9a5f9712764df2318ac63c1c463014620e1a7b14d8f950bbb77838760ebc3e75

Sharing

Copy URL Twitter E-mail

General

Target

9a5f9712764df2318ac63c1c463014620e1a7b14d8f950bbb77838760ebc3e75
Size

146KB
MD5

23a3fe9d7dadd6c10d4b4cbcea91abae
SHA1

a043e3f60da24340be6e865a7fa4a89cbe62ee10
SHA256

9a5f9712764df2318ac63c1c463014620e1a7b14d8f950bbb77838760ebc3e75
SHA512

eb1d3489b4a25a50e4a8ed8fa063e9effdf83d86e82a7a46dee02e182cd34642a546ad5dd56e24d625fd639ae635882d98f8234e91a738854f66b9b3d600442c
SSDEEP

3072:GNLhGDYvDTvhtCjRkJ3FxbACIigfLV7GsXjMmgrIzCcO6yDUTHguc:GNLhAK3vhtwkJ3j4LAsTpXzCcOCTHg

Score

N/A

Malware Config

Signatures

Files

9a5f9712764df2318ac63c1c463014620e1a7b14d8f950bbb77838760ebc3e75
.dll windows x86

d9d3b4896b72f73cb4316c7162e1d04b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

msvcrt

??1type_info@@UAE@XZ
_wsplitpath
_purecall
_callnewh
malloc
_adjust_fdiv
realloc
?terminate@@YAXXZ
_initterm
free
iswalpha
wcsspn
strstr
strchr
??2@YAPAXI@Z
_wtoi
__CxxFrameHandler
??3@YAXPAX@Z
wcsstr
_wcsnset
_wcsnicmp
wcstoul
wcsncpy
wcsrchr
wcscat
_snwprintf
wcschr
wcscmp
_wcsicmp
swprintf
wcsncmp
swscanf
wcslen
wcscpy
_vsnwprintf
_except_handler3
_strnicmp
strncpy

user32

IsWindowEnabled
LoadMenuW
GetSubMenu
GetFocus
GetMessagePos
TrackPopupMenu
DestroyMenu
DialogBoxParamW
wsprintfW
BeginPaint
EndPaint
CallWindowProcW
SetWindowPos
EndDialog
GetWindowContextHelpId
ShowWindow
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextW
GetWindowRect
ScreenToClient
SystemParametersInfoW
ReleaseDC
GetDC
EnableWindow
SetDlgItemTextW
SetFocus
GetClientRect
GetSystemMetrics
SetWindowLongW
GetDlgItem
GetActiveWindow
MessageBoxW
WinHelpW
SendMessageW
GetWindowLongW
GetParent
PostMessageW
SendDlgItemMessageW
GetWindowTextLengthW
GetWindowTextW
LoadStringW
wvsprintfW
MessageBeep
DrawTextW
InvalidateRect

kernel32

MulDiv
LocalAlloc
InterlockedExchange
RaiseException
GetWindowsDirectoryW
Sleep
GetSystemTime
SystemTimeToFileTime
GetTempPathW
GetFileType
MoveFileExW
ReadFile
CreateDirectoryW
GetDateFormatW
ExpandEnvironmentStringsW
GetTimeFormatW
GetStringTypeExW
HeapFree
HeapAlloc
GetProcessHeap
DisableThreadLibraryCalls
LoadLibraryA
LoadLibraryW
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
FreeLibrary
WaitForSingleObject
GetLocalTime
GetVersionExW
GetComputerNameW
CloseHandle
GetCurrentProcess
GetCurrentThread
DeleteFileW
CopyFileW
GetFileSize
CreateFileW
lstrlenW
lstrcpynW
lstrcpyW
CreateThread
CreateEventW
GetEnvironmentVariableW
FindClose
FindNextFileW
FindFirstFileW
SetEvent
WideCharToMultiByte
MultiByteToWideChar
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapDestroy

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

gdi32

CreateFontIndirectW
DeleteObject
GetStockObject
SelectObject
DeleteEnhMetaFile
GetTextMetricsW
CreateDCW
SetTextColor
LPtoDP
SetWindowOrgEx
SetViewportExtEx
SetWindowExtEx
SetMapMode
SetBkMode
RestoreDC
PlayEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
SaveDC
SelectClipRgn
CreateRectRgnIndirect
DeleteDC
EndDoc
EndPage
StartPage
StartDocW
GetDeviceCaps
Rectangle

shell32

ShellExecuteExW

advapi32

OpenProcessToken
OpenThreadToken
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
IsValidSid
GetSidIdentifierAuthority
GetSidSubAuthorityCount
GetSidSubAuthority
GetTokenInformation

tapi32

lineShutdown
lineInitializeExW
lineSetCurrentLocation
lineGetTranslateCapsW
lineTranslateDialogW
lineTranslateAddressW

imm32

ImmAssociateContext

Exports

Exports

FaxFreeSendWizardData
FaxSendWizard

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 71KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d9d3b4896b72f73cb4316c7162e1d04b

Headers

File Characteristics

Imports

version

msvcrt

user32

kernel32

winspool.drv

gdi32

shell32

advapi32

tapi32

imm32

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 71KB - Virtual size: 74KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 71KB - Virtual size: 74KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB