d4eaa32963c85b3ba1162e28e22c774984f664759be8e7099ee922514c1a6f5b

Sharing

Copy URL Twitter E-mail

General

Target

d4eaa32963c85b3ba1162e28e22c774984f664759be8e7099ee922514c1a6f5b
Size

192KB
MD5

388bd97f1f3d515af39881800f94a500
SHA1

19fc97604c07bb4fd64a49fa583015a8e902ec82
SHA256

d4eaa32963c85b3ba1162e28e22c774984f664759be8e7099ee922514c1a6f5b
SHA512

a4fd7c83a9cf0a6e479abae63c16497a3c45cc0159c7ed0ff4cab9eba6fb991c4d5e1ce622fbed10115ca18ae1f097d73e1760681e1cdc26270131a2be5f2312
SSDEEP

3072:uhOzyCNHhDI7FbMzxsS0eoUDNZzk1g6/O2ZlW/Xz3Ms68n9:HDP2Mzxsv8ZM/O2ZliXz3Mn89

Score

N/A

Malware Config

Signatures

Files

d4eaa32963c85b3ba1162e28e22c774984f664759be8e7099ee922514c1a6f5b
.exe windows x86

7e2120a6b39f6fda3ee538213d9fa46d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

detectionapi_rd

?GetNumTests@TestManager@Detection@@QBEHXZ
CreateApplication
ReleaseApplication
?GetDisplayString@Information@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetDescriptionString@Information@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetTestResult@Information@@QAE?AW4ETestResult@@XZ
?GetNumTestCompleted@TestManager@Detection@@QBEHXZ
?NotifyParameterChanged@ParameterValidator@@UAEXPAVParameter@@I@Z
?AllowParameterChange@ParameterValidator@@UAE_NPAVParameter@@PBXI@Z
??_7IParameterObserver@@6B@
?SetIniPath@@YAXV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@@Z
?GetTagName@Information@@QAE?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@XZ
?GetBenchMarkScore@RequirementCPU@@QAEMXZ
?GetLocalizedString@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PB_W@Z
?NotifyParameterTranslate@ParameterValidator@@UAEXPAVParameter@@I@Z

mfc80u

ord1591
ord4276
ord4716
ord3397
ord5199
ord4179
ord6271
ord5067
ord1899
ord5148
ord4238
ord1392
ord3940
ord1608
ord1611
ord5908
ord6720
ord1542
ord1661
ord1662
ord2011
ord4884
ord4729
ord4206
ord5178
ord5803
ord6063
ord4574
ord730
ord5727
ord4314
ord3635
ord283
ord572
ord3298
ord4255
ord2985
ord5210
ord1393
ord5911
ord6721
ord1785
ord1577
ord5609
ord2651
ord4743
ord577
ord587
ord870
ord3158
ord4226
ord1536
ord2077
ord774
ord293
ord2159
ord748
ord4313
ord762
ord1079
ord3204
ord1118
ord2311
ord1925
ord3155
ord1271
ord1058
ord1270
ord5633
ord4119
ord2361
ord2366
ord1894
ord3318
ord2977
ord4237
ord1585
ord1641
ord2089
ord721
ord3288
ord4266
ord1512
ord4274
ord1573
ord2027
ord1318
ord2161
ord1006
ord602
ord563
ord2155
ord347
ord4109
ord6116
ord4577
ord5208
ord2648
ord977
ord3126
ord776
ord1494
ord528
ord3662
ord4755
ord3306
ord1579
ord1637
ord736
ord589
ord330
ord3678
ord4312
ord3165
ord4228
ord1538
ord2080
ord5956
ord1474
ord1922
ord591
ord718
ord516
ord3287
ord4714
ord4730
ord4207
ord4184
ord4838
ord4861
ord4611
ord4791
ord5064
ord5066
ord5065
ord6744
ord3661
ord6232
ord4098
ord326
ord6115
ord3281
ord3157
ord2895
ord3995
ord4117
ord5637
ord280
ord3756
ord2255
ord3670
ord3390
ord6751
ord1176
ord6749
ord709
ord501
ord5207
ord1556
ord416
ord6086
ord3677
ord566
ord3327
ord4475
ord2832
ord5562
ord5209
ord5226
ord4562
ord3942
ord5222
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord1198
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord757
ord2239
ord1479
ord282
ord6700
ord4101
ord2261
ord3824
ord1096
ord3570
ord899
ord5398
ord2460
ord6111
ord2362
ord3198
ord3311
ord4234
ord1582
ord2086
ord741
ord2121
ord753
ord3395
ord3927
ord5829
ord6251
ord4026
ord1457
ord1156
ord6061
ord758
ord567
ord4945
ord760
ord3331
ord502
ord3983
ord5638
ord6033
ord5723
ord5981
ord1920
ord2521
ord314
ord3342
ord1170
ord1200
ord581
ord5231
ord5229
ord920
ord925
ord929
ord927
ord931
ord2384
ord2404
ord2388
ord2394
ord2392
ord2390
ord2407
ord2402
ord2386
ord2409
ord2397
ord2379
ord2381
ord2399
ord2169
ord2163
ord1513
ord6273
ord3796
ord6275
ord3339
ord4961
ord1353
ord5171
ord1955
ord1647
ord1646
ord1590
ord5196
ord2531
ord2725
ord2829
ord4301
ord2708
ord2856
ord2534
ord2640
ord2527
ord3712
ord3713
ord3703
ord2638
ord3943
ord4480
ord4256
ord3176
ord354
ord605
ord764
ord1168
ord1192
ord1115
ord1162
ord1908
ord371
ord1093
ord1199
ord1197
ord1087
ord1033
ord315
ord765
ord4092
ord2009

