0a09bbd79d4f4767712ce81cc7fcc7f5714eb1deae29b5de737fa3ddc579ff0e

Sharing

Copy URL Twitter E-mail

General

Target

0a09bbd79d4f4767712ce81cc7fcc7f5714eb1deae29b5de737fa3ddc579ff0e
Size

1.2MB
MD5

0727a66a4d7dc8019238befd49d74e80
SHA1

1e460f9b7f53d489f30491f6f170984afac4d610
SHA256

0a09bbd79d4f4767712ce81cc7fcc7f5714eb1deae29b5de737fa3ddc579ff0e
SHA512

9afbeb1e77ce9103ae802c59e71ae44308254786abc9b6eedce7043affe09fe155173370c7ba92cfdc002c08ebc6e720fe0a89af45c5ad3c8b6d2744bc64012e
SSDEEP

24576:32V5wFYn296W44b23L4CVFLpgMc0Ft7VxI4oVE+pSItWtOSoy:32DwOnZW44kNpE0FJI4eE+pSItWtiy

Score

N/A

Malware Config

Signatures

Files

0a09bbd79d4f4767712ce81cc7fcc7f5714eb1deae29b5de737fa3ddc579ff0e
.exe windows x86

7f132a418329e2b786f5e4ff09350268

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathGetArgsW
PathFileExistsW
PathIsDirectoryW
PathAppendW
PathRemoveFileSpecW

kernel32

GetCurrentThreadId
SetPriorityClass
GetPriorityClass
GetVersionExW
HeapAlloc
GetProcessHeap
HeapFree
SetUnhandledExceptionFilter
Thread32Next
ResumeThread
SuspendThread
OpenThread
GetCurrentProcessId
Thread32First
CreateToolhelp32Snapshot
VirtualQuery
IsBadWritePtr
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnmapViewOfFile
FileTimeToSystemTime
FileTimeToLocalFileTime
MapViewOfFile
CreateFileMappingW
GetModuleHandleW
lstrcmpiW
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
WritePrivateProfileStringW
WaitForSingleObject
CreateProcessW
GetCommandLineW
InterlockedCompareExchange
VirtualProtect
SetThreadContext
GetThreadContext
VirtualFree
VirtualAlloc
SetLastError
WideCharToMultiByte
GetTempPathW
SetFilePointer
WriteFile
GetPrivateProfileStringW
FindFirstFileW
FindClose
CreateDirectoryW
CopyFileW
FindNextFileW
RaiseException
GetTickCount
GetSystemTime
SystemTimeToFileTime
lstrlenW
GlobalFindAtomW
GlobalAddAtomW
CreateMutexW
GetLastError
LeaveCriticalSection
EnterCriticalSection
FlushInstructionCache
GetCurrentProcess
GetProcessTimes
MulDiv
FlushFileBuffers
WriteConsoleW
SetStdHandle
GetConsoleMode
GetConsoleCP
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
IsValidCodePage
GetOEMCP
GetACP
GetCurrentThread
InterlockedDecrement
InterlockedIncrement
OutputDebugStringW
CreateFileW
GetFileSize
ReadFile
CloseHandle
GetModuleHandleExW
GetModuleFileNameW
LoadLibraryW
GetProcAddress
FreeLibrary
LocalAlloc
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
FormatMessageW
InterlockedPushEntrySList
IsProcessorFeaturePresent
InterlockedPopEntrySList
HeapDestroy
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
ExitProcess
HeapReAlloc
HeapSize
GetStringTypeW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapCreate
GetLocaleInfoW
GetStdHandle
GetCPInfo
LCMapStringW
GetStartupInfoW
HeapSetInformation
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
Sleep
EncodePointer
RtlUnwind
DecodePointer

user32

EnableScrollBar
InvalidateRect
KillTimer
CallWindowProcW
DefWindowProcW
SetRectEmpty
OffsetRect
SetRect
GetPropW
IsRectEmpty
UnregisterClassA
GetDlgItem
MonitorFromWindow
GetMonitorInfoW
GetParent
SetCapture
SetActiveWindow
IsWindowEnabled
RedrawWindow
GetDCEx
ShowOwnedPopups
IsWindowVisible
ShowWindow
ValidateRgn
InvalidateRgn
ValidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
MapWindowPoints
ScreenToClient
ClientToScreen
SetWindowPlacement
GetWindowPlacement
GetClientRect
GetWindowRect
BringWindowToTop
ArrangeIconicWindows
SetWindowPos
MoveWindow
IsZoomed
IsIconic
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SendNotifyMessageW
PostQuitMessage
SetFocus
IsWindow
EnableWindow
GetWindow
GetCursorPos
CreateWindowExW
LoadCursorW
GetClassInfoExW
RegisterClassExW
PostMessageW
SetWindowLongW
GetWindowLongW
SetTimer
SendMessageW
LoadStringW
LoadImageW
DispatchMessageW
TranslateMessage
GetMessageW
PeekMessageW
GetSystemMetrics
MessageBoxW
RegisterWindowMessageW
CharNextW
DestroyWindow
ShowScrollBar
SetScrollRange
GetScrollRange
GetScrollPos
SetScrollPos
GetScrollInfo
SetScrollInfo

