3e87ad970dc7c375024c9df9ce6f3f0eb13822308a68d067a26010f9826b0b5a

Sharing

Copy URL

Twitter E-mail

General

Target

3e87ad970dc7c375024c9df9ce6f3f0eb13822308a68d067a26010f9826b0b5a
Size

584KB
MD5

011a9449ee74437bb1f0886f5b4007e0
SHA1

913f6c0c21dfc4a3b6036d6d1b2fde942e340e32
SHA256

3e87ad970dc7c375024c9df9ce6f3f0eb13822308a68d067a26010f9826b0b5a
SHA512

812e3a7a04c3cf77ac5821fd67f18a9dc43df408f028edb76d8cee756f5660cd7aa351ddfca9793614d55594f429d4e1d251ea68f47e4a90003f823565bd7308
SSDEEP

6144:pJxRtKPWR5F1XJWEHXZXlT6PCPVbGT9uZWdyGCvIqK7Pgt1DVAIztn24rQl7Lx8g:pJRXJjHXZ96qkuZy+K7PCDH9B1fFWH

Score

N/A

Malware Config

Signatures

Files

3e87ad970dc7c375024c9df9ce6f3f0eb13822308a68d067a26010f9826b0b5a
.exe windows x86

4772be90aa7ab12fb74b54f94ba1d1f3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreateEx
DirectDrawEnumerateExA

dsound

ord2
ord1

dinput

DirectInputCreateEx

winmm

timeEndPeriod
timeBeginPeriod
timeGetDevCaps
timeSetEvent

kernel32

RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapFree
GetStartupInfoA
GetCommandLineA
RaiseException
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
CreateThread
TerminateProcess
HeapSize
GetCurrentProcessId
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
SetUnhandledExceptionFilter
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetEnvironmentVariableA
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
ExitProcess
FindClose
FindFirstFileA
CopyFileA
WritePrivateProfileStringA
GetPrivateProfileStringA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetTickCount
GetProcAddress
LoadLibraryA
QueryPerformanceCounter
Sleep
QueryPerformanceFrequency
GlobalMemoryStatus
GetPrivateProfileIntA
MultiByteToWideChar
GetVersion
CompareStringA
CompareStringW
GetOEMCP
GetCPInfo
GlobalFlags
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
InterlockedIncrement
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
FreeLibrary
lstrcmpW
GetModuleHandleA
WaitForSingleObject
CreateEventA
lstrcatA
GlobalGetAtomNameA
GlobalAddAtomA
GetModuleFileNameA
CreateFileA
GetFullPathNameA
GetVolumeInformationA
lstrcpyA
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiA
InterlockedDecrement
GetLastError
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
lstrlenA
GetStringTypeA

user32

GetMenuItemInfoA
InflateRect
LoadCursorA
GetSysColorBrush
ShowOwnedPopups
PostQuitMessage
GetWindowDC
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
GetMessageA
TranslateMessage
GetCursorPos
ValidateRect
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
SetPropA
GetPropA
RemovePropA
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
AdjustWindowRectEx
ScreenToClient
RegisterClassA
UnregisterClassA
DefWindowProcA
CallWindowProcA
SystemParametersInfoA
PtInRect
RegisterWindowMessageA
LoadMenuA
DestroyMenu
GetClassNameA
GetSysColor
WinHelpA
GetActiveWindow
EqualRect
GetKeyState
GetMenu
UnpackDDElParam
ReuseDDElParam
LoadIconA
GetClassInfoA
SetCursor
PeekMessageA
GetCapture
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
IsWindowVisible
InvalidateRect
IsIconic
MessageBoxA
UpdateWindow
ShowCursor
DeferWindowPos
PostMessageA
GetForegroundWindow
ClientToScreen
GetClientRect
AdjustWindowRect
GetWindowPlacement
ToAscii
MapVirtualKeyA
SetRect
InsertMenuItemA
CreatePopupMenu
IntersectRect
OffsetRect
SetRectEmpty
CopyRect
GetLastActivePopup
BringWindowToTop
SetMenu
IsWindow
GetDesktopWindow
GetWindow
TranslateAcceleratorA
GetWindowTextA
SendMessageA
GetFocus
GetParent
SetWindowPos
SetFocus
EnableWindow
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowLongA
GetDlgCtrlID
SetWindowTextA
GetWindowLongA
GetWindowRect
CharUpperA
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
UnhookWindowsHookEx
GetSystemMetrics
wsprintfA
GetDlgItem

gdi32

DeleteObject
BitBlt
GetPixel
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreatePatternBrush
CreateSolidBrush
GetTextExtentPoint32A
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectA
SetBkColor
GetClipBox
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
SetBkMode
SetTextColor
TextOutA
CreateFontIndirectA
SetDIBitsToDevice
Ellipse
GetStockObject
SelectObject
MoveToEx
LineTo

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

CryptDestroyHash
CryptGetHashParam
CryptHashData
CryptCreateHash
CryptAcquireContextA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
CryptReleaseContext
RegSetValueExA
RegCreateKeyExA

shell32

DragFinish
DragQueryFileA

comctl32

ImageList_Draw
ImageList_GetImageInfo
ord17
ImageList_Destroy

shlwapi

PathIsUNCA
PathFindExtensionA
PathStripToRootA
PathFindFileNameA

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 356KB - Virtual size: 354KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 112KB - Virtual size: 109KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4772be90aa7ab12fb74b54f94ba1d1f3

Headers

File Characteristics

Imports

ddraw

dsound

dinput

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oleaut32

Sections

.text Size: 356KB - Virtual size: 354KB

.rdata Size: 112KB - Virtual size: 109KB

.data Size: 8KB - Virtual size: 20KB

.rsrc Size: 104KB - Virtual size: 104KB

.text
Size: 356KB - Virtual size: 354KB

.rdata
Size: 112KB - Virtual size: 109KB

.data
Size: 8KB - Virtual size: 20KB

.rsrc
Size: 104KB - Virtual size: 104KB