a4afa107d0d582ef5d8eaf2b3f314976e969ae090261453c4873378c8ae9166c

Sharing

Copy URL Twitter E-mail

General

Target

a4afa107d0d582ef5d8eaf2b3f314976e969ae090261453c4873378c8ae9166c
Size

388KB
MD5

2ce058c3834bda152201b89abae2fce0
SHA1

f0380834fee8ad7251310cb4efbea1b3f347cb75
SHA256

a4afa107d0d582ef5d8eaf2b3f314976e969ae090261453c4873378c8ae9166c
SHA512

2c45131a2dca85380a96ee6cab7f779b0cb4b26f4ead0e63240b6ac1f490b76575f1f406af9f9a9e072e24596fbc1e7e417272c9b1ad0243b5c7d28059268715
SSDEEP

6144:DIrIshB5Esv4ULo6bVGTraIYteLLqsOQ9jUG9+45VrrE81YVGuUGMTG9k:MrIshbtv4ULTZGPysOGL5Nwql6M69k

Score

N/A

Malware Config

Signatures

Files

a4afa107d0d582ef5d8eaf2b3f314976e969ae090261453c4873378c8ae9166c
.dll windows x86

75d07e9595881f31a064f445abb30799

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
IsBadReadPtr
IsBadWritePtr
lstrcatA
GetVersionExA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetSystemInfo
lstrcmpiA
FindFirstFileA
FindClose
SizeofResource
lstrcpynA
WaitForMultipleObjects
LoadLibraryExA
DeleteCriticalSection
HeapDestroy
InitializeCriticalSection
Sleep
GetModuleHandleA
WriteFile
SetFilePointer
CreateEventA
QueryPerformanceFrequency
CreateProcessA
GetProcAddress
GetFileAttributesA
lstrcmpA
InterlockedDecrement
LocalFree
InterlockedIncrement
FormatMessageA
lstrlenA
GetACP
ReadFile
GetFileSize
CreateFileA
FreeLibrary
LoadLibraryA
FreeResource
LockResource
SetEndOfFile
SetStdHandle
GetStringTypeW
GetStringTypeA
IsBadCodePtr
VirtualAlloc
VirtualFree
HeapCreate
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
TerminateProcess
LCMapStringW
LCMapStringA
GetOEMCP
SetLastError
GetCPInfo
ExitProcess
HeapAlloc
TlsGetValue
CloseHandle
TlsFree
TlsAlloc
HeapFree
GetVersion
GetCommandLineA
ExitThread
TlsSetValue
CreateThread
GetPrivateProfileStringA
MultiByteToWideChar
RaiseException
RtlUnwind
InterlockedExchange
GetCurrentThread
SystemTimeToFileTime
QueryPerformanceCounter
ResetEvent
SetEvent
WaitForSingleObject
GetWindowsDirectoryA
CreateFileMappingA
MapViewOfFile
GetShortPathNameA
UnmapViewOfFile
SearchPathA
GetModuleFileNameA
lstrcpyA
GlobalUnlock
GlobalFree
GetLastError
VirtualProtect
VirtualQuery
LoadResource
FindResourceA
GetTickCount
GlobalLock
GlobalAlloc
WideCharToMultiByte

user32

SetWindowTextA
RemovePropA
IsDialogMessageA
GetMessageA
LoadStringA
GetWindowTextA
EndPaint
BeginPaint
EnumChildWindows
IsIconic
IsWindow
ReleaseDC
GetDC
FillRect
GetClientRect
ScreenToClient
GetWindowRect
GetSysColor
GetDlgItem
MoveWindow
SetWindowPos
SetWindowLongA
GetWindowLongA
DestroyWindow
SetFocus
EnableWindow
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
GetDesktopWindow
FindWindowA
LoadImageA
PostMessageA
SetPropA
CreateWindowExA
RegisterClassA
GetClassInfoA
TranslateMessage
DefWindowProcA
GetPropA
ShowWindow
ShowScrollBar
SendMessageA
MessageBeep
SetRect
MessageBoxA
wsprintfA
GetClassNameA
GetDlgCtrlID
InvalidateRect
GetKeyState
GetClassInfoExA
RegisterClassExA
GetDlgItemTextA
IntersectRect
DrawFocusRect
SetScrollInfo
LoadBitmapA
CharLowerBuffA
CreateDialogIndirectParamA
PtInRect
LoadCursorA
GetWindowPlacement
CallWindowProcA
GetCursorPos
SetScrollPos
GetDialogBaseUnits
GetParent
GetWindow
SystemParametersInfoA
MapWindowPoints

