d64f0ae2b01e0b8f72c7fe3c7e009159d97fabd85e81adc2172a2e58766e6922

Sharing

Copy URL Twitter E-mail

General

Target

d64f0ae2b01e0b8f72c7fe3c7e009159d97fabd85e81adc2172a2e58766e6922
Size

615KB
MD5

8d9921f4140df77bf0b1385f8d512ff0
SHA1

f73fc7dded611e35c81df3a59df7c6c40788cab5
SHA256

d64f0ae2b01e0b8f72c7fe3c7e009159d97fabd85e81adc2172a2e58766e6922
SHA512

a97b93366550b6a632842456847b5a05e3efb7a08c6c97671c2de2fba2ed7040f78b2f7ea8a9320ec8a70c65b2eecfbd76d02895d0bf287d3510fe275b0a19ee
SSDEEP

6144:GBGC01goN/nesR/0TQ5riHoKNmIwA/SpXcGhJvrBX7RbdyyIx0hL3xW:GBel/eOcTtAIZoxjJJdCx

Score

N/A

Malware Config

Signatures

Files

d64f0ae2b01e0b8f72c7fe3c7e009159d97fabd85e81adc2172a2e58766e6922
.dll windows x86

70e54d3ebf4cd6bab6d0792b409338db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

free
??3@YAXPAX@Z
_vsnwprintf
_adjust_fdiv
_initterm
_except_handler3
iswxdigit
wcsncpy
iswspace
_wtoi
swscanf
qsort
malloc
_purecall
wcsrchr
memmove
wcscmp
wcspbrk
wcstoul
_wcsnicmp
wcsstr
wcslen
_mbstrlen
_wcsicmp
wcschr
??2@YAPAXI@Z

ntdll

NtQueryInformationProcess

kernel32

GetFullPathNameW
GetSystemWindowsDirectoryW
LoadLibraryExW
GetCurrentDirectoryW
GetTimeZoneInformation
GetLocaleInfoW
GetModuleFileNameW
RaiseException
DebugBreak
IsDebuggerPresent
FreeLibraryAndExitThread
CreateThread
GetLocalTime
CreateProcessW
GetStartupInfoW
WaitForMultipleObjects
MultiByteToWideChar
LocalFree
FormatMessageW
LocalAlloc
GetSystemDirectoryW
GetProfileStringW
GetProfileIntW
WriteFile
CreateFileW
ReadFile
GetFileSize
ExitThread
GlobalUnlock
FreeResource
SizeofResource
LockResource
DuplicateHandle
GetCurrentProcess
EnumUILanguagesW
GetUserDefaultUILanguage
GlobalLock
TlsFree
TlsGetValue
TlsSetValue
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetUserDefaultLCID
lstrcpynW
Sleep
GetComputerNameW
GetSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeFormatW
GetDateFormatW
FindResourceW
LoadResource
GetFileAttributesW
MulDiv
lstrcmpiW
GetVersionExW
GetSystemInfo
GlobalAlloc
GlobalFree
GetLastError
SetLastError
SetEvent
WaitForSingleObject
ResetEvent
FreeLibrary
CreateEventW
CloseHandle
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
lstrcmpW
GetProcAddress
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
lstrlenW
GetNativeSystemInfo
LoadLibraryA
GetModuleHandleW
GetWindowsDirectoryW
VirtualQuery
DisableThreadLibraryCalls

ole32

OleInitialize
OleUninitialize
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoUninitialize
CoInitialize
CoCreateInstance
ReleaseStgMedium
CoInitializeEx
CoCreateGuid
RegisterDragDrop
RevokeDragDrop

advapi32

RegNotifyChangeKeyValue
RegCreateKeyW
FreeSid
CheckTokenMembership
RegQueryInfoKeyW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExA
RegQueryValueExA
RegConnectRegistryW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
GetUserNameW
AllocateAndInitializeSid
RegCreateKeyExW
CredGetSessionTypes

user32

DestroyAcceleratorTable
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
UnregisterClassW
PostQuitMessage
PostThreadMessageW
RegisterClassW
LoadAcceleratorsW
PeekMessageW
MsgWaitForMultipleObjects
CheckDlgButton
WinHelpW
GetDlgCtrlID
SetDlgItemTextW
GetDlgItemTextW
EnumChildWindows
ChildWindowFromPoint
GetCursor
ScreenToClient
GetCursorPos
SetDlgItemInt
CopyRect
GetFocus
IsWindowVisible
DrawFocusRect
LockWindowUpdate
GetPropW
SetPropW
CharNextW
PtInRect
SetMenuDefaultItem
InflateRect
MessageBeep
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
InsertMenuW
EndMenu
GetDesktopWindow
SetTimer
KillTimer
RegisterWindowMessageW
SystemParametersInfoW
CallWindowProcW
DefDlgProcW
GetWindowTextW
RegisterClipboardFormatW
DialogBoxParamW
MessageBoxW
SendNotifyMessageW
SetWindowPos
LoadIconW
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
MoveWindow
DefWindowProcW
GetMenu
GetSubMenu
DestroyWindow
GetMenuItemCount
TrackPopupMenu
DestroyMenu
RemoveMenu
GetSysColor
LoadImageW
SetWindowPlacement
InvalidateRect
EnableMenuItem
DeleteMenu
GetWindowPlacement
FindWindowW
GetClassNameW
GetWindow
CheckMenuItem
DrawTextW
SetForegroundWindow
GetDC
ReleaseDC
ShowWindow
GetWindowRect
IsWindowEnabled
GetWindowLongW
SetWindowLongW
GetParent
EndDialog
GetDlgItem
LoadCursorW
SetCursor
SetWindowTextW
GetKeyState
PostMessageW
LoadBitmapW
GetClientRect
GetSystemMetrics
GetMessagePos
MapWindowPoints
SetFocus
SendMessageW
EnableWindow
LoadStringW
CharLowerW
CharUpperW
CreateWindowExW
GetLastActivePopup
GetGUIThreadInfo
LoadMenuW
DestroyIcon

