8b525856f8c24d80fdaf518e0788a9a3af88ad4179646dce8f04f7d770c3d3f2

Sharing

Copy URL Twitter E-mail

General

Target

8b525856f8c24d80fdaf518e0788a9a3af88ad4179646dce8f04f7d770c3d3f2
Size

964KB
MD5

78e481e27ac779a03d0eb0988306a17d
SHA1

b2f75126e966e78ffe804274b09238b62113fecc
SHA256

8b525856f8c24d80fdaf518e0788a9a3af88ad4179646dce8f04f7d770c3d3f2
SHA512

593c662043ba0eb513f9a4f429862610ba6bc0df4ea8022645a4852fea2e43a5f369f90ff504a060ae927e6438bf197db8535278e5394049ae90e6d6d31cba12
SSDEEP

24576:UczGLKC6yllnzlkzSRGPfT0m99oT+ahXE:3GLn/zlYS2voTthE

Score

N/A

Malware Config

Signatures

Files

8b525856f8c24d80fdaf518e0788a9a3af88ad4179646dce8f04f7d770c3d3f2
.exe windows x86

31b6560ca372727234b21329f10d548a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

kernel32

SetFilePointer
VirtualQuery
MapViewOfFile
UnmapViewOfFile
GetStringTypeExW
WideCharToMultiByte
IsBadReadPtr
GlobalUnlock
GlobalLock
GetSystemTime
GetFileSize
GetFileSizeEx
ReadFile
FlushViewOfFile
SetEndOfFile
FindClose
FlushFileBuffers
IsBadWritePtr
SetLastError
GetFullPathNameW
FindFirstFileW
CreateFileMappingW
VirtualAlloc
VirtualFree
TlsAlloc
HeapCreate
HeapDestroy
GetModuleFileNameA
QueryPerformanceCounter
WriteFile
TerminateProcess
GetStartupInfoW
GetModuleHandleA
CreateThread
ExitThread
HeapReAlloc
RtlUnwind
ExitProcess
InterlockedCompareExchange
LoadLibraryA
LCMapStringW
LCMapStringA
GetUserDefaultLCID
GetVersionExA
TlsSetValue
TlsGetValue
HeapSize
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetTickCount
GetSystemInfo
GetTempFileNameW
GetTempPathW
GetSystemTimeAsFileTime
SetFileTime
CreateFileW
ReleaseMutex
ResetEvent
ReleaseSemaphore
CreateSemaphoreW
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetOEMCP
GetCPInfo
CreateMutexW
SetEvent
DeleteFileW
CreateEventW
Sleep
ResumeThread
CloseHandle
WaitForSingleObject
CompareStringW
SetStdHandle
CompareStringA
lstrcmpW
LoadLibraryW
GetProcAddress
GetCurrentProcessId
lstrlenA
lstrcpynA
LockResource
HeapFree
GetCurrentDirectoryW
SetErrorMode
GetFileAttributesW
lstrcpynW
lstrcmpiW
LoadLibraryExW
FindResourceW
LoadResource
SizeofResource
MultiByteToWideChar
FreeLibrary
GetLastError
GetModuleFileNameW
GetModuleHandleW
lstrcpyW
InterlockedIncrement
GetCurrentThreadId
GetProcessHeap
HeapAlloc
GetCurrentProcess
FlushInstructionCache
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetEnvironmentVariableA
VirtualProtect
TlsFree

