d7bd224b2ef0014c679046c917becfface5f5aba2fbdb7dd3c17fe964c3cee97

Sharing

Copy URL Twitter E-mail

General

Target

d7bd224b2ef0014c679046c917becfface5f5aba2fbdb7dd3c17fe964c3cee97
Size

4.7MB
MD5

e9679980aa73cfc7cf00f3da7949c661
SHA1

53ba9e3a3a10ae0e72df4b3632d8d4135eb540b6
SHA256

d7bd224b2ef0014c679046c917becfface5f5aba2fbdb7dd3c17fe964c3cee97
SHA512

002aac023e1bbe3bbbf153ebc5462970aa98c84badea6bc1b8d333c98a5ed91540928b8848a9928607e12c0a1296a12424b2c2b0753e23afeb537249f04db8bc
SSDEEP

98304:uVS4lyfvsVqltyD5DhADNlXQ2orLmKeLDCVvANLA1pOuI8F7fqLmLhPR6x7:vkPD52

Score

N/A

Malware Config

Signatures

Files

d7bd224b2ef0014c679046c917becfface5f5aba2fbdb7dd3c17fe964c3cee97
.exe windows x64

b02866d345388e4d3481586e3c9d8d26

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

RegCloseKey
RegDeleteKeyValueW
RegOpenKeyW
RegSetKeyValueW
SystemFunction036

comdlg32

GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameW

gdi32

BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBSection
CreateFontIndirectA
CreateRectRgn
DeleteDC
DeleteObject
GetDIBits
GetObjectA
GetStockObject
GetTextExtentExPointW
GetTextExtentPoint32W
GetTextMetricsA
SelectClipRgn
SelectObject
SetBkMode
SetDCBrushColor
SetDIBitsToDevice
SetStretchBltMode
SetTextColor
StretchBlt
StretchDIBits
TextOutW

iphlpapi

GetAdaptersInfo

kernel32

AddVectoredExceptionHandler
CloseHandle
CreateDirectoryW
CreateEventA
CreateFileW
CreateMutexA
CreateSemaphoreA
CreateThread
DebugBreak
DeleteCriticalSection
DeleteFileA
DuplicateHandle
EnterCriticalSection
ExitThread
FormatMessageA
FreeLibrary
GetCommandLineA
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetExitCodeThread
GetHandleInformation
GetLastError
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessAffinityMask
GetStartupInfoA
GetSystemInfo
GetSystemTimeAsFileTime
GetThreadContext
GetThreadPriority
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitializeCriticalSection
IsDBCSLeadByteEx
IsDebuggerPresent
LeaveCriticalSection
LoadLibraryW
LocalFree
LockFileEx
MoveFileA
MultiByteToWideChar
OpenProcess
OutputDebugStringA
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSemaphore
RemoveVectoredExceptionHandler
ResetEvent
ResumeThread
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetCurrentDirectoryA
SetCurrentDirectoryW
SetEvent
SetLastError
SetProcessAffinityMask
SetThreadContext
SetThreadPriority
SetUnhandledExceptionFilter
Sleep
SuspendThread
SwitchToThread
TerminateProcess
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
TryEnterCriticalSection
UnhandledExceptionFilter
UnlockFileEx
VirtualAlloc
VirtualFree
VirtualLock
VirtualProtect
VirtualQuery
VirtualUnlock
WaitForMultipleObjects
WaitForSingleObject
WaitForSingleObjectEx
WideCharToMultiByte
__C_specific_handler
lstrlenW

msimg32

AlphaBlend

msvcrt

___lc_codepage_func
___mb_cur_max_func
__argv
__doserrno
__getmainargs
__initenv
__iob_func
__set_app_type
__setusermatherr
__lconv_init
_acmdln
_aligned_free
_aligned_malloc
_amsg_exit
_assert
_beginthread
_beginthreadex
_cexit
_commit
_difftime64
_endthreadex
_errno
_fmode
_fpreset
_fileno
_fdopen
_filelengthi64
_fileno
_fstat64
_initterm
_localtime64
_onexit
_open_osfhandle
_setjmp
_snwprintf
_strdup
_strdup
_stricmp
_strnicmp
_strnicmp
_time64
_ultoa
_vsnprintf
_vsnwprintf
_wfopen
_wgetenv
abort
atoi
calloc
clearerr
clock
exit
fclose
feof
ferror
fflush
fgetc
fgetpos
fgets
fopen
fprintf
fputc
fputs
fread
free
frexp
fseek
fsetpos
ftell
fwrite
getenv
isalnum
isspace
localeconv
log10
longjmp
malloc
mbstowcs
memcmp
memcpy
memmove
memset
printf
puts
qsort
raise
rand
realloc
remove
rename
setlocale
signal
sinh
sprintf
srand
sscanf
strchr
strcmp
strcpy
strerror
strftime
strlen
strncmp
strncpy
strpbrk
strrchr
strstr
strtol
strtoul
tolower
toupper
vfprintf
wcscmp
wcslen
wcstombs