gdi32

CreateCompatibleBitmap
CreateCompatibleDC
SaveDC
GetTextExtentPointA
CreatePen
DeleteMetaFile
DeleteObject
SetMetaFileBitsEx
CreateDIBitmap
RealizePalette
SelectPalette
SelectClipRgn
CreateRectRgn
CreatePatternBrush
SetPixel
PatBlt
RestoreDC
StretchBlt
PlayMetaFile
CreateBitmap
SetBkColor
DeleteDC
CreateSolidBrush
GetObjectA
BitBlt
SelectObject
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetMapMode
UnrealizeObject
GetDeviceCaps
CreatePalette
GetSystemPaletteEntries
TextOutA
SetTextColor
SetBkMode
CreateFontIndirectA
EnumFontFamiliesExA
GetTextExtentPoint32A
LineTo
MoveToEx
GetStockObject

winspool.drv

EnumPortsA

advapi32

RegQueryValueExA
OpenThreadToken
OpenProcessToken
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
RegQueryValueA
RegOpenKeyA
RegCloseKey

shell32

SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA

ole32

CoCreateInstance
CoUninitialize
CoInitialize
CoGetInterfaceAndReleaseStream
CLSIDFromProgID

oleaut32

VariantChangeType
SafeArrayGetLBound
SysFreeString
SysAllocStringLen
VariantClear
SysAllocString
SysReAllocStringLen
SysStringLen
VariantInit
SysAllocStringByteLen
SafeArrayDestroy
SafeArrayGetElement
SafeArrayGetUBound
VariantCopy
SafeArrayGetDim
SysStringByteLen

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_GetImageCount
ImageList_Create
ImageList_Draw

