ced1cfa65f1e020c1a0a6e221839900d1485f569e9396fd74343b60bfbf5ebda

Sharing

Copy URL Twitter E-mail

General

Target

ced1cfa65f1e020c1a0a6e221839900d1485f569e9396fd74343b60bfbf5ebda
Size

120KB
MD5

c2328bcbfd496251807fbbea84813be2
SHA1

9da788be89552017841bd75e782802de36b1a466
SHA256

ced1cfa65f1e020c1a0a6e221839900d1485f569e9396fd74343b60bfbf5ebda
SHA512

334139f3bea2f9bbc66523faf117966ad3408c805529a6674de5b08a1543bb3798394a174800ef2c60a3ca515dd4103021e7280faec7e71e75881e62d9f4959a
SSDEEP

3072:WFVppmECZvoHgwrZMscOSGV8v/rXqi8Nxgr8g+ICEaJm:ACdoxlMsc08H2Xgr8g/7a

Score

N/A

Malware Config

Signatures

Files

ced1cfa65f1e020c1a0a6e221839900d1485f569e9396fd74343b60bfbf5ebda
.dll windows x86

6fe5dfff241bd92f79dc540378de2137

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetCommBreak
PostQueuedCompletionStatus
ReadDirectoryChangesW
UnlockFileEx
GetStdHandle
GetDiskFreeSpaceExW
GetAtomNameA
GetConsoleInputExeNameA
UTUnRegister
OpenConsoleW
GetFileAttributesExW
FindNextFileW
FreeLibrary
Process32First
FindResourceA
InterlockedCompareExchange
LoadLibraryExW
WriteConsoleOutputA
GetHandleInformation
GetPrivateProfileSectionNamesW
SetConsoleCP
GetEnvironmentVariableA
GetConsoleKeyboardLayoutNameW
SetTimerQueueTimer
EnumDateFormatsA
ReleaseMutex
OpenJobObjectA
DeleteFiber
CreateFileMappingA
GetPrivateProfileIntW
CreateEventA
HeapAlloc
WriteConsoleInputA
GetModuleFileNameA
GetCommConfig
UpdateResourceW
ExitVDM
CloseHandle
DeleteVolumeMountPointA
ResumeThread
LocalSize
GetConsoleDisplayMode
ExpungeConsoleCommandHistoryW
GlobalWire
DeleteCriticalSection
WideCharToMultiByte
EnumDateFormatsExA
SetThreadLocale
WriteTapemark
EnumTimeFormatsA
GetComputerNameA
GetSystemDefaultLCID
GetModuleHandleA
Thread32First
WriteFileGather
EnumSystemLocalesA
GetTimeFormatA
SearchPathA
RegisterWowBaseHandlers
IsBadReadPtr
GetConsoleAliasExesW
GetLocalTime
MulDiv
GetProfileIntW
FlushViewOfFile
GetProcessHeaps
_lwrite
GetConsoleCommandHistoryW
MapViewOfFile
BuildCommDCBAndTimeoutsA
FindFirstChangeNotificationW
EnumDateFormatsW
VerLanguageNameA
FindNextVolumeA
GetSystemInfo
CreateMutexW
GetConsoleAliasExesA
VDMOperationStarted
GetUserDefaultLangID
DefineDosDeviceA
SetPriorityClass
GetVersion
SetSystemPowerState
ReadConsoleInputW
IsProcessorFeaturePresent
VerLanguageNameW
FindFirstVolumeW
GetFileAttributesExA
IsValidLocale
GetProcAddress
VirtualAlloc
LoadLibraryA
GetSystemTime

user32

LoadKeyboardLayoutA
CreateCursor
EndMenu
GetWindowDC
CreateIcon
GetUpdateRect
GetKeyboardType
GetSystemMenu
OpenDesktopW
EndDeferWindowPos
ShowWindowAsync
ExitWindowsEx
CopyRect
IsClipboardFormatAvailable
GetShellWindow
MessageBoxW
LoadCursorA
SetSystemCursor
DdeDisconnect
ShowCursor
SetClassWord
BringWindowToTop
AllowSetForegroundWindow
DlgDirSelectComboBoxExW
GetDlgItemTextW
IMPGetIMEA
GetScrollPos
SetWindowsHookA
DestroyIcon
SubtractRect
SetRect
DrawStateA
GetCursor
SetTimer
SetDeskWallpaper
GetClientRect
SendMessageA
SendNotifyMessageW
DeleteMenu
GetWindowInfo
GetSystemMetrics
SetWindowWord
MessageBoxA
CreatePopupMenu
DrawFrame
GetDC
UnregisterHotKey
MapVirtualKeyExA
PaintDesktop
GetKeyboardLayoutList
DdeConnectList
DdeCreateStringHandleW
GetLastActivePopup
CreateWindowExW
SetMenuInfo
CreateIconFromResource
GetClassInfoExA
CharPrevExA
SetCaretPos
CharToOemBuffW
ReleaseCapture
SetCursorPos
GetListBoxInfo
DispatchMessageW
CallWindowProcW
EnumChildWindows
TrackMouseEvent
DrawCaption
GetTopWindow
MonitorFromPoint

