85526ddc7a026a068572340a47ea6f85dabcd97b287621a95d2dcf9b9c48373b

Sharing

Copy URL Twitter E-mail

General

Target

85526ddc7a026a068572340a47ea6f85dabcd97b287621a95d2dcf9b9c48373b
Size

124KB
MD5

cfe4a1ff5e4bb497caef9ea2678d5900
SHA1

c9699e405b21b895aa99ec9a093d84630b9466cd
SHA256

85526ddc7a026a068572340a47ea6f85dabcd97b287621a95d2dcf9b9c48373b
SHA512

729a98c946aca3f06c7dc6694d245cb7d5adb59e68cf0233cae177ca199854caddf49bceeafd62ce3e7d24212fecf909ebac1551a985b4ea5a0294854a32ba2d
SSDEEP

3072:bYjMolSvg0EunuNSZ3Qly9XvPHWMrsmth0t9yEBk:ySqQZ39Xvf1ntG9y

Score

N/A

Malware Config

Signatures

Files

85526ddc7a026a068572340a47ea6f85dabcd97b287621a95d2dcf9b9c48373b
.dll windows x86

21795885a4702131b58f3baeaf08763a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

QueueUserAPC
Sleep
VerLanguageNameW
InterlockedCompareExchange
RemoveDirectoryA
FreeResource
UnlockFile
GetModuleHandleA
LCMapStringA
WriteConsoleOutputCharacterA
GetSystemDirectoryA
BuildCommDCBAndTimeoutsW
GetCurrencyFormatA
GetPrivateProfileIntA
lstrlenA
SetVolumeMountPointW
GetVersion
OpenProcess
GlobalAddAtomW
WriteTapemark
CreateHardLinkW
lstrlenW
BackupSeek
SetProcessAffinityMask
LoadLibraryA
TryEnterCriticalSection
GetSystemTime
LoadResource
CompareFileTime
QueryPerformanceFrequency
GetSystemPowerStatus
FindFirstChangeNotificationA
GetProcAddress
LocalFileTimeToFileTime
WriteConsoleInputW
MapViewOfFile
SetupComm
SetConsoleMaximumWindowSize
GetCompressedFileSizeW
UpdateResourceA
IsValidLocale
GetExitCodeThread
GetCommandLineA
GetHandleInformation
VirtualAlloc

user32

DefDlgProcW
RegisterHotKey
GetKeyboardLayoutList
DefFrameProcA
GetUserObjectSecurity
DestroyMenu
DrawMenuBar
GetAltTabInfoW
ChangeDisplaySettingsA
GetKeyboardLayoutNameW
GetScrollPos
GetWindowWord
PeekMessageW
GetTabbedTextExtentW
DdeDisconnect
CreateIcon
GetDlgItemInt
SetMenuItemBitmaps
IsCharUpperA
BringWindowToTop
SetKeyboardState

gdi32

Pie
GetTextExtentPointA
BitBlt
OffsetRgn
SetMetaFileBitsEx
GetBkColor
FillPath
SetBkMode
CreateDIBSection
GdiGetPageHandle
GdiArtificialDecrementDriver
UpdateICMRegKeyA
CreateCompatibleDC
GetEnhMetaFileA
GetCharWidth32W
ExtCreatePen
SelectClipPath
GetMapMode
TextOutW
GetSystemPaletteUse
GetGlyphIndicesW
CreatePolygonRgn
PlayEnhMetaFileRecord
CloseMetaFile
SelectObject
PathToRegion
GetCharWidthW
SetStretchBltMode
GetTextExtentPoint32W
GetICMProfileW
CreateICA
ExtEscape
AddFontResourceW
StartFormPage
CreatePalette
GetTextFaceA
GetLayout
PtVisible
SetWorldTransform
SelectClipRgn
GetTextExtentPoint32A
CreatePen
SetMagicColors
ResetDCW
GetWindowExtEx
SetAbortProc
EnumFontFamiliesExA
SetTextCharacterExtra
CancelDC
StretchBlt
GdiGetSpoolFileHandle
GetBitmapBits
SetPixel
GetBoundsRect

advapi32

LsaOpenPolicy
LsaQueryInfoTrustedDomain
SetSecurityDescriptorControl
AddAccessAllowedAceEx
LogonUserW
ElfBackupEventLogFileW
AreAllAccessesGranted
GetSecurityDescriptorOwner
CryptGetKeyParam
RegQueryMultipleValuesA
StartServiceW
StartServiceCtrlDispatcherW
BuildExplicitAccessWithNameW
SystemFunction012
CryptSignHashA
RegisterServiceCtrlHandlerW
CloseServiceHandle
CryptEnumProvidersW
GetSidLengthRequired
LsaQueryTrustedDomainInfo
GetFileSecurityA