user32

EnableWindow
SendDlgItemMessageW
DrawFocusRect
GetDlgCtrlID
GetCursorPos
GetDC
GetDlgItem
GetWindowTextLengthW
GetWindowTextW
EndDialog
ReleaseCapture
SetCapture
DestroyCursor
GetCapture
CreatePopupMenu
AppendMenuW
PostQuitMessage
SetMenuDefaultItem
GetForegroundWindow
SetForegroundWindow
GetSubMenu
PtInRect
GetClassNameW
MonitorFromPoint
GetMonitorInfoW
TrackPopupMenuEx
ModifyMenuW
IsMenu
DrawFrameControl
DrawEdge
GetMenuItemID
CallNextHookEx
FindWindowExW
SetRectEmpty
ReleaseDC
GetSystemMetrics
GetWindowDC
SetFocus
UnhookWindowsHookEx
RegisterWindowMessageW
GetSysColorBrush
FrameRect
GetSysColor
DrawTextW
GetMenuItemInfoW
SetMenuItemInfoW
GetMessagePos
WindowFromPoint
GetMenuItemCount
GetWindowThreadProcessId
IsWindowEnabled
MessageBeep
DestroyMenu
LoadBitmapW
SetRect
IntersectRect
ClientToScreen
ScrollDC
MessageBoxA
GetActiveWindow
DialogBoxParamW
KillTimer
SetTimer
GetKeyState
GetFocus
SetCursor
GetWindow
SystemParametersInfoW
MapWindowPoints
AdjustWindowRectEx
IsDialogMessageW
GetClipboardData
OpenClipboard
CloseClipboard
IsClipboardFormatAvailable
UnionRect
EqualRect
CopyRect
SetWindowsHookExW
IsWindowVisible
UpdateWindow
ScreenToClient
SetMenu
GetMenu
SetWindowTextW
PostMessageW
TranslateAcceleratorW
LoadStringA
GetParent
SendMessageW
EndPaint
BeginPaint
CreateDialogParamW
CallWindowProcW
GetWindowLongW
FillRect
InflateRect
IsRectEmpty
wsprintfW
IsWindow
InvalidateRect
GetClientRect
GetWindowRect
SetWindowPos
CharLowerW
MessageBoxW
DefWindowProcW
CharNextW
LoadMenuW
LoadAcceleratorsW
CreateWindowExW
GetClassInfoExW
LoadCursorW
LoadImageW
RegisterClassExW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
ShowWindow
SetWindowLongW
wvsprintfW
UnregisterClassW
OffsetRect
RemoveMenu

gdi32

SetStretchBltMode
CreateSolidBrush
GetTextExtentPoint32W
TextOutW
SelectClipRgn
ExcludeClipRect
IntersectClipRect
Ellipse
Rectangle
StretchBlt
SetDIBColorTable
GdiFlush
CreateDIBSection
SetPixel
LineTo
CreatePen
MoveToEx
ExtTextOutW
CreateBitmap
CreatePatternBrush
SetBkColor
SetBrushOrgEx
CreateFontIndirectW
SetTextColor
SetBkMode
GetObjectW
GetStockObject
BitBlt
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
PatBlt
DeleteObject
SetViewportOrgEx

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegCreateKeyExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegDeleteKeyW

shell32

SHCreateDirectoryExW
DragQueryFileW
DragAcceptFiles
DragFinish
SHBindToParent
SHGetDesktopFolder
ShellExecuteW

ole32

CoTaskMemRealloc
OleInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
OleUninitialize
CoInitialize
StringFromCLSID
CoTaskMemAlloc
CreateBindCtx

oleaut32

VarUI4FromStr

shlwapi

PathCanonicalizeW
PathRenameExtensionW
StrRetToStrW
PathIsDirectoryW
PathIsRelativeW

comctl32

InitCommonControlsEx
ImageList_LoadImageW
ImageList_Destroy
CreateStatusWindowW
ImageList_GetImageCount
ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize
ImageList_Create
ImageList_Add

wmvcore

WMCreateProfileManager

winmm

waveOutClose
waveOutOpen
waveOutUnprepareHeader
waveOutRestart
waveOutPause
waveOutGetPosition
waveOutWrite
waveOutPrepareHeader
waveOutReset

Sections

.text
Size: 648KB - Virtual size: 647KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 184KB - Virtual size: 182KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

31b6560ca372727234b21329f10d548a

Headers

File Characteristics

Imports

version

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

wmvcore

winmm

Sections

.text Size: 648KB - Virtual size: 647KB

.rdata Size: 116KB - Virtual size: 113KB

.data Size: 12KB - Virtual size: 15KB

.rsrc Size: 184KB - Virtual size: 182KB

.text
Size: 648KB - Virtual size: 647KB

.rdata
Size: 116KB - Virtual size: 113KB

.data
Size: 12KB - Virtual size: 15KB

.rsrc
Size: 184KB - Virtual size: 182KB