4a6404603fe52e967fb169061de939e0

Sharing

Copy URL Twitter E-mail

General

Target

4a6404603fe52e967fb169061de939e0
Size

252KB
MD5

4a6404603fe52e967fb169061de939e0
SHA1

4f7933984b36754e71763ee1618fcff12178460d
SHA256

b79422200f5562162c6f6dbbdb9e2abc2bb1a34d0abe3a14eeb0f92ab95bc1cf
SHA512

771807d17b3edc78ff21178d893a96f05c83b116bfe9cb436152091f3e74d9c831bdb51106e55100f182bbab65bc79f4a35f34522e850e80045747904f946f11
SSDEEP

6144:mQsj1FYG6fMVQnpdt4XUlnXvahH0UIzmJsm:FIYL0VQnpQXYihhJsm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4a6404603fe52e967fb169061de939e0

Files

4a6404603fe52e967fb169061de939e0
.dll windows:4 windows x86 arch:x86

426fba11f8ba4844063e400fc2b00942

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

user32

WinHelpA
ValidateRect
UnregisterClassA
UnhookWindowsHookEx
TranslateMessage
TabbedTextOutA
SystemParametersInfoA
ShowWindow
SetWindowsHookExA
SetWindowTextA
SetWindowPos
SetWindowLongA
SetPropA
SetMenuItemBitmaps
SetForegroundWindow
SetCursor
SendMessageA
RemovePropA
ReleaseDC
RegisterWindowMessageA
RegisterClassA
PtInRect
PostQuitMessage
PostMessageA
PeekMessageA
ModifyMenuA
MessageBoxA
MapWindowPoints
LoadIconA
LoadCursorA
LoadBitmapA
IsWindowVisible
IsWindowEnabled
IsWindow
IsIconic
GrayStringA
GetWindowThreadProcessId
GetWindowTextA
GetWindowRect
GetWindowPlacement
GetWindowLongA
GetWindow
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetSubMenu
GetPropA
GetParent
GetMessageTime
GetMessagePos
GetMessageA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuCheckMarkDimensions
GetMenu
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDC
GetCursorPos
GetClientRect
GetClassNameA
GetClassLongA
GetClassInfoExA
GetClassInfoA
GetCapture
GetActiveWindow
EnableWindow
EnableMenuItem
DrawTextExA
DrawTextA
DispatchMessageA
DestroyWindow
DestroyMenu
DefWindowProcA
CreateWindowExA
CopyRect
ClientToScreen
CheckMenuItem
CharUpperA
CallWindowProcA
CallNextHookEx
AdjustWindowRectEx

setupapi

SetupDiGetDeviceInstanceIdA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailA
CM_Get_DevNode_Status_Ex
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces

shlwapi

PathFindFileNameA
PathFindExtensionA

gdi32

TextOutA
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
SetTextColor
SetMapMode
SetBkColor
SelectObject
ScaleWindowExtEx
ScaleViewportExtEx
SaveDC
RestoreDC
RectVisible
PtVisible
OffsetViewportOrgEx
GetStockObject
GetDeviceCaps
GetClipBox
ExtTextOutA
Escape
DeleteObject
DeleteDC
CreateBitmap

oleaut32

VariantClear
VariantChangeType
VariantInit

kernel32

SetFilePointer
SetErrorMode
RtlUnwind
ReadFile
RaiseException
QueryPerformanceCounter
MultiByteToWideChar
LockResource
LocalReAlloc
LocalFree
LocalAlloc
LoadResource
LoadLibraryA
LeaveCriticalSection
LCMapStringW
LCMapStringA
IsValidCodePage
IsDebuggerPresent
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InitializeCriticalSection
HeapSize
SetHandleCount
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalHandle
GlobalGetAtomNameA
GlobalFree
GlobalFlags
GlobalFindAtomA
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomA
GetWindowsDirectoryA
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetSystemTimeAsFileTime
GetStringTypeW
GetStringTypeA
GetStdHandle
GetStartupInfoA
GetProcessHeap
GetProcAddress
GetOEMCP
GetModuleHandleA
GetModuleFileNameW
GetModuleFileNameA
GetLocaleInfoA
GetLastError
GetFileType
GetFileSize
GetEnvironmentStringsW
GetEnvironmentStringsA
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcmpA
lstrcmpW
lstrlenA
HeapReAlloc
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineA
CloseHandle
CompareStringA
ConvertDefaultLocale
CreateFileA
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
EnumResourceLanguagesA
ExitProcess
FindResourceA
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
FreeLibrary
GetACP
GetCPInfo
GetCurrentProcess

advapi32

RegSetValueExA
RegQueryValueExA
RegQueryValueA
RegOpenKeyExA
RegOpenKeyA
RegEnumValueA
RegEnumKeyExA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegCreateKeyA
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeNameA
GetTokenInformation

Exports

Exports

BindTexture2D
CreateImagePropBuffer
DVDMRWVRFinalizeDisc
EnumBaseImageDataPropertyRelease
EnumBaseImageDataPropertyReset
EnumFlashSettingNext
EnumItemRelease
EnumMCCustomSetNumberNext
EnumRelCamSettingDataReset
GetFunctions_i
GetImageItemProperty
GetNumHarddisks
GetRAWDevelopFaculties
ImportDataTrack
IsSupportParamValue
Malloc
MallocHost
MemcpyFromSymbol
Memset3D
SetDoubleForHost
WriteDevParamToRAW

Sections

.text
Size: 144KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

426fba11f8ba4844063e400fc2b00942

Headers

File Characteristics

Imports

winspool.drv

user32

setupapi

shlwapi

gdi32

oleaut32

kernel32

advapi32

Exports

Exports

Sections

.text Size: 144KB - Virtual size: 144KB

.data Size: 96KB - Virtual size: 136KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 144KB - Virtual size: 144KB

.data
Size: 96KB - Virtual size: 136KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 4KB