f77af44c4bedc6a3bc27ba1d2e5ff4936d0fe5092735527dbabb7e81b3c4bad3

Sharing

Copy URL Twitter E-mail

General

Target

f77af44c4bedc6a3bc27ba1d2e5ff4936d0fe5092735527dbabb7e81b3c4bad3
Size

174KB
MD5

3e948fb8ace1964401c9d59e7b9a286b
SHA1

64f628523737ff19a9754b3fb341e1e898a74e57
SHA256

f77af44c4bedc6a3bc27ba1d2e5ff4936d0fe5092735527dbabb7e81b3c4bad3
SHA512

74527c24f2f982984155515277144e3f68ea38713047e52c501b570a93ec8a310daf61a067a55db560da5723e18794eaf13bbbded0f2bf96f0d8fddfe27ee256
SSDEEP

3072:ADH8W3sgdJ4OwZt5pBFI2C4VVW5URuETldP/zAJLDAsivC4lYwW3DG:AD1sM4pVFFNVVkonTrP/z0fi64l/Wz

Score

N/A

Malware Config

Signatures

Files

f77af44c4bedc6a3bc27ba1d2e5ff4936d0fe5092735527dbabb7e81b3c4bad3
.dll windows x86

b10d8b28d0664167e1bfd91437feb2a9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

SetSecurityDescriptorDacl
DeregisterEventSource
ReportEventW
RegisterEventSourceW
RegOpenCurrentUser
RegEnumValueW
RegOpenKeyExW
IsValidSecurityDescriptor
InitializeSecurityDescriptor
GetSecurityDescriptorOwner
SetSecurityDescriptorOwner
GetSecurityDescriptorGroup
SetSecurityDescriptorGroup
GetSecurityDescriptorDacl
RegSetValueExW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl
GetSecurityDescriptorLength
MakeSelfRelativeSD
RegQueryValueExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey

gdi32

CreateDCW
GetDeviceCaps
DeleteDC

kernel32

GetTempPathW
FreeLibrary
GetLastError
GetProcAddress
LoadLibraryW
SetLastError
GetModuleFileNameW
GetSystemDirectoryW
DeleteCriticalSection
InitializeCriticalSection
DisableThreadLibraryCalls
LocalFree
lstrcmpW
WriteFile
GetCurrentProcessId
CloseHandle
DeactivateActCtx
LoadLibraryExW
ActivateActCtx
LeaveCriticalSection
EnterCriticalSection
SetEvent
CreateThread
CreateEventW
ReleaseActCtx
GetFileAttributesW
InterlockedIncrement
InterlockedDecrement
LocalAlloc
GetFileType
CreateFileW
GetFullPathNameW
lstrcmpiW
VirtualFree
VirtualAlloc
LoadLibraryA
GetVersionExW
GetTickCount
CreateActCtxW
WaitForSingleObject
ReleaseMutex
Sleep
CreateProcessW
GetSystemWindowsDirectoryW
CreateMutexW
ProcessIdToSessionId
lstrlenW
MultiByteToWideChar
lstrlenA
WideCharToMultiByte
GetModuleHandleW
FormatMessageW
SearchPathW
GetCurrentDirectoryW
FindClose
FindFirstFileW
ResetEvent
WriteProfileStringW
GetProfileStringW
GlobalFree
GlobalAlloc
DnsHostnameToComputerNameW
GetTempFileNameW
DelayLoadFailureHook
GetFileSize
SetEndOfFile
ReadFile
SetFilePointer
DeleteFileW
HeapDestroy
HeapAlloc
HeapCreate
HeapFree
InterlockedCompareExchange
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MapViewOfFile
UnmapViewOfFile
CreateFileMappingW
CreateDirectoryW
lstrcpynW
GetSystemInfo
CopyFileW

msvcrt

wcslen
_wcsicmp
memmove
wcschr
_wcsnicmp
wcsncmp
wcsncpy
wcsrchr
wcspbrk
wcscmp
??3@YAXPAX@Z
??2@YAPAXI@Z
free
_initterm
malloc
_adjust_fdiv
_vsnwprintf
_except_handler3

ntdll

NtQueryInformationProcess
NtFsControlFile

rpcrt4

RpcMgmtIsServerListening
RpcSmDestroyClientContext
NdrClientCall2
I_RpcExceptionFilter
RpcBindingFree
RpcStringFreeW
RpcBindingFromStringBindingW
RpcStringBindingComposeW

user32

GetWindowLongW
GetDesktopWindow
EndDialog
BringWindowToTop
SetWindowLongW
SendDlgItemMessageW
GetDlgItemTextW
MessageBoxW
GetForegroundWindow
SendNotifyMessageW
AllowSetForegroundWindow
GetMessageW
LoadStringW
GetProcessWindowStation
GetUserObjectInformationW
FindWindowW
DialogBoxParamW
PostMessageW
GetGUIThreadInfo
GetParent
GetWindow
WinHelpW
GetLastActivePopup
EnableWindow
MsgWaitForMultipleObjects
SetFocus
SetForegroundWindow
PeekMessageW
DispatchMessageW
TranslateMessage

