1014e9c2073428f2e9643b281570376fb162e392cd2f4efce16e9d5c4d1d5d20

Sharing

Copy URL

Twitter E-mail

General

Target

1014e9c2073428f2e9643b281570376fb162e392cd2f4efce16e9d5c4d1d5d20
Size

1.3MB
MD5

57bbaf9d3cd44e45ae7fe3a4b068b8ce
SHA1

0e1492856493c48eb9ec849caa549656d3fe0942
SHA256

1014e9c2073428f2e9643b281570376fb162e392cd2f4efce16e9d5c4d1d5d20
SHA512

195de715bd6c20c2bd1caa1d5725d5c837e95a7e467553befc3c3f83ce05424e8a21cfec5830940893f29c7c8a119a17f58dafefab3f77fdaa3da7a6cf5d054a
SSDEEP

24576:5LIYgNyvZ/jdUmzUm7Mb0qXoTp6XU/yUDTu434R73UFbmYGRaRn4QVGqpdS429Nb:5WlQHpdSRGqYsGm4b0

Score

N/A

Malware Config

Signatures

Files

1014e9c2073428f2e9643b281570376fb162e392cd2f4efce16e9d5c4d1d5d20
.exe windows x86

f697c5dd589f145db5732c81239c60ec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdiplus

GdipCreateBitmapFromScan0
GdipDrawImagePointRectI
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipDrawImageI
GdipDeleteGraphics
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipFree
GdipGetImageEncoders
GdiplusShutdown
GdiplusStartup
GdipCreateFromHDC
GdipDisposeImage
GdipAlloc

winmm

timeGetTime
timeSetEvent

avutil-50

ord60
ord32
ord31
ord45
ord12

avformat-52

ord49
ord62
ord43
ord487
ord79
ord78
ord496
ord70
ord81
ord271

avcodec-52

ord557
ord579
ord519
ord630
ord602
ord541
ord595
ord533
ord534
ord597
ord620
ord558
ord582
ord514
ord513
ord632
ord626
ord616
ord601
ord607

swscale-0

ord69
ord63
ord77

libdvd

MyDVDClose
MyDVDGetInfo
MyDVDOpen
MyDVDRead
MyDVDSeek
MyDVDSetArea
MyDvdSetStopPos

kernel32

ReleaseSemaphore
GetSystemInfo
VirtualAlloc
VirtualFree
SetThreadPriority
CreateThread
lstrcmpiW
GetThreadPriority
GetCurrentThread
InterlockedExchange
GetModuleHandleA
GlobalUnlock
GlobalLock
GetVersionExA
LoadLibraryA
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
LocalFree
GlobalAlloc
GlobalSize
CopyFileW
GlobalFree
GetCurrentProcessId
MoveFileW
DeleteFileW
GetStringTypeExW
GetThreadLocale
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
GetShortPathNameW
CreateFileW
CompareStringA
GetLocaleInfoW
lstrcmpA
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GetPrivateProfileIntW
ResumeThread
SuspendThread
FindNextFileW
FileTimeToSystemTime
FileTimeToLocalFileTime
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
CreateSemaphoreW
GetAtomNameW
SystemTimeToFileTime
SetErrorMode
LocalFileTimeToFileTime
SetFileTime
SetFileAttributesW
GetFileAttributesW
GetFileTime
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
GetSystemTimeAsFileTime
VirtualProtect
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
HeapSize
HeapReAlloc
ExitProcess
ExitThread
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
QueryPerformanceCounter
FatalAppExitA
GetCPInfo
GetOEMCP
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
CreateFileA
SetEnvironmentVariableA
WaitForSingleObject
WaitForMultipleObjects
SetEvent
GetCurrentThreadId
DuplicateHandle
ResetEvent
CreateEventW
InterlockedDecrement
InterlockedIncrement
lstrcpynW
lstrcmpW
GetVersionExW
MulDiv
FreeResource
CreateDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
SetLastError
GetModuleHandleW
GetModuleFileNameW
Sleep
FormatMessageW
GetACP
GetFileSizeEx
GetWindowsDirectoryW
MultiByteToWideChar
lstrlenA
WinExec
lstrcatW
lstrcpyW
DeleteCriticalSection
InitializeCriticalSection
OutputDebugStringW
GetTickCount
WideCharToMultiByte
lstrlenW
GetLastError
GetCurrentProcess
CloseHandle
FindResourceW
LoadResource
LockResource
SizeofResource
FreeLibrary
GetProcAddress
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
SetFilePointerEx
GlobalGetAtomNameW

