8fc4c8f219d8d4f238dfd4e95a82bd537a5882081114abfc932a80c754b8f464

Sharing

Copy URL Twitter E-mail

General

Target

8fc4c8f219d8d4f238dfd4e95a82bd537a5882081114abfc932a80c754b8f464
Size

222KB
MD5

06a89bab0e8355f70c1f26df217d3ab8
SHA1

9ce214e7afdc726d256e51125767e344c58577ff
SHA256

8fc4c8f219d8d4f238dfd4e95a82bd537a5882081114abfc932a80c754b8f464
SHA512

f6ad6c17f6931ea97cff3df20140a20557bc66eb5a31da460f3b34fad3b8c7d182363e9a51b742a86002dc9be05cfcd66a395d2f5603202ec0a84a28da34c333
SSDEEP

3072:fPSPsVtxsXU411i3+oT2cCL453CvBefOqS9ZTM7x7uE+AQgOGK42qtGWDYzpXttV:fPusVKjLi3+k2cCMlgkfko

Score

N/A

Malware Config

Signatures

Files

8fc4c8f219d8d4f238dfd4e95a82bd537a5882081114abfc932a80c754b8f464
.dll windows x86

550d8eaa6b803e91bb445d7a2cb77686

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmIsIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetOpenStatus
ImmNotifyIME
ImmGetContext
ImmReleaseContext
ImmGetCompositionStringW
ImmGetCompositionStringA
ImmSetCompositionFontW
ImmSetCompositionFontA

comctl32

ord17

kernel32

HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
Sleep
ExitProcess
InterlockedDecrement
GetLastError
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetProcessHeap
HeapAlloc
HeapFree
GetCommandLineA
GetCurrentThreadId
RtlUnwind
RaiseException
LCMapStringA
LCMapStringW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetErrorMode
GlobalFlags
lstrcpynA
GetSystemTime
lstrcmpA
GetTickCount
lstrcatA
lstrcpyA
IsBadReadPtr
IsBadHugeWritePtr
FindResourceW
LoadResource
LockResource
GetVersion
SetEndOfFile
WriteFile
SetFilePointer
IsBadHugeReadPtr
ReadFile
GlobalReAlloc
GlobalSize
LocalReAlloc
FreeLibrary
GetProcAddress
DeleteAtom
IsBadWritePtr
MulDiv
LocalLock
LocalUnlock
IsDBCSLeadByte
GetModuleFileNameW
GetModuleFileNameA
GetAtomNameW
GetAtomNameA
AddAtomW
AddAtomA
LoadLibraryW
LoadLibraryA
GetProfileStringW
GetProfileStringA
GetProfileIntW
GetProfileIntA
IsDBCSLeadByteEx
LocalAlloc
GetLocaleInfoA
IsValidCodePage
GetACP
GetVersionExA
GetCPInfo
GetStringTypeW
GetStringTypeA
LocalFree
lstrlenW
WideCharToMultiByte
GlobalLock
lstrlenA
GlobalAlloc
MultiByteToWideChar
GlobalUnlock
GlobalFree
FreeEnvironmentStringsA

gdi32

GetMapMode
CreateCompatibleBitmap
SetBkMode
SetPixel
SelectClipRgn
OffsetRgn
GetTextMetricsW
TranslateCharsetInfo
CreateDCA
CreateDCW
CreateICA
CreateICW
CreateFontIndirectA
CreateFontIndirectW
CreateEnhMetaFileA
CreateEnhMetaFileW
ExtTextOutA
GetTextCharset
ExtTextOutW
EnumFontFamiliesExA
EnumFontFamiliesExW
GetTextFaceA
GetTextFaceW
GetObjectType
GetObjectA
GetObjectW
LPtoDP
DPtoLP
ExcludeClipRect
GetDeviceCaps
SaveDC
SetWindowOrgEx
SetMapMode
SetViewportOrgEx
DeleteObject
GetStockObject
SelectObject
CreateSolidBrush
RestoreDC
SetViewportExtEx
SetWindowExtEx
EnumFontFamiliesW
SetBkColor
SetTextColor
GetTextExtentPoint32A
GetTextExtentPoint32W
LineTo
MoveToEx
CreatePen
CreatePatternBrush
CreateBitmap
CreateDIBitmap
DeleteDC
BitBlt
CreateCompatibleDC
PolyPolyline
Rectangle
GetCharWidthW
SetBrushOrgEx
UnrealizeObject
SetTextAlign
PatBlt
GetClipBox
GetCharWidth32W
GetWindowExtEx
GetViewportExtEx
GdiComment
GetWindowOrgEx
GetViewportOrgEx
CloseEnhMetaFile
IntersectClipRect
GetTextMetricsA

winspool.drv

DeviceCapabilitiesW

comdlg32

ChooseColorA
ChooseColorW
ChooseFontA
ReplaceTextW
ReplaceTextA
FindTextW
FindTextA

advapi32

RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

ole32

CoCreateInstance
CoInitialize
GetHGlobalFromStream
CreateStreamOnHGlobal
CoUninitialize

oleaut32

SysAllocStringLen
SysFreeString
VariantInit
SysAllocString

Exports

Exports

CreateTextControl
CreateTextControlW
DebugTXFormat
FM_EnumFunc
GetErrorCode
ListCharDlg
ListParaDlg
ObjAttrTab1Dlg
ObjAttrTab2Dlg
ObjAttrTab3Dlg
ObjAttrTab4Dlg
PageDataCallBack
ParagraphTab1Dlg
ParagraphTab2Dlg
SectTab1Dlg
SectTab2Dlg
SelectFontDlg
SetDefaultDialogFont
TXGetErrorCode
TXGetVersion
TXInitialize
TXRegisterClass
TX_KBHookFunc
TX_WndProc
TabbedDlg
TblAttrTab1Dlg
TblAttrTab2Dlg
_EnumFontFamExProcU@16
_TD_Proc@16
_WndProcU@16

Sections

.text
Size: 88KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 1024B - Virtual size: 789B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

550d8eaa6b803e91bb445d7a2cb77686

Headers

File Characteristics

Imports

imm32

comctl32

kernel32

gdi32

winspool.drv

comdlg32

advapi32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 88KB - Virtual size: 160KB

.bss Size: - Virtual size: 192KB

.pdata Size: 4KB - Virtual size: 4KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 4KB

.tls Size: 4KB - Virtual size: 4KB

.edata Size: 1024B - Virtual size: 789B

.idata Size: 5KB - Virtual size: 5KB

.rsrc Size: 106KB - Virtual size: 105KB

.reloc Size: 4KB - Virtual size: 260B

.text
Size: 88KB - Virtual size: 160KB

.bss
Size: - Virtual size: 192KB

.pdata
Size: 4KB - Virtual size: 4KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 4KB

.tls
Size: 4KB - Virtual size: 4KB

.edata
Size: 1024B - Virtual size: 789B

.idata
Size: 5KB - Virtual size: 5KB

.rsrc
Size: 106KB - Virtual size: 105KB

.reloc
Size: 4KB - Virtual size: 260B