a8d9611844bb6588ce2947cf64bda45701396d14d84f41ce24643b6dfc287acd

Sharing

Copy URL Twitter E-mail

General

Target

a8d9611844bb6588ce2947cf64bda45701396d14d84f41ce24643b6dfc287acd
Size

192KB
MD5

4331f822d8dedd61251b4aa7a410fec0
SHA1

9f65628f7490ccdf9541bc0342b3c54cda578704
SHA256

a8d9611844bb6588ce2947cf64bda45701396d14d84f41ce24643b6dfc287acd
SHA512

2ff9999440b2010c8b99cf5c500b8dbecc8121dcda3e41b5e4d53d5be708bcb98039b6b2d0aa15fd55036e655726077bb7dc32449e2242b7f306e31d76ddca97
SSDEEP

3072:yzJE3PbkKavMoPfq67RC2gu/eLi7vpP9MxN3AwfpXNCuLNRUs:yFE3QKM7cfu2L09WbQs

Score

N/A

Malware Config

Signatures

Files

a8d9611844bb6588ce2947cf64bda45701396d14d84f41ce24643b6dfc287acd
.dll windows x86

5b0aa747f0b1ce9d66544131a2726548

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleActiveScreenBuffer
VirtualFree
CreateMutexA
GetConsoleTitleA
GetSystemTime
ClearCommError
GetCurrencyFormatA
ChangeTimerQueueTimer
GetUserDefaultLangID
lstrcpyW
EnumResourceTypesW
UnlockFileEx
WaitForDebugEvent
GetMailslotInfo
LoadLibraryA
WideCharToMultiByte
GetFileAttributesW
GetProfileSectionW
LCMapStringW
GetConsoleScreenBufferInfo
OpenSemaphoreW
IsValidLocale
SetWaitableTimer
VirtualLock
WriteProfileStringW
GetCurrentThread
GetOEMCP
GetTimeZoneInformation
DefineDosDeviceA
GetCommandLineW
ReadConsoleOutputW
GetProcessShutdownParameters
LocalAlloc
ReadConsoleInputExW
GetTapeStatus
Process32Next
CloseHandle
GetTickCount
SetVolumeLabelA
GetModuleHandleA
GetProfileIntW
IsDebuggerPresent
EscapeCommFunction
CreateFileMappingW
SetCommState
WaitForMultipleObjects
IsBadStringPtrA
IsDBCSLeadByte
UnmapViewOfFile
SetCalendarInfoA
DeleteVolumeMountPointW
GetPrivateProfileStructW
SetSystemTimeAdjustment
SetConsoleIcon
GetConsoleCommandHistoryLengthA
FindFirstFileExA
GetThreadLocale
SetFilePointer
FindNextVolumeMountPointW
lstrcmpiW
EnumDateFormatsExA
GetNamedPipeHandleStateA
DisconnectNamedPipe
GetACP
PeekConsoleInputW
GlobalDeleteAtom
GetPrivateProfileStringW
VirtualAlloc
SetProcessPriorityBoost
VirtualAllocEx
FindAtomA
GetBinaryTypeA
GetSystemDefaultLangID
GetPrivateProfileSectionW
IsBadStringPtrW
GetSystemDefaultLCID
Sleep
WaitForSingleObject
SetComputerNameW
GetProfileSectionA
ExpandEnvironmentStringsA
ReadConsoleInputA
GetConsoleAliasExesW
ExitProcess
CancelTimerQueueTimer
GetProcessHeap
GetBinaryTypeW
FreeEnvironmentStringsW
CompareStringA
ShowConsoleCursor
GetConsoleAliasW
GetDateFormatW
GetLogicalDriveStringsW
WriteProfileSectionA
SetCriticalSectionSpinCount
InterlockedIncrement
GlobalAddAtomA
GetCommandLineA
GetCurrentThreadId
SetFileAttributesA
FileTimeToLocalFileTime
FindFirstFileW
ExpandEnvironmentStringsW
GetVersion
GetSystemTimeAsFileTime
GetProcAddress
SetTimerQueueTimer
GetCurrentProcessId
ClearCommBreak
GetCPInfo
GetLocalTime
RtlZeroMemory
GlobalLock
WaitForMultipleObjectsEx
EnumDateFormatsA
FindFirstVolumeA
FreeLibrary
LoadResource
GetCurrentProcess
EnumSystemCodePagesA
GetEnvironmentStringsW
UnhandledExceptionFilter
HeapUnlock
DeleteTimerQueue
GetHandleInformation

