735a0b23ec50330e633443fe28f4307d46e4c2c7c4c49a8836b26289357d7e1a

Sharing

Copy URL Twitter E-mail

General

Target

735a0b23ec50330e633443fe28f4307d46e4c2c7c4c49a8836b26289357d7e1a
Size

1.2MB
MD5

f650e3ea69e58232998ce4103124011f
SHA1

75464a450c28fbdc001d35e2aeffad0ad00ef3d0
SHA256

735a0b23ec50330e633443fe28f4307d46e4c2c7c4c49a8836b26289357d7e1a
SHA512

1e6e647085c896059f8052b538e020de6a82db2e499c10df5dcde47a4ee7a4e1ffa0cc9df7ecab7acd6e2eae9e5d5f7765cc2ed0fbf97149b77c849a8a580b3e
SSDEEP

24576:nQvNpJrvfuhgaYsRqJgVJnRwu4Mj2WyLumzQ5m3AGPlMdT/Ng8lqnwXCCN76V+8+:Qv5ygaYsRqJgVJnRrbj2WyOpGNU8TO0E

Score

N/A

Malware Config

Signatures

Files

735a0b23ec50330e633443fe28f4307d46e4c2c7c4c49a8836b26289357d7e1a
.exe windows x86

7cd4f03fbcb2b7227264b1fce14d9194

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mciGetErrorStringA
timeGetTime
timeKillEvent
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
mciSendCommandA
timeSetEvent

kernel32

GetCPInfo
GetOEMCP
GetProcessVersion
TlsGetValue
RtlUnwind
HeapAlloc
HeapFree
TerminateProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetSystemTimeAsFileTime
RaiseException
CreateThread
ExitThread
LocalReAlloc
TlsSetValue
LoadResource
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetHandleCount
GetStdHandle
GetFileType
SetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GlobalFlags
TlsAlloc
LocalAlloc
SetThreadPriority
lstrcmpA
SetErrorMode
IsBadReadPtr
LocalFree
IsBadWritePtr
SetEndOfFile
WriteFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
ReadFile
CreateFileA
lstrcpynA
GetLastError
GlobalGetAtomNameA
GetVersion
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
GetACP
lstrlenA
GlobalDeleteAtom
GetDriveTypeA
lstrcpyA
InterlockedDecrement
InterlockedIncrement
GetStartupInfoA
SetLastError
GetCommandLineA
LoadLibraryA
ExitProcess
GetTickCount
FindResourceA
FreeLibrary
UnhandledExceptionFilter
LockResource
OutputDebugStringA
GetVersionExA
lstrcatA
SetFileAttributesA
GetTempFileNameA
DeleteFileA
GetFileAttributesA
GetTempPathA
GetModuleHandleA
GetProcAddress
GlobalReAlloc
GlobalHandle
GlobalLock
GlobalUnlock
GlobalFree
SuspendThread
Sleep
SetEvent
CreateEventA
ResumeThread
GetShortPathNameA
CreateProcessA
WaitForSingleObject
CloseHandle
GetModuleFileNameA
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSection
GlobalAlloc
HeapSize
HeapReAlloc

user32

IsWindowVisible
SetFocus
GetFocus
GetSysColor
MapWindowPoints
SetWindowTextA
ShowWindow
IsWindowEnabled
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
ValidateRect
GetActiveWindow
GetClassNameA
PtInRect
LoadCursorA
GetSysColorBrush
DestroyMenu
GetTopWindow
WinHelpA
GetClassInfoA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextA
GetDlgCtrlID
GetKeyState
DestroyWindow
SetWindowsHookExA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowLongA
IsIconic
GetWindowPlacement
DrawTextA
TabbedTextOutA
ClientToScreen
CharNextA
SendMessageA
DialogBoxParamA
LoadIconA
FindWindowA
SetForegroundWindow
RegisterWindowMessageA
RegisterClassA
CreateWindowExA
SetCursor
DefWindowProcA
GetCursorPos
SystemParametersInfoA
IsWindow
GetForegroundWindow
SetCapture
GetCapture
ReleaseCapture
LoadStringA
LoadBitmapA
SetWindowRgn
AdjustWindowRectEx
GetSystemMetrics
SetWindowPos
BeginPaint
EndPaint
EndDialog
MessageBoxA
PeekMessageA
TranslateMessage
DispatchMessageA
CopyRect
UpdateWindow
EnableWindow
GetParent
GetAsyncKeyState
GetClientRect
SetRect
GetWindowLongA
InvalidateRect
OffsetRect
GetDC
GetWindowRect
ReleaseDC
MsgWaitForMultipleObjects
PostMessageA
SetTimer
KillTimer
wsprintfA
CallNextHookEx
GetClassLongA
GetMessageA
PostQuitMessage
GrayStringA

gdi32

CreateCompatibleBitmap
BitBlt
StretchBlt
GetStockObject
CreateDIBSection
DeleteDC
StretchDIBits
SetBrushOrgEx
SetStretchBltMode
PatBlt
CreateDIBitmap
GetTextExtentPoint32A
GetTextMetricsA
CreateFontIndirectA
CreatePalette
CombineRgn
CreateRectRgn
CreatePolygonRgn
GetPixel
GetObjectA
RealizePalette
SelectPalette
GetClipBox
TextOutA
SetTextColor
GetCharABCWidthsA
SetTextAlign
SetBkMode
SaveDC
RestoreDC
SetBkColor
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
PtVisible
RectVisible
Escape
ExtTextOutA
CreateBitmap
DeleteObject
CreateCompatibleDC
SelectObject

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegDeleteValueA
RegCreateKeyExA

comctl32

ord17

ole32

StgOpenStorage
CoInitialize
CoUninitialize
StgIsStorageFile
CoCreateInstance

Exports

Exports

ScreenSaverConfigureDialog
ScreenSaverProc

Sections

.text
Size: 440KB - Virtual size: 439KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

IS_MMX_T
Size: 4KB - Virtual size: 46B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 2.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

QMAD_TEX
Size: 4KB - Virtual size: 165B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 692KB - Virtual size: 691KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7cd4f03fbcb2b7227264b1fce14d9194

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

winspool.drv

advapi32

comctl32

ole32

Exports

Exports

Sections

.text Size: 440KB - Virtual size: 439KB

IS_MMX_T Size: 4KB - Virtual size: 46B

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 72KB - Virtual size: 2.8MB

QMAD_TEX Size: 4KB - Virtual size: 165B

.rsrc Size: 692KB - Virtual size: 691KB

.text
Size: 440KB - Virtual size: 439KB

IS_MMX_T
Size: 4KB - Virtual size: 46B

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 72KB - Virtual size: 2.8MB

QMAD_TEX
Size: 4KB - Virtual size: 165B

.rsrc
Size: 692KB - Virtual size: 691KB