4a163d2db81bbf6e6957627e275465a4b55c36fad29a03ff13838ddee859559a

Sharing

Copy URL Twitter E-mail

General

Target

4a163d2db81bbf6e6957627e275465a4b55c36fad29a03ff13838ddee859559a
Size

312KB
MD5

ca7b49e7b7fa564b2e5425bd907338a0
SHA1

d3540eb23be0b39ddfd9d1d3a6e8f4d45c14600a
SHA256

4a163d2db81bbf6e6957627e275465a4b55c36fad29a03ff13838ddee859559a
SHA512

411a894bfeef70cac9d9616b6f51b674f69ff9d692617d12dd99ef28efc696bf56ce7f2bbf18e9f00ae1f64120d0565d730a114a80b68fb60ff203a9dd69bf14
SSDEEP

6144:1xEIOM5SOcTj3muCQIxTIpQICSQSbOSt1UOdo:g/3xIdIQEF1UO

Score

N/A

Malware Config

Signatures

Files

4a163d2db81bbf6e6957627e275465a4b55c36fad29a03ff13838ddee859559a
.dll windows x86

c8bea0790464be4820bcafd6a09691dd

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetOpenStatus
ImmGetCompositionFontA
ImmLockIMC
ImmUnlockIMC
ImmReSizeIMCC
ImmLockIMCC
ImmUnlockIMCC

kernel32

WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
ExitProcess
HeapReAlloc
RaiseException
TerminateProcess
HeapSize
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
ReadFile
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
GetSystemInfo
VirtualQuery
SetStdHandle
SetEnvironmentVariableA
InterlockedExchange
GetACP
GetLocaleInfoA
GetOEMCP
GetCPInfo
GlobalFlags
InterlockedIncrement
SetErrorMode
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
FindFirstFileA
FindClose
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThread
lstrcmpA
GetModuleFileNameA
ConvertDefaultLocale
EnumResourceLanguagesA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
FreeResource
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpyA
InterlockedDecrement
SetLastError
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
GlobalFree
VirtualProtect
Sleep
lstrcmpiA
CompareStringW
CompareStringA
GetVersion
MultiByteToWideChar
GetThreadLocale
GetCurrentThreadId
lstrlenA
GetTickCount
CreateDirectoryA
WinExec
LCMapStringA
UnmapViewOfFile
CloseHandle
CreateFileMappingA
GetLastError
MapViewOfFile
LoadLibraryA
GetModuleHandleA
GetProcAddress
FreeLibrary
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA

user32

MessageBoxA
SetForegroundWindow
UpdateWindow
GetMenu
AdjustWindowRectEx
GetClassInfoA
GetDlgCtrlID
CallWindowProcA
IsIconic
GetWindowPlacement
DestroyMenu
CopyRect
GetSysColor
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetMenuState
GetMenuItemID
GetMenuItemCount
MapDialogRect
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
GetFocus
SetFocus
GetParent
GetDlgItem
IsWindowEnabled
SetWindowLongA
ValidateRect
SetWindowsHookExA
CallNextHookEx
MapWindowPoints
CharUpperA
GetWindowThreadProcessId
GetWindowLongA
GetDC
ReleaseDC
GetForegroundWindow
GetWindowRgn
GetClassNameA
GetKeyState
SendMessageA
DestroyWindow
UnregisterClassA
LoadIconA
RegisterClassA
GetSystemMetrics
EnableWindow
SystemParametersInfoA
LoadCursorA
SetCursor
ScreenToClient
ReleaseCapture
GetCursorPos
TrackPopupMenuEx
ShowWindow
CreateWindowExA
SetCapture
IsWindow
PostMessageA
DefWindowProcA
PostQuitMessage
wsprintfA
GetDesktopWindow
CreateDialogIndirectParamA
BeginPaint
GetClientRect
EndPaint
ClientToScreen
GetWindowRect
SetWindowRgn
LoadMenuA
GetSubMenu
EnableMenuItem
CheckMenuItem
LoadBitmapA
PtInRect
SetWindowPos
PeekMessageA
GetMessagePos
GetCapture
SetTimer
KillTimer
IsWindowVisible
InvalidateRect
GetSysColorBrush
GetMessageA
FindWindowA
TranslateMessage
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
GetMenuCheckMarkDimensions
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetWindowTextA
GetLastActivePopup
DispatchMessageA
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetWindow
LoadImageA

gdi32

PatBlt
DeleteObject
GetObjectA
DeleteDC
CreatePolyPolygonRgn
GetPixel
SelectObject
GetRgnBox
CreateRectRgnIndirect
GetDeviceCaps
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
FrameRgn
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreateBitmap
GetStockObject
CreateSolidBrush
GetTextExtentPoint32A
CreateRoundRectRgn
GetCharWidthA
BitBlt
CreateCompatibleDC
CreateDCA
CreateCompatibleBitmap
CreateFontA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegDeleteKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

comctl32

CreatePropertySheetPageA
ord17
DestroyPropertySheetPage
PropertySheetA

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA

oleaut32

VariantInit
VariantChangeType
VariantClear

oleacc

LresultFromObject
CreateStdAccessibleObject

Exports

Exports

ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME

Sections

.text
Size: 132KB - Virtual size: 130KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8bea0790464be4820bcafd6a09691dd

Headers

File Characteristics

Imports

imm32

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

oleacc

Exports

Exports

Sections

.text Size: 132KB - Virtual size: 130KB

.rdata Size: 32KB - Virtual size: 30KB

.data Size: 8KB - Virtual size: 22KB

.rsrc Size: 124KB - Virtual size: 121KB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 132KB - Virtual size: 130KB

.rdata
Size: 32KB - Virtual size: 30KB

.data
Size: 8KB - Virtual size: 22KB

.rsrc
Size: 124KB - Virtual size: 121KB

.reloc
Size: 12KB - Virtual size: 11KB