ole32

CoCreateInstance
CoInitialize
CoLockObjectExternal
CoTaskMemFree
CoUninitialize
OleInitialize
PropVariantClear
RegisterDragDrop
ReleaseStgMedium
StringFromCLSID

oleaut32

VariantClear
VariantInit

shell32

DragQueryFileA
SHCreateDirectoryExA
SHGetFolderPathA
SHGetKnownFolderPath
SHGetSpecialFolderPathW
ShellExecuteW
Shell_NotifyIconA
Shell_NotifyIconW

user32

AdjustWindowRect
BeginPaint
ClientToScreen
CloseClipboard
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DestroyMenu
DestroyWindow
DispatchMessageA
DrawTextW
EmptyClipboard
EndPaint
FillRect
FindWindowA
FlashWindow
FrameRect
GetAsyncKeyState
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetDesktopWindow
GetForegroundWindow
GetKeyState
GetMessageA
GetSystemMetrics
GetWindowRect
InsertMenuA
LoadCursorA
LoadIconA
MessageBoxA
MessageBoxW
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
RegisterClassW
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
SendMessageA
SetCapture
SetClipboardData
SetCursor
SetForegroundWindow
SetLayeredWindowAttributes
SetWindowPos
ShowWindow
TrackMouseEvent
TrackPopupMenu
TranslateMessage

winmm

waveInAddBuffer
waveInClose
waveInGetDevCapsW
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveInStop
waveInUnprepareHeader
waveOutClose
waveOutGetDevCapsW
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite

ws2_32

WSAAddressToStringA
WSAGetLastError
WSAStartup
WSAStringToAddressA
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getsockopt
htonl
htons
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
send
sendto
setsockopt
socket

Exports

Exports

alAuxiliaryEffectSlotf
alAuxiliaryEffectSlotfv
alAuxiliaryEffectSloti
alAuxiliaryEffectSlotiv
alBuffer3f
alBuffer3i
alBufferData
alBufferSamplesSOFT
alBufferSubDataSOFT
alBufferSubSamplesSOFT
alBufferf
alBufferfv
alBufferi
alBufferiv
alDeferUpdatesSOFT
alDeleteAuxiliaryEffectSlots
alDeleteBuffers
alDeleteEffects
alDeleteFilters
alDeleteFontsoundsSOFT
alDeletePresetsSOFT
alDeleteSoundfontsSOFT
alDeleteSources
alDisable
alDistanceModel
alDopplerFactor
alDopplerVelocity
alEffectf
alEffectfv
alEffecti
alEffectiv
alEnable
alFilterf
alFilterfv
alFilteri
alFilteriv
alFontsound2iSOFT
alFontsoundModulatoriSOFT
alFontsoundiSOFT
alFontsoundivSOFT
alGenAuxiliaryEffectSlots
alGenBuffers
alGenEffects
alGenFilters
alGenFontsoundsSOFT
alGenPresetsSOFT
alGenSoundfontsSOFT
alGenSources
alGetAuxiliaryEffectSlotf
alGetAuxiliaryEffectSlotfv
alGetAuxiliaryEffectSloti
alGetAuxiliaryEffectSlotiv
alGetBoolean
alGetBooleanv
alGetBuffer3f
alGetBuffer3i
alGetBufferSamplesSOFT
alGetBufferf
alGetBufferfv
alGetBufferi
alGetBufferiv
alGetDouble
alGetDoublev
alGetEffectf
alGetEffectfv
alGetEffecti
alGetEffectiv
alGetEnumValue
alGetError
alGetFilterf
alGetFilterfv
alGetFilteri
alGetFilteriv
alGetFloat
alGetFloatv
alGetFontsoundModulatorivSOFT
alGetFontsoundivSOFT
alGetInteger
alGetInteger64SOFT
alGetInteger64vSOFT
alGetIntegerv
alGetListener3f
alGetListener3i
alGetListenerf
alGetListenerfv
alGetListeneri
alGetListeneriv
alGetPresetivSOFT
alGetProcAddress
alGetSoundfontivSOFT
alGetSource3dSOFT
alGetSource3f
alGetSource3i
alGetSource3i64SOFT
alGetSourcedSOFT
alGetSourcedvSOFT
alGetSourcef
alGetSourcefv
alGetSourcei
alGetSourcei64SOFT
alGetSourcei64vSOFT
alGetSourceiv
alGetString
alIsAuxiliaryEffectSlot
alIsBuffer
alIsBufferFormatSupportedSOFT
alIsEffect
alIsEnabled
alIsExtensionPresent
alIsFilter
alIsFontsoundSOFT
alIsPresetSOFT
alIsSoundfontSOFT
alIsSource
alListener3f
alListener3i
alListenerf
alListenerfv
alListeneri
alListeneriv
alLoadSoundfontSOFT
alMidiEventSOFT
alMidiGainSOFT
alMidiPauseSOFT
alMidiPlaySOFT
alMidiResetSOFT
alMidiSoundfontSOFT
alMidiSoundfontvSOFT
alMidiStopSOFT
alMidiSysExSOFT
alPresetFontsoundsSOFT
alPresetiSOFT
alPresetivSOFT
alProcessUpdatesSOFT
alSoundfontPresetsSOFT
alSource3dSOFT
alSource3f
alSource3i
alSource3i64SOFT
alSourcePause
alSourcePausev
alSourcePlay
alSourcePlayv
alSourceQueueBuffers
alSourceRewind
alSourceRewindv
alSourceStop
alSourceStopv
alSourceUnqueueBuffers
alSourcedSOFT
alSourcedvSOFT
alSourcef
alSourcefv
alSourcei
alSourcei64SOFT
alSourcei64vSOFT
alSourceiv
alSpeedOfSound
alcCaptureCloseDevice
alcCaptureOpenDevice
alcCaptureSamples
alcCaptureSamplesLoopback
alcCaptureStart
alcCaptureStop
alcCloseDevice
alcCreateContext
alcDestroyContext
alcDevicePauseSOFT
alcDeviceResumeSOFT
alcGetContextsDevice
alcGetCurrentContext
alcGetEnumValue
alcGetError
alcGetInteger64vSOFT
alcGetIntegerv
alcGetProcAddress
alcGetString
alcGetThreadContext
alcIsExtensionPresent
alcIsRenderFormatSupportedSOFT
alcLoopbackOpenDeviceSOFT
alcMakeContextCurrent
alcOpenDevice
alcProcessContext
alcRenderSamplesSOFT
alcSetThreadContext
alcSuspendContext

