de64dce6a702e911db14180d5535cd6fa5945976b2b768701bbbc154330d7429

Sharing

Copy URL Twitter E-mail

General

Target

de64dce6a702e911db14180d5535cd6fa5945976b2b768701bbbc154330d7429
Size

892KB
MD5

6b9f92637ee408b41fa4746ad548e6f0
SHA1

d4d40b61040d2f877b3c9c6e2d9ff45b9d7ea1ed
SHA256

de64dce6a702e911db14180d5535cd6fa5945976b2b768701bbbc154330d7429
SHA512

23a88571c38ed0ad5b92837058065ce15d5b8cd01897cceddc72a83984b47d1e24aaa0ba035a987040d302dcb2bc75b3bb2a10f7af0ec02420003969290fa1e3
SSDEEP

12288:pMTC3ex1PSfOZobmETVbZM07cS0p/04l965hkHCj0h6HFpm4n0w+:pMT4eSbbxbM07Ypl96wHz0S4n0

Score

N/A

Malware Config

Signatures

Files

de64dce6a702e911db14180d5535cd6fa5945976b2b768701bbbc154330d7429
.exe windows x86

f90e0636257c3eb00b9a2a4ce21593ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

LoadIconW
RegisterWindowMessageW
wvsprintfW
IsWindow
SendMessageW
EnumChildWindows
GetWindowLongW
SetWindowLongW
GetWindowRect
MapWindowPoints
MoveWindow
InvalidateRect
GetClientRect
EnableWindow
PeekMessageW
MsgWaitForMultipleObjects
DispatchMessageW
GetParent
ExitWindowsEx
CreateIconIndirect
DrawTextExW
GetWindowTextLengthW
GetCapture
CallNextHookEx
GetMenuState
GetPropW
GetClassNameW
GetActiveWindow
SetWindowsHookExW
GetMessageW
GetSysColor
GetSysColorBrush
DefWindowProcW
CallWindowProcW
RedrawWindow
SetPropW
RemovePropW
SetWindowPos
SetWindowRgn
GetWindowDC
ReleaseDC
PostMessageW
ShowWindow
IsZoomed
IsIconic
GetWindow
GetWindowInfo
IsRectEmpty
OffsetRect
SetMenu
GetMenu
GetKeyState
CreateWindowExW
RegisterClassExW
LoadCursorW
UpdateWindow
SetTimer
SetForegroundWindow
KillTimer
PtInRect
ClientToScreen
EndPaint
BeginPaint
DrawTextW
FillRect
DrawEdge
DestroyWindow
GetSystemMetrics
ReleaseCapture
SetCapture
GetCursorPos
IsWindowVisible
ScreenToClient
LockWindowUpdate
GetDesktopWindow
GetMenuItemInfoW
InsertMenuItemW
CreatePopupMenu
GetMenuItemCount
DestroyMenu
EnableMenuItem
GetSystemMenu
DrawIconEx
GetClassLongW
InflateRect
EnableScrollBar
GetScrollInfo
GetScrollPos
GetScrollRange
SetScrollInfo
SetScrollPos
SetScrollRange
ShowScrollBar
GetDC
GetIconInfo
CharUpperBuffA
GetWindowTextW
DrawFrameControl
IsWindowEnabled
SetFocus
GetFocus
SetRect
SetWindowWord
GetWindowWord
IntersectRect
DrawIcon
DestroyIcon
DrawStateW
ValidateRect
GetSubMenu
GetMenuItemID
EqualRect
IsMenu
DrawMenuBar
GetWindowPlacement
SubtractRect
FindWindowW
MessageBoxA
CharLowerW
CharUpperW
DestroyCursor
LoadImageW
LoadStringW
CopyIcon
GetMessagePos
CopyRect

shlwapi

PathFindFileNameW
PathStripPathW
PathRenameExtensionW
PathRemoveFileSpecW

baseimg

?IsThereISOPartition@@YAHPAHHPBG@Z

mfc42u

ord1143
ord6370
ord4294
ord6211
ord5714
ord5977
ord1761
ord5276
ord6193
ord6871
ord6195
ord3087
ord2933
ord2159
ord4118
ord2634
ord4229
ord324
ord3592
ord4419
ord5273
ord2116
ord2438
ord5257
ord1720
ord5059
ord3744
ord6372
ord2047
ord2640
ord4435
ord4831
ord3793
ord4347
ord5157
ord2377
ord5237
ord4401
ord1767
ord4073
ord6048
ord2506
ord4704
ord4992
ord4847
ord4370
ord5261
ord5461
ord6403
ord533
ord798
ord3719
ord3506
ord3171
ord3178
ord3175
ord5188
ord2598
ord5774
ord6006
ord3313
ord5444
ord6388
ord4177
ord6313
ord964
ord2800
ord1989
ord2912
ord5462
ord859
ord268
ord1560
ord2813
ord3806
ord922
ord2755
ord927
ord940
ord536
ord537
ord4124
ord925
ord1131
ord2613
ord5706
ord942
ord6865
ord1165
ord641
ord1569
ord815
ord561
ord3733
ord4418
ord4616
ord4075
ord3074
ord3820
ord3826
ord3825
ord2971
ord3076
ord2980
ord3257
ord3131
ord4459
ord3254
ord3142
ord2977
ord5710
ord5285
ord5303
ord4692
ord4074
ord2717
ord5298
ord5296
ord3341
ord2388
ord5193
ord1089
ord3917
ord5727
ord2504
ord2546
ord4480
ord6371
ord4269
ord4667
ord541
ord801
ord5856
ord5857
ord823
ord6138
ord500
ord772
ord2859
ord3871
ord4197
ord2756
ord2810
ord6868
ord538
ord535
ord540
ord858
ord800
ord861
ord825
ord3658
ord323
ord1633
ord1634
ord2444
ord2406
ord5852
ord2397
ord640
ord3621
ord3614
ord4621