advapi32

RegDeleteValueW
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
ConvertStringSecurityDescriptorToSecurityDescriptorW
GetSecurityDescriptorSacl
SetSecurityDescriptorSacl

shell32

ShellExecuteW
SHGetSpecialFolderPathW
SHCreateDirectoryExW

ole32

CoCreateInstance
CoTaskMemRealloc
CoInitialize
CoTaskMemFree
CoTaskMemAlloc

oleaut32

VarUI4FromStr

libui

?SetLangpackManager@SkinEngine@@QAEXPAVCLangpackBase@@@Z
??0SkinEngine@@QAE@XZ
?UpdateLanguageEnv@SkinEngine@@QAEXXZ
?CreateDuiCtrlLink@SkinEngine@@QAEPAVIDuiCtrlLink@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z
?CreateDuiCtrlGif@SkinEngine@@QAEPAVIDuiCtrlGif@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z
?CreateDuiCtrlRadio@SkinEngine@@QAEPAVIDuiCtrlRadio@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z
?CreateDuiCtrlCheck@SkinEngine@@QAEPAVIDuiCtrlCheck@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z
?CreateDuiCtrlSlider@SkinEngine@@QAEPAVIDuiCtrlSlider@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z
??1SkinEngine@@QAE@XZ
?CreateDuiCtrlEdit@SkinEngine@@QAEPAVIDuiCtrlEdit@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z
?CreateDuiCtrlButton@SkinEngine@@QAEPAVIDuiCtrlButton@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z
?FindControlByDlgId@SkinEngine@@QAEPAVICtrlBase@@IPB_W@Z
?FindControl@SkinEngine@@QAEPAVICtrlBase@@PB_W@Z
?CreateDuiCtrlPanel@SkinEngine@@QAEPAVIDuiCtrlPanel@@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVICtrlBase@@10@Z

comctl32

InitCommonControlsEx

winmm

timeGetTime

live

_xlive_init@4
_xlive_uninit@0

libcef

cef_string_utf16_clear
cef_string_utf16_set
cef_string_utf8_to_utf16
cef_string_utf16_cmp
cef_string_userfree_utf16_free
cef_shutdown
cef_string_list_copy
cef_string_multimap_alloc
cef_string_multimap_free
cef_string_map_alloc
cef_string_map_free
cef_log
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_map_size
cef_string_map_key
cef_string_map_value
cef_string_list_size
cef_string_list_value
cef_string_multimap_append
cef_string_map_append
cef_string_list_append
cef_v8context_get_current_context
cef_v8value_create_function
cef_v8value_create_string
cef_v8value_create_int
cef_process_message_create
cef_string_list_alloc
cef_string_list_free
cef_add_web_plugin_path
cef_register_extension
cef_post_task
cef_register_scheme_handler_factory
cef_initialize
cef_refresh_web_plugins
cef_api_hash

gdi32

RestoreDC
SetStretchBltMode
SaveDC
ExtTextOutW
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
DeleteObject
ExcludeClipRect
SetBkColor
StretchBlt
DeleteDC
BitBlt

Exports

Exports

Building
Destroying
UpdateUserData_

Sections

.text
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 170KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 163KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f132a418329e2b786f5e4ff09350268

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

advapi32

shell32

ole32

oleaut32

libui

comctl32

winmm

live

libcef

gdi32

Exports

Exports

Sections

.text Size: 587KB - Virtual size: 587KB

.rdata Size: 162KB - Virtual size: 162KB

.data Size: 170KB - Virtual size: 210KB

.rsrc Size: 164KB - Virtual size: 163KB

.reloc Size: 151KB - Virtual size: 150KB

.text
Size: 587KB - Virtual size: 587KB

.rdata
Size: 162KB - Virtual size: 162KB

.data
Size: 170KB - Virtual size: 210KB

.rsrc
Size: 164KB - Virtual size: 163KB

.reloc
Size: 151KB - Virtual size: 150KB