89e583652b921d99e57844acedb050b673600cd7e673c373ad7176929803c9f0

Sharing

Copy URL Twitter E-mail

General

Target

89e583652b921d99e57844acedb050b673600cd7e673c373ad7176929803c9f0
Size

152KB
MD5

6c9e0d3a4af719ec4f43b7c1690834ac
SHA1

b51d12fc0050bab68ee6e5bcbca93ce2cf504159
SHA256

89e583652b921d99e57844acedb050b673600cd7e673c373ad7176929803c9f0
SHA512

21d048ec3e9b19d4c87820f8051f8f9a7b3d01c7d05ea58ebd21228ee3171e69a100031a9b5a3a116d1cc7e8b7129c46a116a8bf01903875427384e75902dcca
SSDEEP

3072:71zbYeCuxyIFoYXQiw5Z4hGq9uQePIxULWBf+M8dCO49Z:FbYP0gP6UaUe

Score

N/A

Malware Config

Signatures

Files

89e583652b921d99e57844acedb050b673600cd7e673c373ad7176929803c9f0
.dll windows x86

5be92e36c215ef60ed51db0fea777428

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

MakeSureDirectoryPathExists

shell32

SHGetPathFromIDListW
SHChangeNotify
SHGetSpecialFolderLocation
SHGetMalloc

kernel32

lstrlenW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetSystemDirectoryW
GetLastError
WideCharToMultiByte
LoadLibraryW
GetACP
lstrcmpW
CreateDirectoryW
CopyFileW
LocalFree
LocalAlloc
MultiByteToWideChar
GlobalFree
GlobalUnlock
ReadFile
GlobalLock
GlobalAlloc
CloseHandle
GetFileSize
CreateFileW
SetFileAttributesW
GetFileAttributesW
GetWindowsDirectoryW
SetFileTime
WriteFile
GetFileTime
HeapFree
HeapAlloc
GetProcessHeap
lstrcmpiW
lstrcpynW
lstrlenA
GetVersionExW
DeleteFileW
MoveFileExW
DisableThreadLibraryCalls
ExitThread
GetExitCodeThread
WaitForSingleObject
CreateThread
GetStringTypeW
GetStringTypeA
LoadLibraryA
GetOEMCP
GetCPInfo
LCMapStringW
LCMapStringA
TlsSetValue
FreeLibrary
lstrcpyW
lstrcatW
GetProcAddress
TlsFree
SetLastError
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetCurrentProcess
TerminateProcess
InterlockedDecrement
InterlockedIncrement
GetCommandLineA
GetVersion
GetCurrentThreadId
HeapDestroy
TlsAlloc
ExitProcess
RtlUnwind
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection

user32

GetFocus
LoadStringW
MessageBoxW
wsprintfW

winspool.drv

DeletePrinterConnectionW
DeletePrinter
DeletePrinterDriverW
GetPrinterDriverDirectoryW
GetPrinterW
SetPrinterW
OpenPrinterW
GetPrinterDriverW
ClosePrinter
AddPrinterDriverW
AddMonitorW

advapi32

RegSetValueExW
RegCreateKeyExW
OpenSCManagerW
CloseServiceHandle
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoUninitialize

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

Exports

Exports

CAPTCreateReg_SOUND
CAPTCreateReg_Uninst
CAPTDeleteOldUnInstall
CAPTFreeLibraryResDLL
CAPTSoundDivision
CreateGroupShortCut
CreateSetupFolder
CreateStartupShortCut
DoSetup
Get_CAPTSetup_DataSize
Set_CAPTSetup_Data
UninstallerInstall

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5be92e36c215ef60ed51db0fea777428

Headers

File Characteristics

Imports

imagehlp

shell32

kernel32

user32

winspool.drv

advapi32

ole32

version

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 72KB - Virtual size: 70KB

.rsrc Size: 24KB - Virtual size: 20KB

.reloc Size: 8KB - Virtual size: 4KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 72KB - Virtual size: 70KB

.rsrc
Size: 24KB - Virtual size: 20KB

.reloc
Size: 8KB - Virtual size: 4KB