c1bbdd53d791a81486ea884bab01f0ae2e6ce2522574fe5a80d55235e41d1e1b

Sharing

Copy URL Twitter E-mail

General

Target

c1bbdd53d791a81486ea884bab01f0ae2e6ce2522574fe5a80d55235e41d1e1b
Size

508KB
MD5

6f3f0a9c8ad76f33519ce8878d402ddb
SHA1

86c249f3b2ca0c2abc2ebe76a4a1dfb17172ab9a
SHA256

c1bbdd53d791a81486ea884bab01f0ae2e6ce2522574fe5a80d55235e41d1e1b
SHA512

93139361df0363261dc2161019c38ab30c755f4a5125cd362f42139d44e1986626a6ea097ffda08ebfecb6cbe6d8c07a93a12695858ca6a059e67cb175ade79c
SSDEEP

6144:iq4XzYHgYTg7bVAQpDUCpzjWtYT5pkeipqwXFtLcuOB+dXOebKVFp9i9BsaQVmCE:IXzHLOPt7x+4K8+fVmbyDoP0F2PfeLi

Score

N/A

Malware Config

Signatures

Files

c1bbdd53d791a81486ea884bab01f0ae2e6ce2522574fe5a80d55235e41d1e1b
.exe windows x86

85dfe36da42ba82ffdab8a4d1a38fe9a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryA
GetCurrentThreadId
HeapFree
HeapAlloc
GetModuleHandleA
GetEnvironmentVariableA
IsDBCSLeadByte
GetFileAttributesA
CreateEventA
SetCurrentDirectoryA
GetCurrentDirectoryA
CopyFileA
QueryPerformanceFrequency
ReadFile
CompareStringA
SetFilePointer
SetEndOfFile
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
InterlockedDecrement
GetModuleFileNameA
lstrcmpA
CreateProcessA
GetProcAddress
InterlockedIncrement
WideCharToMultiByte
Sleep
_hwrite
GetTempPathA
lstrcpynA
SetLastError
GetPrivateProfileSectionA
GetTempFileNameA
WriteFile
MultiByteToWideChar
DeleteFileA
VerLanguageNameA
CloseHandle
WritePrivateProfileStringA
CreateFileA
GetVersionExA
GetLocalTime
GetVersion
FindFirstFileA
GetSystemInfo
GetWindowsDirectoryA
GetLastError
GetSystemDirectoryA
FindClose
GetUserDefaultLCID
lstrcmpiA
GetTickCount
lstrcatA
SizeofResource
GlobalSize
lstrlenA
GetPrivateProfileStringA
lstrcpyA
LockResource
FindResourceA
LoadResource
HeapDestroy
HeapCreate
GetFileSize
HeapReAlloc
SystemTimeToFileTime
QueryPerformanceCounter
ResetEvent
SetEvent
WaitForSingleObject
SearchPathA
VirtualProtect
VirtualQuery
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
RaiseException
FlushFileBuffers
SetStdHandle
LCMapStringW
LCMapStringA
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSize
GlobalAlloc
VirtualFree
FreeLibrary
TlsGetValue
TlsAlloc
FreeResource
TlsSetValue
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
CreateThread
GetDriveTypeA
GlobalFree
GlobalUnlock
SetErrorMode
LoadLibraryA
GlobalLock
_lread
_hread
_lclose

