61ecf6fe239c449513746f92b3afbc7494c0400a08d74af60760d529f6d67ca9

Sharing

Copy URL Twitter E-mail

General

Target

61ecf6fe239c449513746f92b3afbc7494c0400a08d74af60760d529f6d67ca9
Size

604KB
MD5

4e7c7a5516e458c01805ff19bcba930a
SHA1

73ffc9a1cb691a1dce9206ea97fa29fad58515a0
SHA256

61ecf6fe239c449513746f92b3afbc7494c0400a08d74af60760d529f6d67ca9
SHA512

06a5472f6d90210a91587f24e31b038ab92c1645fa7855dbeb9f16cfb4327b3c449de4c3193962c4b389d38c2219adb3b77c48856454ad40fc458114191c3107
SSDEEP

12288:WAeEj1vruAE0m76lG2YI0/UiyYq0JINqcjvUcei2cj:HjBnN1YI0/U1n06Nq8ei2cj

Score

N/A

Malware Config

Signatures

Files

61ecf6fe239c449513746f92b3afbc7494c0400a08d74af60760d529f6d67ca9
.exe windows x86

4bdfb366ef877b980d2c3e17c8a10468

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW
mixerClose
mixerGetControlDetailsW
mixerOpen
mixerGetLineInfoW
mixerGetLineControlsW

wtsapi32

WTSRegisterSessionNotification
WTSUnRegisterSessionNotification

gdiplus

GdipCreateFontFamilyFromName
GdipSetPenLineJoin
GdipDeleteFontFamily
GdipDrawImageRectRect
GdipSetInterpolationMode
GdipFillPath
GdipGetImageGraphicsContext
GdipStartPathFigure
GdipSetSmoothingMode
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorKeys
GdipDrawImageRectRectI
GdipGetImageHeight
GdipGetImageWidth
GdipReleaseDC
GdipCreatePen1
GdipDeletePen
GdipSetWorldTransform
GdipCreateMatrix2
GdipDeleteMatrix
GdipDrawImagePointsI
GdipDrawPath
GdipFillRectangle
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipAddPathLineI
GdipCreateBitmapFromGraphics
GdipAddPathStringI
GdipDeletePath
GdipCreatePath

liveio

?WriteEC@ECControl@@QAEXIIH@Z
?init@WMIClass@@SAHXZ
??0WMIObj@@QAE@XZ
?init@WMIObj@@QAEHPA_W@Z
?SetLong@WMIObj@@QAEXP6AXPA_WPAX@ZHH@Z
?GetLong@WMIObj@@QAEXP6AXPA_WPAX@ZH@Z
??1WMIObj@@QAE@XZ
?Release@WMIClass@@SAXXZ
??0ECControl@@QAE@XZ
??1ECControl@@QAE@XZ
?SetLiveIOType@@YAXH@Z
?ReadEC@ECControl@@QAEIIH@Z

psapi

GetModuleBaseNameW
EnumProcessModules

kernel32

GetCurrentThread
GlobalDeleteAtom
GlobalFree
FreeResource
lstrlenW
SetLastError
GetCurrentProcessId
GlobalUnlock
SetThreadPriority
ResumeThread
SetEvent
SuspendThread
CreateEventW
GlobalAddAtomW
InterlockedDecrement
MulDiv
LocalFree
FormatMessageW
GetVersionExA
CompareStringW
GlobalFindAtomW
GetModuleHandleA
GlobalGetAtomNameW
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
GetCurrentThreadId
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetThreadLocale
lstrlenA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileW
GetVolumeInformationW
GetFullPathNameW
FileTimeToSystemTime
SetErrorMode
GetTickCount
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
GetStartupInfoW
ExitProcess
HeapAlloc
HeapFree
RtlUnwind
ExitThread
CreateThread
RaiseException
HeapReAlloc
HeapSize
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
CreateFileA
SetStdHandle
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
WideCharToMultiByte
CompareStringA
MultiByteToWideChar
InterlockedExchange
GlobalLock
lstrcmpW
GlobalAlloc
LoadLibraryA
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetCurrentDirectoryW
DeviceIoControl
CloseHandle
CreateFileW
WTSGetActiveConsoleSessionId
GetModuleFileNameW
GetVersionExW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
LockResource
OpenProcess
FreeLibrary
SizeofResource
LoadResource
FindResourceW
WaitForSingleObject
Sleep
GetSystemDefaultLangID
SetCurrentDirectoryW
GetLastError
CreateMutexW
GetLocalTime
EnterCriticalSection