gdi32

DeleteDC
GetNearestColor
SetROP2
CreatePolyPolygonRgn
AddFontResourceW
GdiGetSpoolFileHandle
RemoveFontResourceA
CloseMetaFile
GetCharWidthA
DPtoLP
CopyEnhMetaFileW
CombineRgn
GetEnhMetaFileHeader
CreateRoundRectRgn
GetEnhMetaFileDescriptionA
CreateCompatibleBitmap
EndPath
EnumFontFamiliesExW
GetGlyphOutlineA
SetFontEnumeration
GetICMProfileW
SetPixelFormat
ScaleWindowExtEx
EndDoc
GetTextCharacterExtra
CreateBitmap
CreateMetaFileW
GetGlyphIndicesA
CopyMetaFileW
CreateDIBSection
Pie
GetEnhMetaFileA
GetTextExtentExPointA
RectInRegion
CreateEllipticRgn
SetPixelV
DeleteEnhMetaFile
GetLogColorSpaceW
AddFontResourceA
SaveDC
GetTextExtentPoint32W
CreateBitmapIndirect
FillRgn
GetDCPenColor
GetStockObject
CreateCompatibleDC
GetObjectType
GdiSetBatchLimit
GetRgnBox
CreateEnhMetaFileW
CreateFontIndirectW
DeviceCapabilitiesExA
UpdateICMRegKeyW
GetObjectA
SelectObject
GetTextFaceA
GetDIBits

version

VerFindFileA
GetFileVersionInfoA
GetFileVersionInfoSizeW
VerInstallFileW
VerInstallFileA
VerQueryValueA
VerQueryValueW
GetFileVersionInfoW
VerFindFileW

winmm

sndPlaySoundW
joyGetDevCapsA
mmTaskYield
waveInGetID
timeGetTime
midiOutLongMsg
waveInGetErrorTextA
timeBeginPeriod
mciGetCreatorTask
midiDisconnect
timeGetSystemTime
wod32Message
waveOutPrepareHeader
mciGetDriverData
midiInGetDevCapsA
mmioOpenW
waveInStart
CloseDriver
mixerGetLineInfoW
mixerGetLineControlsA
PlaySoundA
mmioCreateChunk
midiInPrepareHeader
mmioClose
waveOutClose
mmioStringToFOURCCW
mixerClose
mciGetYieldProc
midiInStart
mmioRenameW
waveInPrepareHeader
mixerGetControlDetailsW
auxGetNumDevs
mod32Message
mmioOpenA
midiInAddBuffer
timeKillEvent
mixerGetControlDetailsA
waveInGetPosition
waveInUnprepareHeader
joyConfigChanged
midiOutUnprepareHeader
mixerGetID
midiInStop
SendDriverMessage
waveOutGetDevCapsW
mmioSetBuffer
mciGetDeviceIDW
joyGetPos
waveOutBreakLoop
mciSetDriverData
WOW32DriverCallback
waveOutWrite
aux32Message
waveInMessage
GetDriverModuleHandle
mciGetDeviceIDA
waveInClose
midiStreamOpen
mmGetCurrentTask
midiOutGetID
midiInMessage
waveOutPause
waveInStop
DriverCallback
mciDriverNotify
auxSetVolume
waveOutSetVolume
mciGetErrorStringW
mixerOpen
midiInGetErrorTextW
midiConnect
midiOutSetVolume
midiOutGetDevCapsA
joyGetPosEx
waveOutGetNumDevs
midiInReset
waveOutSetPitch
auxGetDevCapsW
mmioSeek
NotifyCallbackData
midiOutGetVolume
mmTaskCreate
mciSendCommandA
midiOutPrepareHeader
WOWAppExit
midiInGetID
midiStreamPosition
DrvGetModuleHandle
midiOutOpen
midiOutGetNumDevs
waveOutGetVolume
waveOutGetPosition
mid32Message
joySetCapture
midiOutGetErrorTextW
waveOutGetErrorTextW
auxGetVolume
waveInGetNumDevs
mmDrvInstall
joy32Message
midiInGetErrorTextA

msvcrt

_timezone
asctime
_kbhit
_mbscat
ferror
_ismbcdigit
_getdrive
_tell
_wexecl
asin
__iscsymf
scanf
div
_chsize
_strset
iswcntrl
_open_osfhandle
_execle
_wutime
fflush
_wcsrev
strftime
_ismbstrail
_wexecv
_wstrdate
_wfdopen
fclose
__setusermatherr
swprintf
_adj_fdiv_m16i
_mbsstr
ftell
_fdopen
_wsearchenv
_c_exit
memcpy
_ismbcalnum
_pctype
fopen
_flsbuf
_lsearch
iswprint
sprintf
__lconv_init
_atoldbl
_wspawnlp
_cprintf
__p___initenv
_wcsdup
wcscmp
_atodbl
_wctime
printf
_getws
feof
strtod
_mbsninc
_strdup
_wfreopen
_getdcwd
_msize
_wputenv
_wunlink
strcmp
fprintf
_mbscmp
_mbsnbset
_mbspbrk
_mbsnbicmp
_mbslen
_unlink
_ltoa
fwrite
_fileno
_wfindfirsti64
fwprintf
toupper
strrchr
fputs
_ismbckata
fsetpos
_ismbbkprint
_set_error_mode
_popen
_wfopen
_wasctime
memset
_mbcasemap
_wtempnam
fseek
fputc
frexp
_mbsnbcpy
_fstat
_putws
fread
_heapadd
_mbsnbicoll
_spawnle
_finite
_strerror
_mbcjistojms
strtok
_statusfp
_getmbcp
_osver
_heapwalk
_getw
_adj_fdiv_m32

Exports

Exports

Eibuu
Pptuufuhz
Sscdt
Wxbmekf
Yfkcvi

Sections

.text
Size: 44KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fe5dfff241bd92f79dc540378de2137

Headers

File Characteristics

Imports

kernel32

user32

gdi32

version

winmm

msvcrt

Exports

Exports

Sections

.text Size: 44KB - Virtual size: 42KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 52KB - Virtual size: 49KB

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 44KB - Virtual size: 42KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 52KB - Virtual size: 49KB

.reloc
Size: 8KB - Virtual size: 5KB