1f82c01f2554613ef1d2905b65eff47bdcdf8dfd95b604367c6eaae5cb97250f

Sharing

Copy URL Twitter E-mail

General

Target

1f82c01f2554613ef1d2905b65eff47bdcdf8dfd95b604367c6eaae5cb97250f
Size

259KB
MD5

3faa903addfd1e1a6557beea8ca5c825
SHA1

e88b8c98d599068a42c468f6ecfa58757e4d91a2
SHA256

1f82c01f2554613ef1d2905b65eff47bdcdf8dfd95b604367c6eaae5cb97250f
SHA512

5ee4139fa951988fb65b9d8935c49b5476bec29337b993689772e434436ff26383477693eddb25a274f534011ecf48e604e198025906d0f0acf9bbfd6231d990
SSDEEP

6144:KsCn0r9iK2iZkhFVzjr7/BIgAYifQNcUN0bNrJ8:Pa0k3bPVz/NImiGk5q

Score

N/A

Malware Config

Signatures

Files

1f82c01f2554613ef1d2905b65eff47bdcdf8dfd95b604367c6eaae5cb97250f
.zip
肩ȁ[_v1521/hookp.dll
.dll windows x86

93dc801da727351846e6a152d0cf7410

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
CreateFileA
ExitProcess
FreeEnvironmentStringsA
GetACP
GetCPInfo
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
HeapAlloc
HeapFree
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetFilePointer
SetHandleCount
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
WriteFile

gdi32

CombineRgn
CreatePolygonRgn
CreateRectRgn
DeleteObject
PtInRegion
SetRectRgn

user32

CallNextHookEx
EnumThreadWindows
MessageBoxA
SendMessageA
SetWindowsHookExA
UnhookWindowsHookEx
wsprintfA

Exports

Exports

GDIBitmapGetOneCaptureRgn
___CPPdebugHook
kh_hook
kh_unhook
mh_hook
mh_unhook

Sections

.text
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
肩ȁ[_v1521/readme.txt
肩ȁ[_v1521/setting.ini
肩ȁ[_v1521/肩ȁ[.exe
.exe windows x86

872232bbe91f525142852b85b2329d45

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
ord17

kernel32

GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
IsValidCodePage
FindFirstFileExA
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CreateDirectoryW
HeapReAlloc
DecodePointer
GetStringTypeW
GetModuleFileNameA
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetFileType
HeapFree
GetACP
WriteFile
GetStdHandle
GetModuleHandleExW
ExitProcess
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
GetFullPathNameA
GetDriveTypeW
ReadFile
LoadLibraryExW
TlsFree
TlsSetValue
TlsGetValue
SetStdHandle
FlushFileBuffers
CreateFileW
WriteConsoleW
HeapSize
FindNextFileA
FindFirstFileA
DeleteFileA
GetLocalTime
FindClose
GetLastError
GetShortPathNameA
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetComputerNameA
GetWindowsDirectoryA
GetSystemDirectoryA
GetCommandLineA
GetSystemInfo
WinExec
GlobalMemoryStatus
GetVersion
WideCharToMultiByte
LoadLibraryA
MultiByteToWideChar
GetProcAddress
FreeLibrary
GetTickCount
HeapAlloc
Sleep
TlsAlloc
EncodePointer
SetLastError
SetEndOfFile
RaiseException
RtlUnwind
TerminateProcess
GetCurrentProcess
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
CloseHandle

user32

SetWindowTextA
GetSystemMetrics
GetDC
ReleaseDC
SendMessageA
CreateWindowExA
DestroyWindow
ShowWindow
SetWindowPos
GetAsyncKeyState
SetActiveWindow
GetWindowRect
MessageBoxA
ShowCursor
SetCursorPos
LoadIconA
LoadCursorA
FillRect
GetSysColor
AdjustWindowRectEx
InvalidateRect
EndPaint
BeginPaint
GetCursorPos
GetActiveWindow
MoveWindow
UnregisterClassA
RegisterClassA
PostQuitMessage
DefWindowProcA
SetClassLongA
GetClassLongA
SetWindowLongA
GetWindowLongA
InflateRect
DrawFocusRect
GetClientRect
TabbedTextOutA
DrawTextA
IsWindowEnabled
EnableWindow
GetFocus
SetFocus
GetDlgCtrlID
IsDlgButtonChecked
GetDlgItemTextA
CallWindowProcA
PostMessageA
FindWindowA
MsgWaitForMultipleObjects
MapVirtualKeyA
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
EnumDisplaySettingsA
ChangeDisplaySettingsA

gdi32

MoveToEx
SetDIBColorTable
CreateDIBSection
GetTextMetricsA
SetStretchBltMode
StretchBlt
SetPixel
SetBkColor
SelectPalette
RealizePalette
Rectangle
LineTo
GetTextExtentPoint32A
GetPixel
Ellipse
DeleteDC
CreatePen
CreatePalette
CreateCompatibleDC
SetTextColor
SetBkMode
SelectObject
GetStockObject
DeleteObject
CreateSolidBrush
CreateFontIndirectA
BitBlt
GetDeviceCaps

comdlg32

GetSaveFileNameA
GetOpenFileNameA
ChooseColorA

advapi32

GetUserNameA

shell32

ShellExecuteA
ShellExecuteExA
SHGetSpecialFolderPathA

ole32

CLSIDFromProgID
CoInitializeEx
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoCreateInstance
IIDFromString
CoUninitialize

oleaut32

SafeArrayUnaccessData
OleLoadPicture
SafeArrayCopy
VariantInit
VariantClear
SysAllocString
SysFreeString
SafeArrayCreate
SafeArrayGetDim
SafeArrayPutElement
SafeArrayGetElement
VariantChangeType
VariantCopyInd
VariantCopy
SafeArrayGetVartype
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocStringByteLen
SafeArrayAccessData

msimg32

GradientFill

winmm

timeBeginPeriod
timeEndPeriod
sndPlaySoundA
timeGetTime
mciSendStringA
timeGetDevCaps

Sections

.text
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93dc801da727351846e6a152d0cf7410

Headers

File Characteristics

Imports

kernel32

gdi32

user32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 32KB

.data Size: 9KB - Virtual size: 12KB

.tls Size: 512B - Virtual size: 4KB

.idata Size: 1KB - Virtual size: 4KB

.edata Size: 512B - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 4KB

872232bbe91f525142852b85b2329d45

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

msimg32

winmm

Sections

.text Size: 270KB - Virtual size: 269KB

.rdata Size: 69KB - Virtual size: 68KB

.data Size: 3KB - Virtual size: 9KB

.rsrc Size: 50KB - Virtual size: 49KB

.text
Size: 30KB - Virtual size: 32KB

.data
Size: 9KB - Virtual size: 12KB

.tls
Size: 512B - Virtual size: 4KB

.idata
Size: 1KB - Virtual size: 4KB

.edata
Size: 512B - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 4KB

.text
Size: 270KB - Virtual size: 269KB

.rdata
Size: 69KB - Virtual size: 68KB

.data
Size: 3KB - Virtual size: 9KB

.rsrc
Size: 50KB - Virtual size: 49KB