user32

TrackPopupMenuEx
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
GetDlgItem
EndDeferWindowPos
BeginDeferWindowPos
SetActiveWindow
GetLastActivePopup
GetForegroundWindow
GetWindowTextW
GetWindowTextLengthW
SetFocus
RemovePropW
GetClassLongW
CallNextHookEx
SetWindowsHookExW
IsChild
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
RemoveMenu
InsertMenuW
GetMenuStringW
GetMenuState
CheckMenuItem
EnableMenuItem
ModifyMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
SetDlgItemTextW
IsDlgButtonChecked
IsDialogMessageW
SetWindowTextW
MoveWindow
ShowWindow
IsWindowEnabled
ScrollWindowEx
GetKeyNameTextW
MapVirtualKeyW
GetWindowThreadProcessId
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamW
GetActiveWindow
CharUpperW
GetMenuItemInfoW
DestroyMenu
PostQuitMessage
WaitMessage
ValidateRect
ShowOwnedPopups
GetSysColorBrush
GetDialogBaseUnits
UnregisterClassW
DeleteMenu
TranslateAcceleratorW
SetMenu
BringWindowToTop
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
SetParent
UnionRect
GetDCEx
LockWindowUpdate
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
ShowScrollBar
IsWindowVisible
GetMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
GetClassInfoExW
GetClassInfoW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
SystemParametersInfoA
GetWindowPlacement
GetWindow
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetRectEmpty
GetQueueStatus
RegisterWindowMessageW
PostThreadMessageW
wvsprintfW
MsgWaitForMultipleObjects
PeekMessageW
SetWindowPos
GetDesktopWindow
GetPropW
SetPropW
GetClassNameW
WindowFromPoint
GetWindowDC
DrawIconEx
CreateWindowExW
SystemParametersInfoW
DefWindowProcW
DestroyWindow
RegisterClassW
DestroyIcon
UpdateWindow
ReleaseCapture
GetMessageW
SetCapture
GetCapture
EqualRect
ScreenToClient
DrawIcon
IsIconic
AppendMenuW
GetSystemMenu
LoadIconW
DrawFrameControl
GetSubMenu
SetForegroundWindow
LoadMenuW
GetFocus
GetCursorPos
CopyIcon
LoadCursorW
IsWindow
SetWindowLongW
SetCursor
DestroyCursor
DispatchMessageW
TranslateMessage
GetKeyState
EndPaint
IntersectRect
BeginPaint
OffsetRect
wsprintfW
KillTimer
SetTimer
ExitWindowsEx
SetWindowRgn
GetWindowLongW
SendMessageW
RedrawWindow
GetScrollPos
InflateRect
DrawFocusRect
DrawEdge
IsRectEmpty
CopyRect
FillRect
SetRect
GetSystemMetrics
ReleaseDC
GetDC
PtInRect
GetClientRect
EnableWindow
LoadImageW
InvalidateRect
GetWindowRect
GetParent
GetSysColor
UnregisterClassA
PostMessageW

gdi32

TextOutW
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
GetClipBox
ExcludeClipRect
GetBitmapBits
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
CreateRectRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
DeleteDC
IntersectClipRect
GetDeviceCaps
StartDocW
PtVisible
CreateDIBitmap
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
DeleteObject
CreateDiscardableBitmap
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
PolylineTo
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
CreateBitmap
SelectPalette
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CopyMetaFileW
CreateDCW
GetTextMetricsW
GetCharWidthW
CreateFontW
StretchDIBits
GetBkColor
CreatePen
Rectangle
CreateRoundRectRgn
SelectObject
CreateFontIndirectW
CreateSolidBrush
GetTextExtentPoint32W
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
GetObjectW
RectVisible
GetStockObject

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

advapi32

RegQueryValueExW
RegCreateKeyExW
RegQueryValueW
RegOpenKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegSetValueExW
RegDeleteKeyW
RegSetValueW
RegOpenKeyW
RegDeleteValueW
RegEnumKeyW
RegCreateKeyW
RegCloseKey

shell32

DragQueryFileW
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
SHGetFileInfoW
ExtractIconW
DragFinish
SHBrowseForFolderW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathRemoveExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsDirectoryW

ole32

CoTaskMemAlloc
CoInitialize
CoFreeUnusedLibraries
CoInitializeEx
CoUninitialize
CoCreateInstance
CoTaskMemFree
CLSIDFromString
StringFromGUID2
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
CreateBindCtx
ReleaseStgMedium
StringFromCLSID
CoTreatAsClass
OleDuplicateData
CoDisconnectObject
ReadClassStg

oleaut32

VarBstrFromDate
VarDecFromStr
VarBstrFromDec
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VarDateFromStr
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
OleLoadPicture
SysAllocString
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock

ws2_32

closesocket
send
ntohs
inet_ntoa
WSAStartup
WSACleanup
gethostbyname
WSAAsyncSelect
recvfrom
sendto
connect
WSASetLastError
getpeername
getsockname
WSAGetLastError
bind
select
socket
recv
accept
htonl
htons
inet_addr

Sections

.text
Size: 980KB - Virtual size: 978KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 240KB - Virtual size: 236KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 302KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f697c5dd589f145db5732c81239c60ec

Headers

File Characteristics

Imports

gdiplus

winmm

avutil-50

avformat-52

avcodec-52

swscale-0

libdvd

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

ws2_32

Sections

.text Size: 980KB - Virtual size: 978KB

.rdata Size: 240KB - Virtual size: 236KB

.data Size: 28KB - Virtual size: 302KB

.rsrc Size: 48KB - Virtual size: 45KB

.text
Size: 980KB - Virtual size: 978KB

.rdata
Size: 240KB - Virtual size: 236KB

.data
Size: 28KB - Virtual size: 302KB

.rsrc
Size: 48KB - Virtual size: 45KB