f1c99e61d41422508906130441f477972ff9d12d87fd35eaa26df8c25e48ab1e

Sharing

Copy URL Twitter E-mail

General

Target

f1c99e61d41422508906130441f477972ff9d12d87fd35eaa26df8c25e48ab1e
Size

799KB
MD5

5af58a33328f58f3bd31024c6d602b49
SHA1

412996cdd26ece2433bfb43978ac853d56d6cbf4
SHA256

f1c99e61d41422508906130441f477972ff9d12d87fd35eaa26df8c25e48ab1e
SHA512

b50b5203973df0bdd23c258b15c6c77266d9215333f4331c750ad7b41c28d5866185e84f859445b7c75efde39b4e710752b45966968025096445b1a516667a04
SSDEEP

12288:6VOmbiwspy3DuDKPdOSCZgu1ClEMHtWNHiw6f1+RGnG9ZHRPgu0fu/DZxk:6VHUy/Vu1YltWNCw4OKG9ZHREGr/k

Score

N/A

Malware Config

Signatures

Files

f1c99e61d41422508906130441f477972ff9d12d87fd35eaa26df8c25e48ab1e
.dll regsvr32 windows x86

232b5030b87df490ad8f3a0cb110a64d

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileSizeEx
GetFileTime
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
GetDriveTypeA
SetEnvironmentVariableA
SetCurrentDirectoryA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetCommandLineA
HeapReAlloc
Sleep
ExitProcess
HeapSize
HeapCreate
HeapDestroy
DuplicateHandle
FatalAppExitA
GetTimeZoneInformation
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStdHandle
GetStringTypeW
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
SetConsoleCtrlHandler
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetStringTypeExA
MoveFileA
FreeResource
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalFlags
GetCurrentDirectoryA
SystemTimeToFileTime
GetThreadLocale
GetAtomNameA
GlobalGetAtomNameA
TlsFree
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentProcessId
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
CompareStringA
InterlockedExchange
lstrcmpA
GetModuleFileNameW
SetLastError
CopyFileA
GlobalSize
GetModuleHandleA
LoadLibraryExA
IsDBCSLeadByte
GetModuleHandleW
InterlockedDecrement
InterlockedIncrement
GetProfileStringA
FormatMessageA
RaiseException
OutputDebugStringA
WriteFile
GetTickCount
MulDiv
ReadFile
GetCurrentThreadId
lstrcmpiA
CreateMutexA
WaitForSingleObject
GetLastError
ReleaseMutex
GetPrivateProfileSectionNamesA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
WritePrivateProfileStringA
GetPrivateProfileStringA
FindResourceA
LoadResource
LockResource
SizeofResource
GlobalAddAtomA
GlobalDeleteAtom
DeleteCriticalSection
InitializeCriticalSection
FindFirstFileA
FindNextFileA
FindClose
RemoveDirectoryA
DeleteFileA
GetShortPathNameA
GetFileAttributesA
CreateDirectoryA
MultiByteToWideChar
GetProcAddress
FreeLibrary
SetErrorMode
LocalAlloc
LoadLibraryA
LocalFree
GetModuleFileNameA
lstrcpyA
lstrcpynA
SetFilePointer
LocalLock
LocalUnlock
LocalSize
LocalReAlloc
CreateFileA
CloseHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
GetPrivateProfileIntA
lstrlenA
GetVersion
lstrlenW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
VirtualFree

