LsaICLookupSids
BuildTrusteeWithNameW
ElfOpenBackupEventLogW
GetNamedSecurityInfoW
GetCurrentHwProfileW
OpenEventLogW
AddAccessDeniedAceEx
LookupPrivilegeDisplayNameA
CryptDestroyKey
AccessCheckByTypeResultList
GetSecurityDescriptorControl
SetServiceBits
BuildSecurityDescriptorW
GetSecurityInfoExW
SystemFunction013
OpenSCManagerW
RegNotifyChangeKeyValue
RegOverridePredefKey
BackupEventLogW
RegOpenKeyExW
LsaICLookupNames
CreateServiceW
SetEntriesInAccessListW

shell32

SHGetDesktopFolder
SHLoadInProc
SHUpdateRecycleBinIcon
SHBrowseForFolderW
ShellExecuteExA
DragFinish
FindExecutableW
SHGetFileInfoA
SHGetPathFromIDListA
ExtractAssociatedIconExW
SheGetDirA
DragQueryFileAorW
SHFormatDrive
StrRStrW
SHGetSettings
StrStrIW
SHAppBarMessage
StrChrA
ShellExecuteA
SHQueryRecycleBinW
ord179
StrCmpNIA
DragQueryPoint
DuplicateIcon
ExtractIconExW
DoEnvironmentSubstA
SHGetDataFromIDListA
StrNCmpW
SheChangeDirExW
SHInvokePrinterCommandA
FreeIconList
ExtractAssociatedIconExA
FindExecutableA
SHGetDiskFreeSpaceA
ord180
SHChangeNotify
CommandLineToArgvW
StrCmpNIW
RegenerateUserEnvironment

shlwapi

PathCombineA
PathParseIconLocationW

version

GetFileVersionInfoSizeW
VerQueryValueA
VerFindFileW
GetFileVersionInfoA
VerFindFileA
VerInstallFileA
GetFileVersionInfoSizeA
VerQueryValueW
GetFileVersionInfoW
VerInstallFileW

winspool.drv

DeleteFormA
SetPrinterA
CreatePrinterIC
AddPrintProvidorW

msvcrt

_mbsnbcmp
_mbsncmp
ceil
_wcsupr
fputc
fclose
_ismbcgraph
_ismbslead
raise
memset
feof
_wfdopen
_cgets
_adjust_fdiv
fsetpos
_endthreadex
fread
fprintf
getc
fwrite
_i64tow
atan
ftell
printf
fseek
wprintf
fputs
_ctype
fopen
_wsplitpath
_strlwr
_ismbcalpha
cos
__p__pctype
setlocale
sprintf
wcsncat
_unlink
_CIacos
fwprintf
strcmp
_wcsicoll
ferror
_ismbcprint
_wcsncoll

Exports

Exports

Cdrzhp
Cgqyvt
Dcmv
Fhrbg
Mqorxzvgic
Tzflx
Ubljph
Vsivlqp
Wuldxx
Yuzaodg

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7ad24e79fee0d443e920ba82fe9b757a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

shlwapi

version

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 49KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 56KB - Virtual size: 52KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 52KB - Virtual size: 49KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 56KB - Virtual size: 52KB

.reloc
Size: 8KB - Virtual size: 7KB