gdi32

CreateDIBitmap
ExtTextOutW
StartDocW
StartPage
EndPage
EndDoc
AbortDoc
DeleteDC
SetMetaFileBitsEx
SaveDC
SetMapMode
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
SetViewportOrgEx
PlayMetaFile
DeleteMetaFile
RestoreDC
GetTextCharset
CreateFontIndirectW
SelectObject
GetDeviceCaps
CreateDCW
CreatePen
SetROP2
MoveToEx
LineTo
SetBkColor
SetTextColor
BitBlt
GetTextExtentPoint32W
CreateCompatibleDC
DeleteObject

winspool.drv

XcvDataW
ord211
ord209
ord207
AddPrinterConnectionW
DeleteFormW
SetFormW
AddFormW
EnumFormsW
EnumPrintProcessorDatatypesW
EnumPrintProcessorsW
AddPrinterW
AddPortW
DeletePrinterConnectionW
DeletePrinter
DocumentPropertySheets
GetPrinterDataExW
SetPrinterDataExW
SetPrinterW
SetJobW
OpenPrinterW
EnumPrintersW
EnumMonitorsW
EnumPortsW
DocumentPropertiesW
EnumPrinterDriversW
EnumJobsW
GetPrinterDriverW
GetJobW
GetPrinterW
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
FreePrinterNotifyInfo
FindClosePrinterChangeNotification
ord203
DeviceCapabilitiesW
DeletePrinterDriverExW
DeletePrinterDriverW
GetPrinterDataW
DevicePropertySheets
ClosePrinter
DeletePortW
ConfigurePortW
ord204
SetPrinterDataW

shell32

Shell_NotifyIconW
ord134
ord129
SHChangeNotify
ShellAboutW
SHGetDesktopFolder
ord132
ord212
ord203
ord259
ord258
ord214
ord213
ord205
ord660
ord730
ord100
ShellExecuteExW
SHGetSpecialFolderLocation
SHGetMalloc
ord22
ord71
ord72
ShellExecuteW

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

oleaut32

VariantClear
VariantInit
SysAllocString

activeds

ord15
ord9
ord3

cfgmgr32

CM_Get_Parent
CM_Get_Device_ID_Size
CM_Get_Device_IDW
CM_Open_DevNode_Key
CMP_WaitNoPendingInstallEvents
CM_Reenumerate_DevNode
CM_Locate_DevNodeW

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetClassDevsW
SetupDiOpenDeviceInfoW
SetupDiRemoveDevice
SetupSetNonInteractiveMode
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiSetDeviceRegistryPropertyW
SetupDiDestroyDriverInfoList

shlwapi

ord219
ord260
ord437
StrFormatByteSizeW
wnsprintfW
SHStrDupW
StrRetToBufW
ord186

mpr

WNetCancelConnection2W
WNetAddConnection2W

winmm

PlaySoundW

Exports

Exports

ConnectToPrinterDlg
ConnectToPrinterPropertyPage
ConstructPrinterFriendlyName
DllCanUnloadNow
DllGetClassObject
DllMain
DocumentPropertiesWrap
GetLegacyPrintUI
PnPInterface
PrintNotifyTray_Exit
PrintNotifyTray_Init
PrintUIEntryW
PrinterPropPageProvider
RegisterPrintNotify
ShowErrorMessageHR
ShowErrorMessageSC
UnregisterPrintNotify
bFolderEnumPrinters
bFolderGetPrinter
bFolderRefresh
bPrinterSetup
vDocumentDefaults
vPrinterPropPages
vQueueCreate
vServerPropPages

Sections

.text
Size: 267KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 69KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 266KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

70e54d3ebf4cd6bab6d0792b409338db

Headers

File Characteristics

Imports

msvcrt

ntdll

kernel32

ole32

advapi32

user32

gdi32

winspool.drv

shell32

version

oleaut32

activeds

cfgmgr32

setupapi

shlwapi

mpr

winmm

Exports

Exports

Sections

.text Size: 267KB - Virtual size: 267KB

.data Size: 69KB - Virtual size: 72KB

.rsrc Size: 266KB - Virtual size: 266KB

.reloc Size: 11KB - Virtual size: 10KB

.text
Size: 267KB - Virtual size: 267KB

.data
Size: 69KB - Virtual size: 72KB

.rsrc
Size: 266KB - Virtual size: 266KB

.reloc
Size: 11KB - Virtual size: 10KB