72757418bce6c345661de0b385e734b3cd782df5973a07b07cb804fcac0272d7

Sharing

Copy URL Twitter E-mail

General

Target

72757418bce6c345661de0b385e734b3cd782df5973a07b07cb804fcac0272d7
Size

684KB
MD5

660fafedc3e4649bf4a6f86db4ff16d0
SHA1

ca1fdecee8655d52650f97eb4581d3a4f3536109
SHA256

72757418bce6c345661de0b385e734b3cd782df5973a07b07cb804fcac0272d7
SHA512

2599c800146eb9dc6ce1a06f0bca6abd2a2c62ae54063319adb15b6d6b9e54ee992c3a1131ce0910da51af32386ac97fed073c4dc3c7727b39faff0b1ede4384
SSDEEP

12288:3a2A6YSL4r+4JuOx4ofQ+BcbxjebUSsPQ:3ap6U6yuO2o45dVSoQ

Score

N/A

Malware Config

Signatures

Files

72757418bce6c345661de0b385e734b3cd782df5973a07b07cb804fcac0272d7
.exe windows x86

5a4ef94e85c1f0a4323dacaee247a9c2

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wmvcore

WMCreateWriterNetworkSink
WMCreateReader
WMCreateWriter
WMCreateIndexer

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

kernel32

HeapFree
HeapAlloc
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetCurrentProcessId
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetTimeZoneInformation
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
SetEnvironmentVariableA
GetFileTime
GetFileAttributesA
FileTimeToLocalFileTime
SetErrorMode
GetOEMCP
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
GlobalReAlloc
LocalAlloc
GlobalFlags
FileTimeToSystemTime
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
lstrcmpA
RaiseException
SetLastError
MulDiv
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcatA
lstrcmpW
lstrcpynA
ReadProcessMemory
VirtualProtectEx
WriteProcessMemory
VirtualAllocEx
CompareStringW
CompareStringA
GetLastError
GetProcAddress
FreeLibrary
GetProcessHeap
OpenProcess
CreateFileA
WriteFile
Sleep
CreateDirectoryA
GlobalAlloc
GlobalFree
InterlockedDecrement
GetTickCount
InterlockedIncrement
DeleteFileA
WritePrivateProfileStringA
CreateProcessA
ResumeThread
TerminateProcess
GetModuleHandleA
GetModuleFileNameA
CreateThread
WaitForSingleObject
ResetEvent
SetEvent
CreateEventA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
LoadLibraryA
GetPrivateProfileStringA
GetCurrentDirectoryA
CloseHandle
DeleteCriticalSection
lstrlenW
FreeResource
GetCPInfo
lstrlenA
lstrcmpiA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersion
GetVersionExA
QueryPerformanceCounter

user32

InvalidateRgn
GetNextDlgGroupItem
MessageBeep
SetParent
RegisterClipboardFormatA
PostThreadMessageA
EndPaint
BeginPaint
GetWindowDC
TranslateMessage
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MapWindowPoints
TrackPopupMenu
IsWindowVisible
UpdateWindow
GetMenu
AdjustWindowRectEx
EqualRect
GetClassInfoA
UnregisterClassA
CopyAcceleratorTableA
CallWindowProcA
IntersectRect
GetWindowPlacement
DefWindowProcA
IsChild
DeferWindowPos
IsWindow
SetRectEmpty
SetWindowLongA
GetMenuStringA
DestroyMenu
TrackMouseEvent
CharUpperA
GetWindowThreadProcessId
EnumWindows
ShowWindow
SetWindowPos
LoadIconA
SetForegroundWindow
IsIconic
GetWindowTextA
DrawIcon
MessageBoxA
GetCursorPos
ScreenToClient
GetMessageA
DispatchMessageA
ReleaseCapture
SetCapture
GetCapture
KillTimer
LockWindowUpdate
GetDCEx
SetTimer
DrawFrameControl
PtInRect
IsRectEmpty
GetDlgCtrlID
LoadCursorA
GetFocus
GetKeyState
GetWindow
ValidateRect
LoadImageA
PostMessageA
SetCursor
DestroyCursor
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
FrameRect
SetWindowContextHelpId
MapDialogRect
OffsetRect
InflateRect
IsMenu
DrawStateA
GetMenuItemInfoA
GetSystemMetrics
SystemParametersInfoA
DrawIconEx
DestroyIcon
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
EnableWindow
GetDesktopWindow
ReleaseDC
PostQuitMessage
CharNextA
wsprintfA
CreateDialogIndirectParamA
EndDialog
GetDC
ModifyMenuA
GetSubMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
AppendMenuA
CreatePopupMenu
CreateMenu
DrawEdge
LoadBitmapA
GetSysColorBrush
FillRect
GetSysColor
CopyRect
SetRect
RegisterClassA
GetClassLongA

gdi32

SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SetRectRgn
CombineRgn
GetMapMode
GetRgnBox
GetBkColor
CreateFontA
GetCharWidthA
StretchDIBits
GetClipBox
GetTextColor
CreateBitmap
SetBkColor
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
CreatePen
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
CreateSolidBrush
DeleteObject
CreateRectRgnIndirect
DeleteDC
SetTextColor
GetStockObject
GetTextExtentPoint32W
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextExtentPoint32A
SetPixel
GetPixel
PatBlt
Rectangle
Ellipse
GetBkMode
GetDeviceCaps
GetObjectA
CreateCompatibleBitmap
CreateFontIndirectA
SaveDC

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegOpenKeyExA
RegOpenKeyA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegQueryValueExA

shell32

ShellExecuteExA
ShellExecuteA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA

comctl32

ImageList_ReplaceIcon
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Create
ImageList_AddMasked

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantTimeToSystemTime
OleCreateFontIndirect
SysAllocString
SafeArrayDestroy
VariantCopy
SysAllocStringByteLen
SysStringLen
SysFreeString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SystemTimeToVariantTime

ws2_32

socket
inet_addr
htons
recv
select
send
WSAGetLastError
connect
closesocket
WSAStartup

psapi

EnumProcessModules
GetModuleBaseNameA

imagehlp

ImageUnload
ImageLoad

Sections

.text
Size: 268KB - Virtual size: 266KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 332KB - Virtual size: 329KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a4ef94e85c1f0a4323dacaee247a9c2

Headers

File Characteristics

Imports

wmvcore

version

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

psapi

imagehlp

Sections

.text Size: 268KB - Virtual size: 266KB

.rdata Size: 68KB - Virtual size: 64KB

.data Size: 12KB - Virtual size: 26KB

.rsrc Size: 332KB - Virtual size: 329KB

.text
Size: 268KB - Virtual size: 266KB

.rdata
Size: 68KB - Virtual size: 64KB

.data
Size: 12KB - Virtual size: 26KB

.rsrc
Size: 332KB - Virtual size: 329KB