35d9434abcb8d8d4c9926be8eba5518d95e9cae6d68981e6fb7d40fd27ddeae4

Sharing

Copy URL Twitter E-mail

General

Target

35d9434abcb8d8d4c9926be8eba5518d95e9cae6d68981e6fb7d40fd27ddeae4
Size

120KB
MD5

921a5d466752c1c84b05c0acf10f8750
SHA1

2b885d2f95e533ff10af2b9f5e4a5990357d5364
SHA256

35d9434abcb8d8d4c9926be8eba5518d95e9cae6d68981e6fb7d40fd27ddeae4
SHA512

cc6f76521ce31bb1c72c970b0057f5978f7be94ab2b919b49fdc3e7f3fc65f3ed183ea4d69dddab58973841309148b7736a83fcf892c2c2aaf23ac73d4b8c916
SSDEEP

3072:eSMMkngM1dw/oy5DmPyH9+KR10/ilH+IfQkiAZHZOY3Y/:e7MzMwV5DmKEnRGQkic0Y3K

Score

N/A

Malware Config

Signatures

Files

35d9434abcb8d8d4c9926be8eba5518d95e9cae6d68981e6fb7d40fd27ddeae4
.dll windows x86

1e8e698040b58bf694d1925ea49ef87f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

PurgeComm
PeekConsoleInputA
UnlockFile
CreateJobObjectW
OutputDebugStringA
FindFirstChangeNotificationW
CreateEventW
GetSystemTime
SetComputerNameA
GetUserDefaultLCID
IsValidLocale
SetConsoleMaximumWindowSize
VerLanguageNameW
VirtualFreeEx
lstrcpyW
FreeLibrary
GetHandleInformation
GetCommMask
CreateMailslotW
EnumResourceTypesA
lstrcatA
GetCPInfoExW
BuildCommDCBA
GlobalMemoryStatus
LocalAlloc
FindNextVolumeA
AddConsoleAliasA
GetModuleHandleA
SetMailslotInfo
ReleaseSemaphore
Process32NextW
ChangeTimerQueueTimer
GetProfileIntW
SetEvent
SearchPathA
GetCurrentProcess
GetNumberOfConsoleMouseButtons
EscapeCommFunction
FormatMessageA
ReadFile
LoadLibraryA
WaitForSingleObject
GetLocalTime
GetProcAddress
CancelWaitableTimer
WriteProfileSectionA
WriteProfileStringA
SetConsoleTitleA
LocalUnlock
VirtualAlloc
GetVersion

user32

GetDialogBaseUnits
CharNextExA
SetProcessDefaultLayout
MapDialogRect
SetWindowsHookExA
OemToCharBuffA
SendNotifyMessageA
IMPGetIMEA
GetMenuBarInfo
SetMenuItemInfoW
SetCursorPos
CharLowerBuffA
LoadKeyboardLayoutA
ReleaseCapture
DdeQueryStringW
ExitWindowsEx
SetSysColors
MenuItemFromPoint
InSendMessage
CloseDesktop
MsgWaitForMultipleObjectsEx
LoadImageW
InSendMessageEx
PeekMessageA
ReleaseDC

gdi32

ExtCreatePen
CombineRgn
CreateDIBPatternBrush
EnumFontFamiliesW
GetGlyphIndicesW
EnumFontsA
DeleteDC
SetStretchBltMode
SelectObject
GetWindowOrgEx
GetLogColorSpaceW
GetNearestPaletteIndex
GetTextExtentPoint32A
PathToRegion
RemoveFontResourceExW
PolyPolyline
GetCharWidth32A
CreateRectRgnIndirect
CreateCompatibleBitmap
SetICMProfileW
GetROP2
FloodFill
GetGlyphOutlineW
CreateCompatibleDC
ExtTextOutA
Pie
SetICMProfileA
CreateDCW
GdiGetDevmodeForPage
SetPixelFormat
SetPolyFillMode
GetWorldTransform
AbortPath
LPtoDP
DPtoLP
GetLayout
CloseMetaFile
AddFontResourceExW
GetTextAlign
GetTextExtentPointI
GetRelAbs
DeleteEnhMetaFile
GetObjectA
SetBkColor
LineTo
CreatePatternBrush
GetStockObject
GetArcDirection
OffsetWindowOrgEx
RemoveFontMemResourceEx

opengl32

glTexCoord3d
glTexImage2D
wglCreateContext
glColor3sv
wglMakeCurrent
glEdgeFlag
glIndexi
wglDeleteContext
glColor4us

shell32

StrCmpNIA
StrRChrW

shlwapi

SHDeleteKeyW
SHQueryInfoKeyW
StrToIntW
PathIsSameRootA
PathFindExtensionW
PathGetArgsA
PathIsContentTypeA
SHDeleteValueA
PathBuildRootW
PathRemoveExtensionA
PathFindNextComponentW
StrCSpnIW
SHDeleteKeyA
PathStripPathA
UrlGetLocationW
StrToIntA
StrCSpnA
SHEnumValueW
PathRemoveExtensionW
PathRemoveArgsA
StrDupW
StrPBrkW
PathCreateFromUrlA
PathAddBackslashW
SHQueryInfoKeyA
PathRenameExtensionW
PathSkipRootW
SHEnumKeyExA
SHRegQueryInfoUSKeyW
PathIsFileSpecA
UrlCombineA
SHEnumValueA
PathRemoveFileSpecA
StrNCatW
PathFindExtensionA
PathIsSameRootW
PathMakeSystemFolderA
StrCpyW

version

VerInstallFileW

winspool.drv

ConvertUnicodeDevModeToAnsiDevmode
OpenPrinterA
SetJobW
SetPrinterDataA
DocumentPropertiesA

msvcrt

_mbsspnp
_mbsnextc
_mbccpy
_tempnam
feof
fwrite
ferror
_unlink
_findfirst
_getdllprocaddr
fsetpos
_stricmp
fread
_fpclass
ungetwc
_kbhit
isdigit
fprintf
fopen
fclose
_heapadd
_mbsstr
fseek
_gcvt
printf
__wargv
iswlower
strspn
sprintf
fwprintf
ftell
fputs
_wstat
_sys_nerr
memset
fputc

Exports

Exports

Hdmmj
Lessziz
Llnmsk
Mgopfdrj
Naaakc
Neimhusjun
Pxbrrc
Qyzny
Yzththl

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1e8e698040b58bf694d1925ea49ef87f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

opengl32

shell32

shlwapi

version

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 52KB - Virtual size: 49KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 52KB - Virtual size: 49KB

.reloc
Size: 8KB - Virtual size: 6KB