74aa5b124270efd7637758fac7fc7517fb274fc24a3b75e32ff28373f505cb52

Sharing

Copy URL Twitter E-mail

General

Target

74aa5b124270efd7637758fac7fc7517fb274fc24a3b75e32ff28373f505cb52
Size

124KB
MD5

600f39fcf9333eff45d96831a4ebda87
SHA1

223ee4fde9a7f1efa36f8b6b72710f57a1d66669
SHA256

74aa5b124270efd7637758fac7fc7517fb274fc24a3b75e32ff28373f505cb52
SHA512

dc46e42d5c1cb877354e4028a3450e070dc6eee3258a0e86dcaf901ab17b0994b9cb19fd88f29c5d8d8bf9ae661bcca6fe94de7f0f8cd1aa4af2aa1101ae109a
SSDEEP

3072:3UoG68jf+jl59mQLfaXQBg74wzQhsG2jG2d/DVy0qhpvJ:3Br8j2jzzLFg0wJJVZDVy0qhpB

Score

N/A

Malware Config

Signatures

Files

74aa5b124270efd7637758fac7fc7517fb274fc24a3b75e32ff28373f505cb52
.dll windows x86

66824d03bb1e909ad8a07c640480dde6

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
HeapWalk
WriteConsoleOutputCharacterW
GetProfileStringA
GetLongPathNameA
FreeLibraryAndExitThread
GetAtomNameA
GetEnvironmentVariableA
QueryDosDeviceW
GenerateConsoleCtrlEvent
SleepEx
WaitCommEvent
LoadLibraryA
ClearCommError
SwitchToFiber
FindNextVolumeMountPointW
TerminateProcess
RegisterWaitForInputIdle
EraseTape
HeapValidate
GetProfileIntW
ExpungeConsoleCommandHistoryA
SetConsoleMaximumWindowSize
GetFileInformationByHandle
EnumResourceNamesA
LockFile
SetCommConfig
SetCalendarInfoW
GetCurrentThread
SetWaitableTimer
IsValidLocale
SetFilePointer
GetTapeStatus
VerLanguageNameA
FileTimeToDosDateTime
EnumCalendarInfoA
SetThreadExecutionState
EnumResourceLanguagesA
OpenEventA
GetLastError
SetThreadLocale
GetVolumeInformationW
GetSystemTime
HeapFree
CancelWaitableTimer
SystemTimeToFileTime
GetPrivateProfileSectionA
OpenFileMappingA
GlobalMemoryStatus
GetCurrencyFormatA
SystemTimeToTzSpecificLocalTime
GetConsoleAliasExesLengthA
FreeLibrary
WriteFile
LockResource
ChangeTimerQueueTimer
SetVDMCurrentDirectories
AreFileApisANSI
WaitNamedPipeW
GetPrivateProfileStructW
SetComputerNameW
GetCPInfoExW
CreateHardLinkW
FindAtomW
GetConsoleKeyboardLayoutNameW
EnumCalendarInfoW
GlobalReAlloc
SetUnhandledExceptionFilter
AddAtomA
DeleteFiber
GetProcAddress
GetHandleInformation
VirtualAlloc
GetVersion
GetModuleHandleA
EnumDateFormatsExA

gdi32

GetICMProfileW
GetOutlineTextMetricsA
CombineTransform
GetTextExtentExPointA
GetStockObject
GetEnhMetaFileHeader
SetBrushOrgEx
AnimatePalette
GdiPlayPageEMF
WidenPath
SelectObject
GetDIBits
SetColorAdjustment
GdiDeleteSpoolFileHandle
SetViewportExtEx
StrokePath
CreateCompatibleBitmap
PolyTextOutA
GetRasterizerCaps
CreateDIBSection
DeleteDC
GetFontData
TextOutW
GetColorAdjustment
GetTextExtentExPointI
SetPixelFormat
DescribePixelFormat
GetEnhMetaFileDescriptionW
GetCharABCWidthsI
GdiGetPageHandle
CreatePatternBrush
CreateFontIndirectW
CreateCompatibleDC
SetEnhMetaFileBits
GdiPlayEMF
GetNearestColor
SetRectRgn
GetClipRgn
OffsetRgn
GetBkColor
FlattenPath
GetObjectA
CombineRgn
UpdateICMRegKeyA
SetBkColor
AbortDoc
GetObjectType
ColorMatchToTarget

opengl32

glVertex4i
glColor3i
glPolygonMode
glColor3d
glPopName
glGetLightiv
wglUseFontOutlinesA
glRectiv
glPointSize
glTranslatef
glRasterPos2i
glTexCoord1fv
wglCreateContext
glTexCoord2i
glVertexPointer
glDebugEntry
wglDeleteContext
glNormal3fv
glAccum
glEndList
glTexImage1D
glColor4uiv
glColor3uiv
glTexGenf
glTexSubImage2D
glDrawArrays
wglMakeCurrent
glTexEnviv
glClear
glCopyTexImage2D
GlmfPlayGlsRecord
glRasterPos4iv
glGetBooleanv
glGetTexParameteriv

version

VerFindFileA
VerFindFileW
VerInstallFileW

winspool.drv

ord210
DevQueryPrint
StartDocPrinterA
SpoolerDevQueryPrintW
ord209
PrinterMessageBoxA
ord103
ord100
AddPrinterDriverW
DEVICECAPABILITIES
StartDocDlgA
QueryColorProfile
AddPortExW
SetPrinterA
CreatePrinterIC
SetPrinterDataA
AddPrinterConnectionW
DevQueryPrintEx
EndPagePrinter
ResetPrinterA
AddPrintProvidorA
DeletePortA
DocumentPropertySheets
EnumPortsW
AddMonitorA
EXTDEVICEMODE
DeletePrinterDataA
QuerySpoolMode
ExtDeviceMode
EnumPortsA
DeviceCapabilitiesA
AbortPrinter
DocumentPropertiesA
ord213
DeleteMonitorW
OpenPrinterA
AddPrinterW
EnumPrinterDriversA
DeletePrintProcessorA
ScheduleJob
SetFormW
SetPrinterDataExA
AddPrinterConnectionA
FindFirstPrinterChangeNotification
EnumPrintProcessorsA

msvcrt

_mbsnbset
iswalpha
_mbsnicoll
fclose
_i64toa
fwrite
_safe_fdivr
_atoi64
fprintf
feof
_dstbias
fopen
ferror
fputs
_wfopen
ftell
_itoa
getwchar
fputc
_mbcasemap
sprintf
_unlink
fmod
fwprintf
fsetpos
printf
_setmbcp
_errno
__winitenv
__p__fmode
fread
_ui64tow
memset
fseek
_mbsrchr
_mbsinc
_outpd

Exports

Exports

Etnmabg
Fpeqy
Mmxhu
Mqkcemw
Ptwh
Tuwmz
Ulju
Vcgbd
Wyeghgu
Xmjbqifwai

Sections

.text
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

66824d03bb1e909ad8a07c640480dde6

Headers

File Characteristics

Imports

kernel32

gdi32

opengl32

version

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 52KB - Virtual size: 51KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 52KB - Virtual size: 49KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 52KB - Virtual size: 51KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 52KB - Virtual size: 49KB

.reloc
Size: 8KB - Virtual size: 7KB