user32

MoveWindow
GetDlgItem
SetWindowPos
GetSystemMetrics
BeginPaint
EndPaint
PostMessageA
wsprintfA
MessageBoxA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetDC
ReleaseDC
FindWindowA
SendMessageA
RegisterClassA
CreateWindowExA
IsWindow
DestroyCursor
UnhookWindowsHookEx
GetWindowRect
GetClientRect
GetSysColor
DialogBoxParamA
KillTimer
FillRect
SetTimer
IsCharAlphaNumericA
IsCharAlphaA
TranslateMessage
GetMessageTime
DispatchMessageA
SetWindowsHookExA
TrackPopupMenu
DestroyWindow
ValidateRect
WindowFromPoint
SetScrollRange
GetScrollRange
SetScrollPos
GetForegroundWindow
LoadBitmapA
EndDialog
RegisterWindowMessageA
CharUpperA
SetWindowLongA
GetClassInfoA
GetWindowLongA
PeekMessageA
DialogBoxIndirectParamA
GetKeyState
SetFocus
IsRectEmpty
SubtractRect
EqualRect
IntersectRect
CopyRect
UnionRect
PtInRect
SendDlgItemMessageA
SetWindowTextA
LoadIconA
LoadStringA
ReleaseCapture
SetCursor
LoadCursorA
SetCapture
SetDlgItemTextA
SetClassLongA
LoadCursorFromFileA
ScreenToClient
GetDesktopWindow
VkKeyScanA
MapVirtualKeyA
MessageBeep
CallNextHookEx
SetRectEmpty
InflateRect
SetParent
CharNextA
GetMessageA
GetParent
ClientToScreen
GetCursorPos
SetCursorPos
InvalidateRect
DrawFocusRect
EnumChildWindows
IsIconic
IsWindowVisible
ShowWindow
GetScrollPos
SetCaretPos
CharUpperBuffA
CharLowerBuffA
CreateCaret
SetCaretBlinkTime
ShowCaret
DestroyCaret
DrawTextA
SetForegroundWindow
GetDlgItemTextA
UnregisterClassA
GetClassInfoExA
RegisterClassExA
WaitForInputIdle
UpdateWindow
GetMessagePos
MsgWaitForMultipleObjects
CharLowerA
EnableWindow
GetSystemMenu
DestroyMenu
GetFocus
IsDlgButtonChecked
CheckRadioButton
GetWindowTextA
CreatePopupMenu
AppendMenuA
SetRect
ShowScrollBar

gdi32

SelectPalette
DeleteDC
RealizePalette
GetDeviceCaps
CreateDIBitmap
GetSystemPaletteEntries
DeleteObject
CreatePalette
SelectObject
UnrealizeObject
BitBlt
CreateSolidBrush
SetTextColor
CreateCompatibleDC
GetStockObject
GetObjectA
SetBkMode
AddFontResourceA
RestoreDC
RemoveFontResourceA
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
SaveDC
Rectangle
CreateRectRgn
CreateHatchBrush
DeleteEnhMetaFile
SetBkColor
CreateBitmap
CreateCompatibleBitmap
StretchBlt
PlayEnhMetaFile
SetEnhMetaFileBits
SetStretchBltMode
CreatePen
LineTo
SetWinMetaFileBits
SetPixel
GetPixel
MoveToEx
SetTextAlign
TextOutA
ExtTextOutA
Arc
Ellipse
SetTextCharacterExtra
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polygon
Polyline
RoundRect
GetTextMetricsA
GetTextExtentPoint32A
StretchDIBits
EnumFontFamiliesExA
CreateFontIndirectA
EnumFontsA
CreatePatternBrush
CreateEllipticRgnIndirect
CreateDCA
PatBlt

comdlg32

GetOpenFileNameA

advapi32

RegCreateKeyExA
RegQueryValueA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey

ole32

CoUninitialize
CoInitialize
CoCreateInstance

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

mciSendCommandA
timeGetDevCaps
timeBeginPeriod
timeSetEvent
timeGetTime
timeKillEvent

comctl32

InitCommonControlsEx

oleaut32

SysFreeString
SysAllocStringLen

shell32

ShellExecuteA

Exports

Exports

AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc

Sections

.text
Size: 328KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 24KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85dfe36da42ba82ffdab8a4d1a38fe9a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

version

winmm

comctl32

oleaut32

shell32

Exports

Exports

Sections

.text Size: 328KB - Virtual size: 325KB

.rdata Size: 28KB - Virtual size: 24KB

.data Size: 24KB - Virtual size: 32KB

.rsrc Size: 124KB - Virtual size: 124KB

.text
Size: 328KB - Virtual size: 325KB

.rdata
Size: 28KB - Virtual size: 24KB

.data
Size: 24KB - Virtual size: 32KB

.rsrc
Size: 124KB - Virtual size: 124KB