user32

RegisterClassW
GetClassInfoW
GetClassInfoExW
UpdateWindow
SetMenu
TrackPopupMenu
MapWindowPoints
GetMessagePos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetForegroundWindow
RemovePropW
GetPropW
SetPropW
GetClassNameW
GetClassLongW
IsChild
WinHelpW
SendDlgItemMessageA
RegisterWindowMessageW
FillRect
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
InflateRect
GetMenuItemInfoW
DestroyMenu
TranslateAcceleratorW
BringWindowToTop
SetRectEmpty
CreatePopupMenu
InsertMenuItemW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
CharNextW
CopyAcceleratorTableW
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
GetSysColorBrush
LoadCursorW
CharUpperW
UnregisterClassW
RegisterClipboardFormatW
PostThreadMessageW
CopyRect
PtInRect
DefWindowProcW
CallWindowProcW
GetMenu
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetMenuItemID
GetMenuItemCount
GetSysColor
ShowOwnedPopups
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
EnableMenuItem
CheckMenuItem
GetWindowTextW
GetFocus
SetFocus
ShowWindow
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetLastActivePopup
IsWindowEnabled
MessageBoxW
GetWindow
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
CreateWindowExW
SetWindowLongW
GetWindowLongW
GetDC
SetCapture
LoadImageW
ReleaseDC
FindWindowExW
ReleaseCapture
SetWindowRgn
GetParent
InvalidateRect
SetRect
MoveWindow
wsprintfW
EnableWindow
PostMessageW
keybd_event
EnumWindows
GetWindowThreadProcessId
KillTimer
GetSubMenu
ModifyMenuW
SetForegroundWindow
LoadMenuW
GetCursorPos
DrawIcon
GetClientRect
IsIconic
SetTimer
RedrawWindow
SetLayeredWindowAttributes
GetSystemMetrics
SystemParametersInfoW
SetWindowPos
GetWindowRect
SendMessageW
LoadIconW
FindWindowW
wvsprintfW
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
UnhookWindowsHookEx
GetCapture

gdi32

SetTextColor
SetBkColor
SaveDC
RestoreDC
SetBkMode
SetMapMode
CreateCompatibleBitmap
DeleteDC
BitBlt
StretchBlt
CombineRgn
GetPixel
CreateRectRgn
GetClipBox
GetObjectW
GetWindowExtEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
CreatePen
CreatePatternBrush
CreateSolidBrush
CreateFontIndirectW
GetTextExtentPoint32W
GetBkColor
GetTextColor
CreateRectRgnIndirect
GetRgnBox
GetMapMode
ExtSelectClipRgn
DeleteObject
SelectObject
CreateBitmap
GetDeviceCaps
Rectangle
GetViewportExtEx
CreateCompatibleDC
GetStockObject

msimg32

TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegQueryValueW

shell32

ShellExecuteW
DragFinish
DragQueryFileW
Shell_NotifyIconW

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathIsUNCW
PathStripToRootW
PathFindFileNameW
PathFindExtensionW

oledlg

OleUIBusyW

ole32

CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
CoRevokeClassObject

oleaut32

VariantTimeToSystemTime
VariantInit
SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
SysStringLen
OleCreateFontIndirect
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
VariantCopy

Sections

.text
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.drdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4bdfb366ef877b980d2c3e17c8a10468

Headers

DLL Characteristics

File Characteristics

Imports

winmm

wtsapi32

gdiplus

liveio

psapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 352KB - Virtual size: 352KB

.rdata Size: 106KB - Virtual size: 106KB

.data Size: 11KB - Virtual size: 32KB

.rsrc Size: 49KB - Virtual size: 48KB

.drdata Size: 80KB - Virtual size: 80KB

.text
Size: 352KB - Virtual size: 352KB

.rdata
Size: 106KB - Virtual size: 106KB

.data
Size: 11KB - Virtual size: 32KB

.rsrc
Size: 49KB - Virtual size: 48KB

.drdata
Size: 80KB - Virtual size: 80KB