0e7fd8c7c02cdf08be269e6af12edf5e9e2666db057643be8bfdd8e52227b026

Sharing

Copy URL Twitter E-mail

General

Target

0e7fd8c7c02cdf08be269e6af12edf5e9e2666db057643be8bfdd8e52227b026
Size

133KB
MD5

88c17f2870c176e0ffa9ca6e80a2199e
SHA1

74ec251789dcf432489993c788bcb470f01de452
SHA256

0e7fd8c7c02cdf08be269e6af12edf5e9e2666db057643be8bfdd8e52227b026
SHA512

60c2717c3fa75de6b8947aafc9567a648ba7c171ba792814fe20ff713899ebf802f05b2e76eacc32773d336abef781443afb215e9ad9411216a39f67974ecde1
SSDEEP

3072:ajsqRHqQIpeZSN/uWQhnWWC0WZCboM5AX7zuYdNGlnV:agqV0eZmI6CbLAOAU

Score

N/A

Malware Config

Signatures

Files

0e7fd8c7c02cdf08be269e6af12edf5e9e2666db057643be8bfdd8e52227b026
.cab
colorring.ico
colorring.inf
colorring.ocx
.dll regsvr32 windows x86

7883c67df472392267657b94357359d8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
RaiseException
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
HeapFree
IsBadWritePtr
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
TerminateProcess
ExitProcess
GetCommandLineA
RtlUnwind
GetProfileIntA
GetFileTime
GetFileSize
GetFileAttributesA
SizeofResource
GetOEMCP
GetCPInfo
FileTimeToLocalFileTime
FileTimeToSystemTime
CopyFileA
GlobalSize
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
FormatMessageA
GetProcessVersion
GetLastError
WritePrivateProfileStringA
GlobalFlags
lstrcpynA
SetErrorMode
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
MulDiv
SetLastError
LoadLibraryA
FreeLibrary
FindResourceA
LoadResource
LockResource
GetVersion
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetModuleHandleA
GetProcAddress
GetUserDefaultLCID
IsDBCSLeadByte
GlobalFree
GlobalUnlock
InterlockedDecrement
lstrlenW
WideCharToMultiByte
lstrcpyA
lstrlenA
InterlockedIncrement
CloseHandle
GetModuleFileNameA
GlobalLock
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpiA
GetCurrentThread
GetCurrentThreadId
GetSystemDirectoryA
VirtualAlloc
MultiByteToWideChar

user32

GetTabbedTextExtentA
GetDialogBaseUnits
GetDCEx
GetSysColorBrush
GetMenuStringA
InsertMenuA
UnregisterClassA
LockWindowUpdate
EnumChildWindows
EndDialog
CreateDialogIndirectParamA
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
MoveWindow
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
IsWindow
SetFocus
AdjustWindowRectEx
EqualRect
GetTopWindow
WinHelpA
GetClassInfoA
RegisterClassA
RemoveMenu
GetWindowTextA
GetDlgCtrlID
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageA
IsIconic
GetWindowPlacement
GetClassNameA
SetRect
GetSysColor
GrayStringA
DrawTextA
TabbedTextOutA
GetClientRect
SetRectEmpty
ReleaseDC
GetDC
GetCapture
ReleaseCapture
SetCapture
LoadCursorA
PtInRect
GetSystemMetrics
RegisterClipboardFormatA
ScreenToClient
IsChild
IsRectEmpty
IntersectRect
CreateMenu
DestroyMenu
GetDesktopWindow
GetMenuItemCount
GetMenu
GetSubMenu
GetMenuItemID
UpdateWindow
InflateRect
GetWindowRect
ShowWindow
OffsetRect
InvalidateRect
DrawEdge
CopyRect
SetParent
SetWindowPos
CallWindowProcA
DefWindowProcA
AppendMenuA
CharUpperA
DestroyIcon
GetDlgItem
LoadStringA
SetWindowLongA
DestroyWindow
UnhookWindowsHookEx
wsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
EnableWindow
FillRect
SystemParametersInfoA

gdi32

CreateRectRgn
CreatePen
CreateSolidBrush
CreatePatternBrush
CopyMetaFileA
CreateDCA
GetTextExtentPoint32A
GetTextAlign
CreateFontIndirectA
PatBlt
UnrealizeObject
Rectangle
SetRectRgn
CreateRectRgnIndirect
SelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
DeleteObject
GetCurrentPositionEx
GetTextMetricsA
Ellipse
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetBkMode
SelectObject
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CombineRgn
CreateMetaFileA
DeleteDC
CloseMetaFile
DeleteMetaFile
LPtoDP
GetDeviceCaps
CreateBitmap
GetStockObject
MoveToEx

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegDeleteKeyA
RegQueryValueA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegCreateKeyA
RegSetValueA
RegSetValueExA
RegOpenKeyA
RegEnumKeyA

shell32

ExtractIconA
SHGetSpecialFolderPathA

comctl32

ord17

ole32

ReadClassStm
OleDuplicateData
ReadFmtUserTypeStg
StringFromCLSID
CreateStreamOnHGlobal
CreateOleAdviseHolder
CoTaskMemFree
OleSaveToStream
ReleaseStgMedium
CreateDataAdviseHolder
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoTaskMemAlloc
CreateDataCache
StringFromGUID2
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoCreateInstance
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoDisconnectObject
OleLoadFromStream

olepro32

ord252
ord251
ord253
ord250

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocStringLen
VariantCopy
SysAllocString
VariantChangeType
VariantClear
LoadTypeLi
RegisterTypeLi
SysStringByteLen
SysFreeString
LoadRegTypeLi

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 164KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7883c67df472392267657b94357359d8

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

ole32

olepro32

oleaut32

Exports

Exports

Sections

.text Size: 164KB - Virtual size: 161KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 12KB - Virtual size: 23KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 24KB - Virtual size: 22KB

.text
Size: 164KB - Virtual size: 161KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 12KB - Virtual size: 23KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 24KB - Virtual size: 22KB