Exports

Exports

ADVANCEDSETUPDIALOG
AbortPrinter
AddFormA
AddFormW
AddJobA
AddJobW
AddMonitorA
AddMonitorW
AddPortA
AddPortExA
AddPortExW
AddPortW
AddPrintProcessorA
AddPrintProcessorW
AddPrintProvidorA
AddPrintProvidorW
AddPrinterA
AddPrinterConnectionA
AddPrinterConnectionW
AddPrinterDriverA
AddPrinterDriverExA
AddPrinterDriverExW
AddPrinterDriverW
AddPrinterW
AdvancedDocumentPropertiesA
AdvancedDocumentPropertiesW
AdvancedSetupDialog
ClosePrinter
CloseSpoolFileHandle
CommitSpoolData
ConfigurePortA
ConfigurePortW
ConnectToPrinterDlg
ConvertAnsiDevModeToUnicodeDevmode
ConvertUnicodeDevModeToAnsiDevmode
CreatePrinterIC
DEVICECAPABILITIES
DEVICEMODE
DeleteFormA
DeleteFormW
DeleteMonitorA
DeleteMonitorW
DeletePortA
DeletePortW
DeletePrintProcessorA
DeletePrintProcessorW
DeletePrintProvidorA
DeletePrintProvidorW
DeletePrinter
DeletePrinterConnectionA
DeletePrinterConnectionW
DeletePrinterDataA
DeletePrinterDataExA
DeletePrinterDataExW
DeletePrinterDataW
DeletePrinterDriverA
DeletePrinterDriverExA
DeletePrinterDriverExW
DeletePrinterDriverW
DeletePrinterIC
DeletePrinterKeyA
DeletePrinterKeyW
DevQueryPrint
DevQueryPrintEx
DeviceCapabilities
DeviceCapabilitiesA
DeviceCapabilitiesW
DeviceMode
DevicePropertySheets
DocumentEvent
DocumentPropertiesA
DocumentPropertiesW
DocumentPropertySheets
EXTDEVICEMODE
EndDocPrinter
EndPagePrinter
EnumFormsA
EnumFormsW
EnumJobsA
EnumJobsW
EnumMonitorsA
EnumMonitorsW
EnumPortsA
EnumPortsW
EnumPrintProcessorDatatypesA
EnumPrintProcessorDatatypesW
EnumPrintProcessorsA
EnumPrintProcessorsW
EnumPrinterDataA
EnumPrinterDataExA
EnumPrinterDataExW
EnumPrinterDataW
EnumPrinterDriversA
EnumPrinterDriversW
EnumPrinterKeyA
EnumPrinterKeyW
EnumPrintersA
EnumPrintersW
ExtDeviceMode
FindClosePrinterChangeNotification
FindFirstPrinterChangeNotification
FindNextPrinterChangeNotification
FlushPrinter
FreePrinterNotifyInfo
GetDefaultPrinterA
GetDefaultPrinterW
GetFormA
GetFormW
GetJobA
GetJobW
GetPrintProcessorDirectoryA
GetPrintProcessorDirectoryW
GetPrinterA
GetPrinterDataA
GetPrinterDataExA
GetPrinterDataExW
GetPrinterDataW
GetPrinterDriverA
GetPrinterDriverDirectoryA
GetPrinterDriverDirectoryW
GetPrinterDriverW
GetPrinterW
GetSpoolFileHandle
IsValidDevmodeA
IsValidDevmodeW
OpenPrinterA
OpenPrinterW
PerfClose
PerfCollect
PerfOpen
PlayGdiScriptOnPrinterIC
PrinterMessageBoxA
PrinterMessageBoxW
PrinterProperties
QueryColorProfile
QueryRemoteFonts
QuerySpoolMode
ReadPrinter
ResetPrinterA
ResetPrinterW
ScheduleJob
SeekPrinter
SetAllocFailCount
SetDefaultPrinterA
SetDefaultPrinterW
SetFormA
SetFormW
SetJobA
SetJobW
SetPortA
SetPortW
SetPrinterA
SetPrinterDataA
SetPrinterDataExA
SetPrinterDataExW
SetPrinterDataW
SetPrinterW
SplDriverUnloadComplete
SpoolerDevQueryPrintW
SpoolerInit
SpoolerPrinterEvent
StartDocDlgA
StartDocDlgW
StartDocPrinterA
StartDocPrinterW
StartPagePrinter
WaitForPrinterChange
WritePrinter
XcvDataW

Sections

.text
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b10d8b28d0664167e1bfd91437feb2a9

Headers

File Characteristics

Imports

advapi32

gdi32

kernel32

msvcrt

ntdll

rpcrt4

user32

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 127KB

.data Size: 6KB - Virtual size: 5KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 37KB - Virtual size: 37KB

.text
Size: 128KB - Virtual size: 127KB

.data
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 37KB - Virtual size: 37KB