user32

PeekMessageA
WinHelpW
LoadIconA
GetDesktopWindow
GetCursor
EndDeferWindowPos
GetShellWindow
OemToCharA
ScreenToClient
SetForegroundWindow
GetForegroundWindow
SetLastErrorEx
wsprintfA
IMPQueryIMEW
GetUpdateRect
GetPropA
DefDlgProcA
SetMenuInfo
TrackMouseEvent
SetWindowsHookExW
DestroyCaret
WindowFromPoint
GetMessagePos
DdeConnect
SendMessageTimeoutA
ShowCaret
OpenClipboard
GetActiveWindow
DdeFreeDataHandle
GetMenuItemRect
GetCapture
GetUpdateRgn
MessageBoxExA
MapWindowPoints
RegisterWindowMessageW
GetMessageTime
GetWindowDC
CreateAcceleratorTableA
GetFocus
GetMenuDefaultItem
SetScrollInfo
InflateRect
ArrangeIconicWindows
DdeQueryConvInfo
DlgDirListComboBoxA
GetKeyboardState
DdeGetLastError
BeginPaint
GetMessageExtraInfo
MonitorFromWindow
LoadCursorA
GetClipboardSequenceNumber
CloseDesktop
CreateDesktopA
GetWindowModuleFileNameA
IsZoomed
FindWindowA
GetWindowRect
keybd_event
OpenWindowStationW
mouse_event
SetWindowWord

gdi32

DeleteObject
PlayEnhMetaFile
EndPath
PlayMetaFile
GetViewportOrgEx
GetStockObject
GetEnhMetaFileBits
GdiGetPageHandle
GetCharacterPlacementW
GetWorldTransform
SetPixel
AddFontResourceExA
CreateCompatibleDC
GetGlyphOutlineA
GdiGetDC
SetViewportOrgEx
CreateEnhMetaFileA
Arc
GetBkColor
SelectObject
Rectangle
GdiGetSpoolFileHandle
DeleteDC
GetEnhMetaFileDescriptionW
UpdateColors
ExtFloodFill
ExtSelectClipRgn
SetSystemPaletteUse
GetICMProfileA
GetObjectA
GetDIBits
CreatePolygonRgn
CreateSolidBrush
Ellipse
CreateCompatibleBitmap
SelectFontLocal
SetBkColor
PlgBlt
CreateDIBSection
CloseFigure
GetTextExtentPointW
GetMapMode
CombineRgn
GetObjectType
SetPixelFormat
SetTextJustification

winspool.drv

DocumentPropertiesA
OpenPrinterW
ord210
DeletePrinterConnectionW
DeletePrintProcessorA
EnumPrintProcessorDatatypesW
OpenPrinterA
DeletePrinterDataExA
SetJobA