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
calloc
_CxxThrowException
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
wcstoul
_purecall
_CIacos
ceil
floor
fseek
ftell
fread
toupper
__dllonexit
fclose
memmove
memchr
strncpy
wcscat
_except_handler3
printf
_ltow
_wtoi
strncmp
wcslen
malloc
realloc
free
swprintf
_wcsicmp
wcstok
wcscpy
wcscmp
_ftol
__CxxFrameHandler
_onexit
??1type_info@@UAE@XZ
_controlfp
fopen
_stricmp

kernel32

GetVolumeNameForVolumeMountPointW
DeviceIoControl
CreateFileW
SetLastError
GetModuleFileNameW
GetLastError
CloseHandle
GetModuleHandleW
GetProcAddress
IsBadWritePtr
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetDriveTypeW
FreeLibrary
LoadLibraryW
GetCurrentDirectoryW
FindClose
FindFirstFileW
LocalFree
LocalAlloc
MultiByteToWideChar
GetPrivateProfileIntW
DeleteFileW
SetFileAttributesW
FormatMessageW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetVersionExW
WideCharToMultiByte
LoadResource
FindResourceW
GetExitCodeProcess
CreateProcessW
GetCurrentProcess
GetCurrentThread
GetThreadLocale
GetWindowsDirectoryW
GetSystemDirectoryW
SetCurrentDirectoryW
lstrcmpiW
GetCurrentThreadId
lstrcpynW
lstrcmpW
LeaveCriticalSection
InitializeCriticalSection
EnterCriticalSection
DeleteCriticalSection
SizeofResource
lstrcpyW
GetVersion
lstrlenW
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
MulDiv
GetSystemTime
GetModuleHandleA
GetSystemInfo
GetCurrentProcessId
VirtualQuery
WriteProcessMemory
lstrcmpiA
ExitProcess
GetModuleFileNameA
VirtualProtect
FlushInstructionCache
GetStartupInfoW

gdi32

SelectObject
CreateFontIndirectW
GetObjectW
CreateDCW
DeleteObject
CombineRgn
CreateRectRgn
ExtTextOutW
CreatePatternBrush
SetBrushOrgEx
PatBlt
UnrealizeObject
GetTextMetricsW
GetRgnBox
IntersectClipRect
CreatePen
MoveToEx
LineTo
GetTextExtentPoint32W
TextOutW
GetClipRgn
SelectClipRgn
ExcludeClipRect
PtInRegion
StretchDIBits
RectVisible
GetClipBox
ExtSelectClipRgn
SetStretchBltMode
SetDIBitsToDevice
CreateDIBSection
CreateDIBitmap
SaveDC
RestoreDC
Polygon
StretchBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetDeviceCaps
SelectPalette
RealizePalette
CreateBitmap
SetBkColor
CreateICW
GetDIBits
DeleteDC
GetRegionData
ExtCreateRegion
OffsetRgn
GetTextExtentPointW
CreateSolidBrush
SetTextColor
SetBkMode
GetStockObject
BitBlt
CreateRectRgnIndirect

advapi32

OpenProcessToken
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
AddAccessAllowedAce
FreeSid
GetLengthSid
ImpersonateSelf
OpenThreadToken
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
RevertToSelf
LookupPrivilegeValueW
AdjustTokenPrivileges
AllocateAndInitializeSid
InitializeAcl

shell32

ExtractIconExW

comctl32

ImageList_GetIcon
ImageList_Draw
ImageList_Destroy
ImageList_GetImageCount
ImageList_DrawEx
ImageList_GetIconSize
_TrackMouseEvent

msvcp60

??1_Lockit@std@@QAE@XZ
?_Xlen@std@@YAXXZ
?_Xran@std@@YAXXZ
??0_Lockit@std@@QAE@XZ

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 440KB - Virtual size: 438KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.vmp0
Size: 192KB - Virtual size: 1.3MB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

f90e0636257c3eb00b9a2a4ce21593ac

Headers

File Characteristics

Imports

user32

shlwapi

baseimg

mfc42u

msvcrt

kernel32

gdi32

advapi32

shell32

comctl32

msvcp60

version

imagehlp

Sections

.text Size: 440KB - Virtual size: 438KB

.rdata Size: 32KB - Virtual size: 29KB

.data Size: 24KB - Virtual size: 90KB

.idata Size: 12KB - Virtual size: 9KB

.rsrc Size: 156KB - Virtual size: 153KB

.reloc Size: 32KB - Virtual size: 31KB

.vmp0 Size: 192KB - Virtual size: 1.3MB

.text
Size: 440KB - Virtual size: 438KB

.rdata
Size: 32KB - Virtual size: 29KB

.data
Size: 24KB - Virtual size: 90KB

.idata
Size: 12KB - Virtual size: 9KB

.rsrc
Size: 156KB - Virtual size: 153KB

.reloc
Size: 32KB - Virtual size: 31KB

.vmp0
Size: 192KB - Virtual size: 1.3MB