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

Exports

Exports

AddIcon
CallDLLFn
ComponentViewCreateWindow
ComponentViewDestroy
ComponentViewRefresh
ComponentViewSelectAll
ComponentViewSetInfo
ComponentViewSetInfoEx
CreateFolder
DeleteFolder
DeleteIcon
EnableHourGlass
EnumFoldersItems
GetCPUType
GetFontSub
GetHandle
GetPorts
GetSelectedItemState
IsEmpty
IsNTAdmin
IsOSTypeNT
IsObject
LangLoadString
LnchAppAndWait
MessageBeepP
PathCompactPathPixel
PathGetDir
PathGetDrive
PathGetFile
PathGetFileExt
PathGetFileName
PathGetLongFromShort
PathGetPath
PathGetRegistryFolder
PathGetSpecialFolder
PathIsValidSyntax
QueryIcon
ReadArrayProperty
ReadBoolProperty
ReadNumberProperty
ReplaceIcon
ShowFolder
VerGetFileVersion
WriteArrayProperty
WriteBoolProperty
WriteNumberProperty
WriteStringProperty
_AppSearch
_BrowseForFolder
_CCPSearch
_CleanupInet
_CloseFile
_CmdGetHwndDlg
_CmdGetMsg
_CmdGetParam1
_CmdGetParam2
_ComponentAddItem
_ComponentCompareSizeRequired
_ComponentError
_ComponentErrorInfo
_ComponentFilterLanguage
_ComponentFilterOS
_ComponentGetData
_ComponentGetItemSize
_ComponentGetTotalCost
_ComponentInitialize
_ComponentIsItemSelected
_ComponentListItems
_ComponentLoadTarget
_ComponentMoveData
_ComponentReinstall
_ComponentRemoveAll
_ComponentSaveTarget
_ComponentSelectItem
_ComponentSetData
_ComponentSetupTypeEnum
_ComponentSetupTypeGetData
_ComponentSetupTypeSet
_ComponentTotalSize
_ComponentTransferData
_ComponentUpdate
_ComponentValidate
_ComponentViewCreate
_ComponentViewQueryInfo
_CopyBytes
_CreateDir
_CreateObject
_CreateRegistrySet
_CreateShellObjects
_CtrlGetNotificationCode
_CtrlGetSubCommand
_DefineDialog
_DialogSetFont
_DisableBranding
_DisableStatus
_Divide
_DoInstall
_DoSprintf
_EnableDialogCache
_EnablePrevDialog
_EnableStatus
_EndDialog
_ExistsDir
_ExistsDisk
_ExistsFile
_ExitInstall
_FileCopy
_GetByte
_GetDiskSpaceEx
_GetFont
_GetGlobalMemorySize
_GetLine
_GetObject
_GetSelectedTreeComponent
_GetSupportDir
_InetEndofTransfer
_InetGetLastError
_InetGetNextDisk
_InitInstall
_ListAddItem
_ListAddString
_ListCount
_ListCreate
_ListCurrentItem
_ListCurrentString
_ListDeleteItem
_ListDeleteString
_ListDestroy
_ListFindItem
_ListFindString
_ListGetFirstItem
_ListGetFirstString
_ListGetNextItem
_ListGetNextString
_ListGetType
_ListReadFromFile
_ListSetCurrentItem
_ListSetCurrentString
_ListSetIndex
_ListWriteToFile
_OpenFile
_PlaceBitmap
_ReadBytes
_ReadStringProperty
_Rebooted
_RegConnectRegistry
_RegCreateKey
_RegDeleteKey
_RegDeleteValue
_RegDisConnectRegistry
_RegEnum
_RegExistsKey
_RegQueryKeyBinaryValue
_RegQueryKeyValue
_RegSetKeyBinaryValue
_RegSetKeyValue
_ReleaseDialog
_SdShowMsg
_SeekBytes
_SendRequest
_SetAltMainImage
_SetByte
_SetColor
_SetDisplayEffect
_SetFont
_SetPaletteFile
_SetTitle
_SetupInet
_ShowObjWizardPages
_ShowWizardPages
_SizeWindow
_StatusUpdate
_TreeViewCreate
_VerUpdateFile
_WaitOnDialog
_WriteBytes
_WriteLine
__CreateObjectContext
__GetCmdLineOptions
__GetContextGUID
__GetFileRegistrar
__GetInfo
__GetLog
__GetLogDB
__GetMainWindow
__GetMaintenanceMode
__GetObjects
__GetProductGuid
__GetProgress
__GetReboot
__GetTextSub
__GetUser
__ISRTGetPropertyBag
__ISRTReleasePropertyBag
__LoadString
__ReleaseObjectContext
__RestoreMainLog
__SetComponentLog

Sections

.text
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

75d07e9595881f31a064f445abb30799

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

version

Exports

Exports

Sections

.text Size: 240KB - Virtual size: 236KB

.rdata Size: 40KB - Virtual size: 39KB

.data Size: 20KB - Virtual size: 26KB

.rsrc Size: 4KB - Virtual size: 960B

.reloc Size: 20KB - Virtual size: 17KB

.rmnet Size: 60KB - Virtual size: 60KB

.text
Size: 240KB - Virtual size: 236KB

.rdata
Size: 40KB - Virtual size: 39KB

.data
Size: 20KB - Virtual size: 26KB

.rsrc
Size: 4KB - Virtual size: 960B

.reloc
Size: 20KB - Virtual size: 17KB

.rmnet
Size: 60KB - Virtual size: 60KB