msvcr80

_snwprintf
__CxxFrameHandler3
_onexit
_decode_pointer
_except_handler4_common
?terminate@@YAXXZ
_invoke_watson
_controlfp_s
_crt_debugger_hook
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_invalid_parameter_noinfo
memmove_s
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@XZ
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
wcsrchr
swscanf
_wtoi
wcsstr
_purecall
wcsncpy
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_unlock
__dllonexit
_lock

kernel32

GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
lstrcpyW
GetUserDefaultLCID
GetModuleFileNameW
lstrcmpW
GetCurrentDirectoryW
LoadLibraryW
GetModuleHandleW
GetProcAddress
SetLastError
GetLastError
FormatMessageW
FreeLibrary
ReleaseMutex
CloseHandle
WaitForSingleObject
CreateMutexW
GetWindowsDirectoryW
WideCharToMultiByte
WinExec
lstrlenW
lstrcatW
LocalFree
LocalAlloc
Sleep
InterlockedExchange
InterlockedCompareExchange
GetStartupInfoW
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
QueryPerformanceCounter
SetUnhandledExceptionFilter

user32

DrawFrameControl
SetRectEmpty
SetRect
GetDlgCtrlID
SystemParametersInfoW
IsRectEmpty
MessageBeep
ReleaseCapture
SetCapture
PtInRect
LoadCursorW
CopyIcon
GetSysColor
SetCursor
MessageBoxW
GetSystemMetrics
GetDlgItem
ScreenToClient
IsWindow
IsIconic
DrawIcon
OffsetRect
InflateRect
DrawFocusRect
FillRect
CopyRect
LoadIconW
PostQuitMessage
EnumDisplaySettingsW
GetWindow
InvalidateRect
UpdateWindow
DrawEdge
GetCursorPos
MoveWindow
GetSysColorBrush
GetParent
GetWindowLongW
SetWindowLongW
SystemParametersInfoA
GetFocus
RedrawWindow
ReleaseDC
GetDC
GetClientRect
PostMessageW
LoadBitmapW
SendMessageW
EnableWindow
GetWindowRect

gdi32

CreateRectRgn
SelectClipRgn
Rectangle
Polyline
SetPixel
GetTextCharsetInfo
EnumFontFamiliesW
GetTextExtentPoint32W
CreateFontIndirectW
PatBlt
CreateFontIndirectA
CreatePen
GetStockObject
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
StretchBlt
CreateCompatibleDC
GetObjectW
CreateSolidBrush
CreateBitmap

advapi32

RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegQueryValueW

shell32

ShellExecuteW

oleaut32

SysFreeString

msvcp80

??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
?c_str@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEPB_WXZ

Exports

Exports

??0Localization@@IAE@XZ
??1Localization@@IAE@XZ
??4Localization@@QAEAAV0@ABV0@@Z
?GetCurrentLocal@Localization@@SAHXZ
?GetLocalizedStdString@Localization@@SA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@H@Z
?GetLocalizedString@Localization@@SA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@H@Z
?SetCurrentLocal@Localization@@SAXH@Z
?m_Local@Localization@@1HA
GetSplashDlg

Sections

.text
Size: 96KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

7e2120a6b39f6fda3ee538213d9fa46d

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

detectionapi_rd

mfc80u

msvcr80

kernel32

user32

gdi32

advapi32

shell32

oleaut32

msvcp80

Exports

Exports

Sections

.text Size: 96KB - Virtual size: 94KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 40KB - Virtual size: 56KB

.text
Size: 96KB - Virtual size: 94KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 40KB - Virtual size: 56KB