d529ef19eba974823fb80ed42ed61f699fdfc9a60748fa489ac35cbcee29e4bf

Sharing

Copy URL Twitter E-mail

General

Target

d529ef19eba974823fb80ed42ed61f699fdfc9a60748fa489ac35cbcee29e4bf
Size

350KB
MD5

a2473f0450cf70d8e883b988cf3e4133
SHA1

3e41d7a2b24520a7bed4b40cb967e873902e94d9
SHA256

d529ef19eba974823fb80ed42ed61f699fdfc9a60748fa489ac35cbcee29e4bf
SHA512

4b1b3a6260f3f4916ff987dbd8275019752210ab03a4fdf2432e7487cb17daa8d83f08424b19e7c2e3b892dee2ee68b1f3d97301da70aa92c535e2764d314c2b
SSDEEP

6144:zzUxwl0pLaRHMza0yzP0Vti2ki1nzcltVY6YRuUiCybYFBVl5Zx2:zznpzPeo2ki1zcliUC5l5Zx2

Score

N/A

Malware Config

Signatures

Files

d529ef19eba974823fb80ed42ed61f699fdfc9a60748fa489ac35cbcee29e4bf
.dll windows x86

ccfa66618b392739ed4e240907f9a73b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
GetStringTypeA
lstrcpyA
SetStdHandle
SetFilePointer
LoadLibraryA
CloseHandle
FlushFileBuffers
GetStringTypeW
GetProcAddress
VirtualAlloc
GetVersion
LCMapStringA
LCMapStringW
GetStdHandle
HeapAlloc
HeapFree
EnterCriticalSection
FatalAppExitA
LeaveCriticalSection
VirtualFree
InitializeCriticalSection
WriteFile
WideCharToMultiByte
HeapCreate
HeapDestroy
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetOEMCP
MultiByteToWideChar
FreeEnvironmentStringsA
GetModuleFileNameA
GetACP
GetCPInfo
GetFileType
DeleteCriticalSection
GetStartupInfoA
GetCommandLineA
lstrlenA
SetHandleCount
GlobalUnlock
GetSystemInfo
GlobalFree
GlobalReAlloc
LocalAlloc
LocalFree
MulDiv
GlobalAlloc
lstrcmpiA
lstrcpynA
GetVersionExA
lstrcatA
lstrcmpA
OpenFile
FreeLibrary
GlobalSize
HeapReAlloc
GetModuleHandleA
RtlUnwind
RaiseException
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
FindResourceA
FreeResource
LoadResource
LockResource
SetLastError
GetLastError
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
TerminateProcess
GetCurrentThreadId
GetCurrentProcess
GlobalLock
ReadFile

user32

wvsprintfA
GetFocus
GetActiveWindow
SendMessageA
GetPropA
GetDlgItem
RemovePropA
SetPropA
IsRectEmpty
OemToCharA
GetDC
ReleaseDC
SetRect
FillRect
wsprintfA
CreateDialogParamA
RegisterClassA
DestroyWindow
IsWindow
SetCursor
LoadCursorA
DispatchMessageA
LoadBitmapA
LoadIconA
CreateWindowExA
SetWindowWord
BeginPaint
FrameRect
InflateRect
GetWindowWord
MapWindowPoints
EndPaint
DefWindowProcA
InvalidateRect
UpdateWindow
UnregisterClassA
TranslateMessage
GetClientRect
GetWindowLongA
KillTimer
SetTimer
GetParent
IsZoomed
GetWindowRect
SetWindowPos
PeekMessageA
GetSystemMetrics
LoadStringA
MessageBoxA
SendDlgItemMessageA
OffsetRect

gdi32

Arc
TextOutA
Polyline
SetViewportExtEx
SetMapMode
PlayMetaFile
GetDeviceCaps
CloseMetaFile
CreateBitmap
SetWindowExtEx
RealizePalette
SetWindowOrgEx
CreateMetaFileA
GetEnhMetaFileHeader
SelectPalette
GetWinMetaFileBits
SetWinMetaFileBits
SetMetaFileBitsEx
SetEnhMetaFileBits
GetMetaFileBitsEx
SelectObject
BitBlt
CreateCompatibleDC
DeleteDC
GetStockObject
DeleteObject
SetBkColor
SetTextColor
GetTextExtentPointA
DeleteEnhMetaFile
GetEnhMetaFileBits
ExtTextOutA
SetBkMode
SetTextAlign
CloseEnhMetaFile
CreateEnhMetaFileA
DeleteMetaFile
CreatePen
LineTo
EnumMetaFile
CreateFontIndirectA
Polygon
CreateSolidBrush
Ellipse
PolyBezier
SetROP2
MoveToEx
CreateBrushIndirect
CreatePalette
PatBlt
StretchDIBits
GetObjectA
GetBitmapDimensionEx
GetDIBits
Rectangle
CreatePenIndirect
SaveDC
Escape
CreateDIBitmap
RestoreDC

winmm

mmioGetInfo
mmioRead
mmioOpenA
mmioClose
mmioWrite
mmioSeek
mmioFlush

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyA

Exports

Exports

ipBmp2DIB
ipCloseFile
ipDIB2Bmp
ipDIB2Jpg
ipDIB2Meta
ipDIB2Png
ipDIB2Tif
ipDavParamsAlloc
ipDavParamsFree
ipDavParamsStringDup
ipDavParamsStringFree
ipDxf2Meta
ipEmf2EnhMeta
ipEnhMeta2Emf
ipEnhMeta2Meta
ipEps2Meta
ipErrorMsg
ipErrorText
ipExportExt
ipExportInd
ipGetImportExtensions
ipGif2DIB
ipImportExt
ipImportInd
ipJpg2DIB
ipMeta2DIB
ipMeta2EnhMeta
ipMeta2Wmf
ipOpenFile
ipPcx2DIB
ipPng2DIB
ipRegister
ipTif2DIB
ipTypFromName
ipWmf2Meta

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccfa66618b392739ed4e240907f9a73b

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winmm

comdlg32

advapi32

Exports

Exports

Sections

.text Size: 265KB - Virtual size: 264KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 35KB - Virtual size: 50KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 265KB - Virtual size: 264KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 35KB - Virtual size: 50KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 12KB - Virtual size: 11KB