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 443KB - Virtual size: 442KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 61KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/81
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/92
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b02866d345388e4d3481586e3c9d8d26

Headers

File Characteristics

Imports

advapi32

comdlg32

gdi32

iphlpapi

kernel32

msimg32

msvcrt

ole32

oleaut32

shell32

user32

winmm

ws2_32

Exports

Exports

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.data Size: 35KB - Virtual size: 35KB

.rdata Size: 443KB - Virtual size: 442KB

.rodata Size: 3KB - Virtual size: 3KB

.pdata Size: 53KB - Virtual size: 52KB

.xdata Size: 61KB - Virtual size: 60KB

.bss Size: - Virtual size: 1.4MB

.edata Size: 5KB - Virtual size: 4KB

.idata Size: 13KB - Virtual size: 12KB

.CRT Size: 512B - Virtual size: 128B

.tls Size: 512B - Virtual size: 16B

.rsrc Size: 44KB - Virtual size: 44KB

.reloc Size: 6KB - Virtual size: 5KB

/4 Size: 4KB - Virtual size: 4KB

/19 Size: 552KB - Virtual size: 551KB

/31 Size: 34KB - Virtual size: 34KB

/45 Size: 42KB - Virtual size: 41KB

/57 Size: 20KB - Virtual size: 19KB

/70 Size: 7KB - Virtual size: 7KB

/81 Size: 152KB - Virtual size: 152KB

/92 Size: 7KB - Virtual size: 7KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 35KB - Virtual size: 35KB

.rdata
Size: 443KB - Virtual size: 442KB

.rodata
Size: 3KB - Virtual size: 3KB

.pdata
Size: 53KB - Virtual size: 52KB

.xdata
Size: 61KB - Virtual size: 60KB

.bss
Size: - Virtual size: 1.4MB

.edata
Size: 5KB - Virtual size: 4KB

.idata
Size: 13KB - Virtual size: 12KB

.CRT
Size: 512B - Virtual size: 128B

.tls
Size: 512B - Virtual size: 16B

.rsrc
Size: 44KB - Virtual size: 44KB

.reloc
Size: 6KB - Virtual size: 5KB

/4
Size: 4KB - Virtual size: 4KB

/19
Size: 552KB - Virtual size: 551KB

/31
Size: 34KB - Virtual size: 34KB

/45
Size: 42KB - Virtual size: 41KB

/57
Size: 20KB - Virtual size: 19KB

/70
Size: 7KB - Virtual size: 7KB

/81
Size: 152KB - Virtual size: 152KB

/92
Size: 7KB - Virtual size: 7KB