opengl32

glTexGeniv
glCopyTexSubImage2D
glColor4b
glTexCoord2dv
glLightModeli
glTexCoord3f
glColor4bv
glTranslatef
glDrawArrays
glGenTextures
glVertex4i
wglDescribePixelFormat
glIndexMask
glLightfv
glVertex4sv
glTexSubImage1D
glTexCoord1f
glGetPixelMapuiv
glTexEnvi
GlmfPlayGlsRecord
glTexCoord1d
glPopClientAttrib
glGetString
glGetBooleanv
glColor3iv
glStencilFunc
glGetIntegerv
wglGetLayerPaletteEntries
glTexCoord3i
glFlush
glScalef
glArrayElement
glRasterPos3sv
glColorMaterial
glPassThrough
glVertex2dv
glEvalCoord2d
glLighti
glPixelMapuiv
glTexCoord2iv
glGetLightiv
glGetMaterialfv
glMap1f
GlmfBeginGlsBlock
glColor3i
wglCreateContext
glTexCoord4fv
glTexCoord4f
glRasterPos3i
glTexCoord4i
glIndexub
glGenLists
glTexCoord2s
glFrustum
glTexGendv
glGetError
glReadBuffer
glMultMatrixd
glTexCoord3fv
glColor3dv
glGetTexGenfv
wglUseFontBitmapsA
glTexCoord3iv
glMapGrid1d
glIsList
glEnable
glFogiv
glGetClipPlane
glTranslated
glGetPolygonStipple
glBegin
glEvalCoord2f
glColorPointer
glInitNames
glLineWidth
glIndexf
glDrawBuffer
glIndexsv
glViewport
glPushName
glEvalPoint2
glTexParameteriv
glBlendFunc
glColor3ubv
glCallList
glPixelMapusv
glScaled
glGetMaterialiv
glRasterPos2i
glTexCoord1s
glListBase
glTexCoord4iv
glPushClientAttrib
glRasterPos4sv
glColor3usv
glTexCoord4s
glVertex2sv
glFeedbackBuffer
glMap2d
wglDeleteContext
glEdgeFlagPointer
glLightf
glPixelMapfv
glColor4sv
glRasterPos2iv
glPixelTransferi
glIsTexture
glGetDoublev
glTexParameterfv
glTexCoord2sv
glDepthRange
glIsEnabled
wglGetCurrentContext
glCopyTexImage2D
glVertex3sv
glGetPointerv
glVertex3f
wglUseFontOutlinesA
glRasterPos4fv
glGetMapfv
glColor4iv
glGetTexLevelParameteriv
glTexEnvf
glColor4s
glRenderMode
glEvalCoord2fv
glAlphaFunc
glTexCoord4sv
glScissor
GlmfCloseMetaFile
glRectiv
wglUseFontBitmapsW
glEndList
glRasterPos3dv
glTexSubImage2D
glNormal3iv
wglMakeCurrent
glTexCoord2d
glRasterPos3iv
glMultMatrixf
glPointSize
glPixelStoref
glLoadName
glEvalCoord1f

shlwapi

StrRChrW
StrChrW

shell32

SHGetSpecialFolderLocation
ExtractIconA
SHUpdateRecycleBinIcon
Shell_NotifyIconW
SheChangeDirExW
CommandLineToArgvW
SheGetDirA
DragQueryFileW

msvcp60

??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ

msvcrt

_heapwalk
iswprint
_mbstok
_commit
printf
_wcsdup
memcmp
_atodbl
fseek
_pipe
_safe_fdivr
sprintf
$I10_OUTPUT
_beginthreadex
_write
_atoldbl
vswprintf
_fpieee_flt
clock
feof
fsetpos
_mbsdec
__p__dstbias
_ismbcpunct
exp
_tempnam
_y1
_adj_fpatan
_cprintf
__p__mbcasemap
_searchenv
strftime
_CIacos
fputc
fopen
fwrite
ftell
strcmp
fprintf
_wenviron
strtol
fread
wcscspn
_wtol
__set_app_type
rename
_umask
tmpfile
_adj_fdiv_r
_mktemp
strcoll
_wfsopen
_wcsnset
_mbsnextc
_rmtmp
_mbsnbcoll
setbuf
_ismbbgraph
fclose
_EH_prolog
_wunlink
_mbsstr
_mbsncat
memset
_wstrdate
isleadbyte
_CIlog10
__p__winver
fputs
log10
getchar
_getmaxstdio
_ismbcspace
fmod
puts
tanh
_ismbbtrail
__p__pwctype
__argc
_endthread
__p__pgmptr
_chmod
tan
__iscsym
islower
_CIasin
fwprintf
_mbsbtype
ferror
_mbsnbset
_mbsnbicoll
__dllonexit
_onexit
isgraph

Exports

Exports

Cvyph
Cwrde
Demt
Dlhq
Doyiwiusom
Fbktichdty
Hkjg
Jeuakziotx
Ljooxsjm
Mfoegfhnnt
Niyl
Obhte
Qmfrjshwo
Qowgg
Rfzsf
Tkkoam
Ukpmuuekzm
Ulkbbhv
Vjjj
Vmlxdjzye
Xxcapldpjv
Yfef
Zjmwsvdu
Zmsdw
Zuhqyx

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 4KB - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5b0aa747f0b1ce9d66544131a2726548

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

opengl32

shlwapi

shell32

msvcp60

msvcrt

Exports

Exports

Sections

.text Size: 152KB - Virtual size: 151KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 7KB

.CRT Size: 4KB - Virtual size: 8B

.reloc Size: 8KB - Virtual size: 5KB

.text
Size: 152KB - Virtual size: 151KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 7KB

.CRT
Size: 4KB - Virtual size: 8B

.reloc
Size: 8KB - Virtual size: 5KB