f9409253bc58a259084b95fc7f0553daf69a60f069c39be5641d0a797ae95a06

Sharing

Copy URL Twitter E-mail

General

Target

f9409253bc58a259084b95fc7f0553daf69a60f069c39be5641d0a797ae95a06
Size

592KB
MD5

6907d4f51e19f446dc4900b31e79ce50
SHA1

118bb27b283717011f86bbd8ae93fbe48715aa07
SHA256

f9409253bc58a259084b95fc7f0553daf69a60f069c39be5641d0a797ae95a06
SHA512

8f7ecbad38c41c87155ddcb057aefc1b4c823952a143498f2fe17f0ae42ad6f222c339b930be53affa0afa4de44db04549c1bcb83c18dff9714b4f1658e1c196
SSDEEP

6144:W/oWm97xzLSibR5Pltilx4dPqHyQlTgALXqo1jmUZxL6xQGQgg:Wn6rV5Pl+nPZNLXqs76P

Score

N/A

Malware Config

Signatures

Files

f9409253bc58a259084b95fc7f0553daf69a60f069c39be5641d0a797ae95a06
.exe windows x86

440eecc6fb5b47316a67a2ad48f9c48f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ttingupdate

??1CUpdateFile@@QAE@XZ
??0CUpdateFile@@QAE@XZ
?StartUpdate@CUpdateFile@@QAEHPAD0@Z
?IsCheckMainProgram@CUpdateFile@@QAEHPAD@Z
?Analysis@CUpdateFile@@QAEHPAD@Z
?StartDownload@CUpdateFile@@QAEHPAD@Z
?StopDownload@CUpdateFile@@QAEHXZ

kernel32

InitializeCriticalSection
DeleteCriticalSection
lstrcmpiW
FreeLibrary
MultiByteToWideChar
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FlushFileBuffers
CloseHandle
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
InterlockedIncrement
GetConsoleMode
GetConsoleCP
SetFilePointer
GetOEMCP
GetCPInfo
LoadResource
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
ExitProcess
GetModuleFileNameA
GetStdHandle
WriteFile
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
InterlockedDecrement
GetCurrentDirectoryW
GetPrivateProfileStringW
WritePrivateProfileStringW
GetCommandLineW
SetLastError
GetCurrentThreadId
lstrlenW
WideCharToMultiByte
GetCurrentProcess
FlushInstructionCache
FindResourceExW
FindResourceW
LockResource
SizeofResource
HeapFree
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
InterlockedExchange
GetProcessHeap
InterlockedCompareExchange
GetVersionExA
GetModuleHandleA
GetStartupInfoW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetThreadLocale
GetLocaleInfoA
GetACP
HeapSize
HeapReAlloc
HeapAlloc
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
GetSystemTimeAsFileTime
HeapDestroy

user32

CharNextW
DestroyWindow
SetWindowLongW
GetWindowLongW
PostMessageW
GetMenu
SetWindowPos
GetClientRect
ShowWindow
IsDialogMessageW
GetSystemMetrics
InflateRect
EndPaint
BeginPaint
PtInRect
ReleaseCapture
DrawEdge
DrawFocusRect
CallWindowProcW
GetCapture
GetDlgCtrlID
SetCapture
IsWindowEnabled
KillTimer
SetTimer
InvalidateRect
UpdateWindow
ClientToScreen
CreateDialogParamW
DefWindowProcW
UnregisterClassA
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
SetWindowRgn
CreateWindowExW
RegisterClassExW
LoadImageW
PostQuitMessage
SendMessageW
DrawTextW
LoadCursorW
GetClassInfoExW
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
MapWindowPoints
IsWindow
AdjustWindowRectEx
RedrawWindow

gdi32

CreateFontIndirectW
CreateRoundRectRgn
BitBlt
StretchBlt
DeleteObject
CreateCompatibleBitmap
SetViewportOrgEx
GetDIBColorTable
GetObjectW
SelectObject
DeleteDC
CreateCompatibleDC
SetBkMode

advapi32

RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW

shell32

CommandLineToArgvW

ole32

CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc

oleaut32

VarUI4FromStr

gdiplus

GdiplusShutdown

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_Draw
ImageList_GetIconSize
ImageList_LoadImageW
InitCommonControlsEx
_TrackMouseEvent
ImageList_Destroy

Sections

.text
Size: 92KB - Virtual size: 89KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 264KB - Virtual size: 260KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tc
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

440eecc6fb5b47316a67a2ad48f9c48f

Headers

File Characteristics

Imports

ttingupdate

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

gdiplus

msimg32

comctl32

Sections

.text Size: 92KB - Virtual size: 89KB

.rdata Size: 20KB - Virtual size: 18KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 264KB - Virtual size: 260KB

.tc Size: 204KB - Virtual size: 204KB

.text
Size: 92KB - Virtual size: 89KB

.rdata
Size: 20KB - Virtual size: 18KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 264KB - Virtual size: 260KB

.tc
Size: 204KB - Virtual size: 204KB