comctl32

UninitializeFlatSB
DestroyPropertySheetPage
ImageList_Create
ord15
ImageList_ReplaceIcon
ImageList_Remove
ord7
ImageList_LoadImageA
FlatSB_GetScrollPos
ImageList_GetBkColor
ImageList_GetIcon
ImageList_GetImageCount
CreateToolbarEx
ImageList_DragLeave
ImageList_Destroy
ord6
FlatSB_GetScrollProp
FlatSB_SetScrollPos
PropertySheetW
ImageList_SetOverlayImage
ImageList_Add
ImageList_DrawIndirect
CreatePropertySheetPageW
ImageList_DragShowNolock
ImageList_Draw
ord16
ord4
ord13
DrawStatusTextW
ord3
FlatSB_SetScrollRange
ImageList_DrawEx
ImageList_Write
FlatSB_EnableScrollBar
PropertySheetA
ImageList_Duplicate
ord14
ImageList_BeginDrag
ImageList_EndDrag
ord17
ImageList_LoadImageW
FlatSB_GetScrollInfo
InitializeFlatSB
CreateStatusWindowW
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_SetImageCount
ord2
ImageList_SetFilter
ord8
ImageList_GetImageRect
ImageList_DragMove
ImageList_GetIconSize
ImageList_AddMasked

opengl32

glPolygonMode
glDisable
glCopyTexSubImage1D
glEvalCoord2d
glEvalMesh2
glFogiv
glGetTexLevelParameterfv
glPushAttrib
glVertex2f
glTexCoord3s
wglUseFontBitmapsA
glGetError
glColor4s
glHint
glRasterPos3iv
glVertex4sv
glReadPixels
glListBase
glPixelStorei
glVertex2fv
glTexCoord1fv
glColor3s
glSelectBuffer
glVertexPointer
glTexGend
glRasterPos4f
glPolygonStipple

shell32

StrRStrIA
StrCmpNIA
DuplicateIcon
StrStrA
CommandLineToArgvW
StrCmpNIW
StrStrIA
StrChrIA
StrRStrIW
SHFileOperationW
ExtractIconW
DoEnvironmentSubstW
RealShellExecuteA
SHGetMalloc
DragAcceptFiles
StrStrW

shlwapi

SHRegEnumUSKeyW
StrCmpW
UrlCanonicalizeW
PathAppendA
StrDupW
PathFindOnPathA
PathRenameExtensionA
UrlGetLocationW
PathParseIconLocationA
PathRemoveExtensionA
SHOpenRegStreamA
PathIsContentTypeW
PathRemoveFileSpecA
StrCSpnIA
SHDeleteValueA
SHQueryInfoKeyW
SHDeleteEmptyKeyW
UrlGetLocationA
PathIsPrefixA
PathSearchAndQualifyA
UrlCreateFromPathA
PathIsSystemFolderW
SHRegQueryUSValueW
StrToIntExW
PathMatchSpecA
StrSpnW
PathRemoveBackslashW
SHRegDeleteUSValueA
SHRegCloseUSKey
SHDeleteKeyW
UrlIsA
StrFormatByteSizeA
PathMakePrettyA
UrlHashW
PathFindFileNameW
PathMakeSystemFolderA

winmm

mid32Message
joyGetPosEx
timeGetTime
waveOutGetDevCapsW
auxGetDevCapsW
joyGetPos
waveInStop
mmioSetInfo
waveInMessage
mxd32Message
mixerGetControlDetailsW
midiOutGetID
mmioStringToFOURCCW
mod32Message
mciGetErrorStringA
waveOutSetPitch
waveInGetNumDevs
waveOutGetID
waveOutPause
mmioInstallIOProcW
mciSendCommandA

winspool.drv

DocumentEvent
AddPrinterDriverExW
EnumPrinterDriversW
AddFormA
DevicePropertySheets
EnumPrintersA
GetPrinterDataA
DeleteFormW
AddPrinterConnectionW
StartPagePrinter
FindNextPrinterChangeNotification
EnumFormsW
ord202
DeletePrinterDataExA
GetPrinterA
AdvancedDocumentPropertiesA
DeletePrinterDriverExW
EnumPrinterDataW
ReadPrinter
SetPrinterDataA
GetPrinterW
WritePrinter
SetPrinterW
ord100
ResetPrinterW
DeleteMonitorA
ord201
ResetPrinterA
DeletePrinter
ord211
ConvertUnicodeDevModeToAnsiDevmode
ScheduleJob
ord215
EnumPortsA
DeletePrintProvidorA
GetSpoolFileHandle
WaitForPrinterChange
PrinterMessageBoxW
DeviceCapabilitiesW
ord101
SpoolerDevQueryPrintW
EnumJobsA
FindClosePrinterChangeNotification
EnumPrintProcessorDatatypesW
AddPortExA
DevQueryPrintEx
OpenPrinterA
EnumPrinterDataA
DeletePrinterDriverW
DocumentPropertySheets
EXTDEVICEMODE
DeletePrinterDriverA
SetJobA
DocumentPropertiesA
QueryRemoteFonts
AddPrintProcessorA
EnumJobsW
AddPortA
QueryColorProfile
AddPrinterDriverA
AbortPrinter
ord213
SetPortW
EnumMonitorsA
StartDocPrinterA
ConfigurePortW
ord208

msvcrt

fputs
fputc
fwprintf
fclose
memset
_execle
fsetpos
fopen
sprintf
fprintf
fwrite
feof
_unlink
ferror
printf
fseek
ftell
fread

Exports

Exports

Bjvqiwi
Grvyqg
Kgjxz
Oowq
Pkjxj

Sections

.text
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

21795885a4702131b58f3baeaf08763a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

opengl32

shell32

shlwapi

winmm

winspool.drv

msvcrt

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 44KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 52KB - Virtual size: 51KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 48KB - Virtual size: 44KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 52KB - Virtual size: 51KB

.reloc
Size: 8KB - Virtual size: 6KB