user32

LockWindowUpdate
SetCapture
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
GetClientRect
GetClassInfoExA
GetClassInfoA
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
CallWindowProcA
GetMenu
OffsetRect
IntersectRect
GetDCEx
GetDesktopWindow
GetDlgCtrlID
PtInRect
EndPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
DeleteMenu
GetSysColor
GetSysColorBrush
UnregisterClassA
GetLastActivePopup
MessageBoxA
ShowOwnedPopups
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetActiveWindow
UnionRect
SetParent
GetSystemMenu
IsRectEmpty
MapVirtualKeyA
GetKeyNameTextA
WindowFromPoint
TrackPopupMenu
KillTimer
SetTimer
UnpackDDElParam
ReuseDDElParam
LoadMenuA
GetMenuBarInfo
ReleaseCapture
LoadAcceleratorsA
InsertMenuItemA
CreatePopupMenu
BringWindowToTop
TranslateAcceleratorA
GetDialogBaseUnits
InvalidateRect
SetRectEmpty
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
DestroyMenu
InflateRect
CharUpperA
DestroyIcon
ScrollWindowEx
MoveWindow
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
SetDlgItemInt
GetDlgItemTextA
GetDlgItemInt
CheckRadioButton
CheckDlgButton
LoadIconA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetClassLongA
SetPropA
GetPropA
RemovePropA
SetFocus
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenuEx
GetWindowPlacement
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
UnhookWindowsHookEx
GetMenuState
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetSubMenu
RemoveMenu
GetWindow
GetClassNameA
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetMenuItemCount
GetMenuItemInfoA
SetMenuItemInfoA
CharNextW
CharNextA
LoadCursorA
RegisterClassA
CreateWindowExA
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
IsIconic
ShowWindow
MsgWaitForMultipleObjects
PostQuitMessage
GetWindowLongA
DefWindowProcA
SetWindowLongA
TranslateMessage
DispatchMessageA
PostMessageA
PeekMessageA
GetDC
ReleaseDC
IsWindow
GetWindowRect
GetParent
SetWindowPos
SystemParametersInfoA
GetSystemMetrics
SetRect
GetDlgItem
IsWindowEnabled
EnableWindow
LoadStringA
RegisterWindowMessageA
SendMessageA
wsprintfA
BeginPaint

advapi32

RegOpenKeyExW
RegOpenKeyExA
RegCreateKeyExW
RegCreateKeyExA
RegSetValueExW
RegSetValueExA
RegCloseKey
RegQueryValueExW
RegQueryValueExA
RegDeleteKeyA
RegDeleteValueA
RegQueryInfoKeyA
RegEnumKeyExA
RegSetValueA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA

ole32

OleDuplicateData
ReleaseStgMedium
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CoTaskMemRealloc
CoDisconnectObject
CreateFileMoniker
CoGetInstanceFromFile
ProgIDFromCLSID
CoTaskMemFree
CreateBindCtx
StringFromGUID2
MkParseDisplayName
GetRunningObjectTable
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
CoInitializeEx
CoTaskMemAlloc

shell32

ExtractIconA
DragFinish
DragQueryFileA
SHGetFileInfoA

oleaut32

SysStringLen
SysFreeString
VarBstrCat
SysAllocStringLen
SysAllocStringByteLen
SysAllocString
SysStringByteLen
VarBstrFromDate
VarCyFromStr
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarDateFromStr
SysReAllocStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayCopy
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayRedim
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
GetErrorInfo
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VariantInit
CreateErrorInfo
SetErrorInfo
VarBstrCmp
VariantChangeType
VariantCopy
VariantClear

shlwapi

PathStripToRootA
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
PathIsUNCA
PathFindExtensionA

gdi32

GetBkColor
CreateCompatibleBitmap
StretchDIBits
CreateFontA
GetCharWidthA
DPtoLP
PatBlt
GetMapMode
CombineRgn
SetRectRgn
CreateRectRgnIndirect
GetTextExtentPoint32A
GetDCOrgEx
CreateHatchBrush
CreateSolidBrush
ExtCreatePen
CreatePen
PlayMetaFile
EnumMetaFile
GetObjectType
PlayMetaFileRecord
SelectPalette
CreateCompatibleDC
CreatePatternBrush
CreateFontIndirectA
GetDeviceCaps
GetTextMetricsA
SelectObject
GetObjectA
GetStockObject
CopyMetaFileA
CreateDCA
CreateBitmap
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextColor
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
DeleteObject
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
BitBlt
GetPixel
StartDocA
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
DeleteDC
CreateDIBPatternBrushPt

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

Exports

Exports

?COMWndProc@@YGJPAUHWND__@@IIJ@Z
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 537KB - Virtual size: 537KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 91KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

232b5030b87df490ad8f3a0cb110a64d

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

shell32

oleaut32

shlwapi

gdi32

comdlg32

winspool.drv

Exports

Exports

Sections

.text Size: 537KB - Virtual size: 537KB

.rdata Size: 114KB - Virtual size: 113KB

.data Size: 91KB - Virtual size: 106KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 35KB - Virtual size: 35KB

.text
Size: 537KB - Virtual size: 537KB

.rdata
Size: 114KB - Virtual size: 113KB

.data
Size: 91KB - Virtual size: 106KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 35KB - Virtual size: 35KB