f7d9ac54b276d0fbaf815d2fd88978959ec3fc20bac62b75a16cd074dc97557b

Sharing

Copy URL

Twitter E-mail

General

Target

f7d9ac54b276d0fbaf815d2fd88978959ec3fc20bac62b75a16cd074dc97557b
Size

202KB
MD5

2b3cbfa3f0f02bbd8a288e3dd13cabde
SHA1

12861868b851d7391d17f1744c0062799936c8f9
SHA256

f7d9ac54b276d0fbaf815d2fd88978959ec3fc20bac62b75a16cd074dc97557b
SHA512

6014fea45ce58a9598f4cc48bbaa1b7f0039abcd43b83c80510e1b7719bcf6c785cb2dda6553b639ae19db53ba8c0e396cd4b1f0fd4eb781cbcfbbd761a8115f
SSDEEP

3072:nDyKKRXNQo5kfRFrosTlIry9Qky4ugMlMWhmxYv/lHiyfmjxF/W8FKYvUMxC9Epd:OHXfAFrzIry9QkydXZXvd5mj7eeVxCc

Score

N/A

Malware Config

Signatures

Files

f7d9ac54b276d0fbaf815d2fd88978959ec3fc20bac62b75a16cd074dc97557b
.dll windows x86

673f7c625918a96dfc3010792305f39e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_wtol
wcschr
??3@YAXPAX@Z
_except_handler3
_onexit
__dllonexit
_adjust_fdiv
malloc
_initterm
_wsplitpath
wcsncmp
_wcsnicmp
_itow
_wsetlocale
__CxxFrameHandler
wcsncpy
_wmakepath
_wcsdup
wcsstr
wcstod
free
wcsrchr
_wtoi
_ftol
wcscmp
_vsnwprintf
??2@YAPAXI@Z
_wcsicmp
wcslen

user32

EnableWindow
GetDlgItem
SetWindowTextW
LoadStringW
CheckDlgButton
LoadIconW
SendMessageW
GetDesktopWindow
SendDlgItemMessageW
GetDlgItemTextW
SetFocus
MessageBoxW
GetForegroundWindow
CharPrevW
CharNextW
GetWindowLongW
SetDlgItemTextW
GetActiveWindow
SetWindowLongW
PostMessageW
IsDlgButtonChecked

kernel32

FreeLibrary
LoadLibraryExW
LoadResource
SizeofResource
FindResourceW
LockResource
IsBadWritePtr
lstrcpynW
GetLongPathNameW
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
GetModuleFileNameW
SetLastError
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetLastError
lstrcmpiW
CompareStringW
GetNumberFormatW
GetVersionExW
InterlockedDecrement
lstrlenW
GetLocaleInfoW
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
GetUserDefaultLCID
LocalAlloc
MultiByteToWideChar
GetCurrentProcessId
ProcessIdToSessionId
LocalFree
DeleteFileW
CloseHandle
GetFileType
CreateFileW
OutputDebugStringW
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesW

winspool.drv

SetJobW
AdvancedDocumentPropertiesW
SetPrinterW
GetPrinterW
EnumFormsW
GetJobW

advapi32

RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegOpenKeyExA
RegQueryValueExA
RegEnumValueW
RegDeleteValueW
RegSetValueExW

ole32

OleUninitialize
OleInitialize
StringFromGUID2

shell32

SHGetMalloc
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW
SHGetDesktopFolder
SHGetFolderLocation

gdi32

ExtEscape

shlwapi

StrRetToBufW
PathAddBackslashW
PathCompactPathExW
StrChrW
PathIsDirectoryW
wnsprintfA
wnsprintfW

msi

ord109
ord39

Exports

Exports

DllMain
DrvDeviceCapabilities
DrvDevicePropertySheets
DrvDocumentEvent
DrvDocumentPropertySheets
DrvPrinterEvent

Sections

.text
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 170KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

673f7c625918a96dfc3010792305f39e

Headers

File Characteristics

Imports

msvcrt

user32

kernel32

winspool.drv

advapi32

ole32

shell32

gdi32

shlwapi

msi

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 29KB

.data Size: 168KB - Virtual size: 170KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 30KB - Virtual size: 29KB

.data
Size: 168KB - Virtual size: 170KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 2KB - Virtual size: 1KB