fc15e04766d17b9ae731b5501c2b510a7d4c14fedb25f34cfeefc383004f0a45

Sharing

Copy URL Twitter E-mail

General

Target

fc15e04766d17b9ae731b5501c2b510a7d4c14fedb25f34cfeefc383004f0a45
Size

2.2MB
MD5

4ba555afc228639babc8ab64b3c9c59b
SHA1

460bba161214d0f822430a33fefa4cef3f6db388
SHA256

fc15e04766d17b9ae731b5501c2b510a7d4c14fedb25f34cfeefc383004f0a45
SHA512

a4091fec76e3be09804aba0c7b63128cbc59f7f2ce9bf99e8d755d20edc61f77273b2643368881e11c314570fb2de17abb8dd42393c6576a53f303b150178128
SSDEEP

24576:gudq5XdnJOBHS5HSbXjmu2MyGpc6tWac:Ldq/nCyu2MyGp/tHc

Score

N/A

Malware Config

Signatures

Files

fc15e04766d17b9ae731b5501c2b510a7d4c14fedb25f34cfeefc383004f0a45
.exe windows x64

00ec814f23e39307839c273d4d46520b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

advapi32

GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
RegisterTraceGuidsW
UnregisterTraceGuids
RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegisterEventSourceW
ReportEventW
DeregisterEventSource
TraceEvent

kernel32

GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
SizeofResource
MultiByteToWideChar
FlushInstructionCache
GetCurrentProcess
FreeLibrary
lstrcmpW
GetCurrentThreadId
LocalFree
FormatMessageW
MulDiv
LoadLibraryW
GetLastError
GetUserDefaultLCID
GetUserDefaultUILanguage
SetErrorMode
GlobalUnlock
GlobalLock
GlobalAlloc
lstrcmpiW
Sleep
LoadLibraryA
LocalAlloc
CreateMutexW
DeleteFileW
CloseHandle
CreateFileW
GetFileAttributesW
FindNextFileW
CreateThread
GetLocaleInfoW
EnumResourceLanguagesW
ExpandEnvironmentStringsW
GetProcAddress
GlobalFree
ReleaseMutex
GetVersionExW
LockResource
FindFirstFileW
GetFullPathNameW
FindClose
OutputDebugStringA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
GetStartupInfoW
InterlockedPushEntrySList
VirtualAlloc
InterlockedPopEntrySList
GetProcessHeap
VirtualFree
HeapSize
HeapReAlloc
HeapDestroy
HeapFree
HeapAlloc
lstrlenA
InitializeCriticalSection
DeleteCriticalSection
CompareStringW
GetVersion
WideCharToMultiByte
GetVersionExA
HeapSetInformation
GetCommandLineW
EnterCriticalSection
FindResourceExW
GetQueuedCompletionStatus
ReadDirectoryChangesW
CreateIoCompletionPort
GetShortPathNameW
FreeResource
FindVolumeClose
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindFirstVolumeW
GetVolumeNameForVolumeMountPointW
OutputDebugStringW
EnumUILanguagesW
SetEvent
GetWindowsDirectoryW
CreateEventW
WaitForSingleObject
GetDateFormatW
GetACP
LoadResource
SetLastError
lstrlenW
RaiseException
FindResourceW
LeaveCriticalSection

gdi32

PatBlt
SetBrushOrgEx
CreatePatternBrush
CreateDIBSection
GetCurrentObject
CreateBitmap
SetBkMode
GetTextMetricsW
GetTextExtentPoint32W
AddFontResourceW
SetBkColor
EnumFontFamiliesExW
SetTextColor
CreateFontIndirectW
GetObjectA
BitBlt
CreateCompatibleBitmap
GetObjectW
CreateCompatibleDC
SelectObject
DeleteDC
GetStockObject
DeleteObject
CreateSolidBrush
GetDeviceCaps

user32

MapDialogRect
CreateDialogIndirectParamW
DrawTextA
SendMessageA
IsWindowUnicode
GetClassNameA
GetWindowLongA
RegisterClipboardFormatW
FindWindowW
DestroyWindow
GetDesktopWindow
FlashWindow
GetWindowLongPtrW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
LoadCursorW
GetWindowLongW
SetWindowLongW
SetWindowPos
GetClassNameW
SetFocus
ReleaseDC
PeekMessageW
ClientToScreen
GetParent
ReleaseCapture
SetCapture
InvalidateRect
EndPaint
BeginPaint
RegisterWindowMessageW
ScreenToClient
GetSysColor
FillRect
CharNextW
GetClientRect
GetFocus
DefWindowProcW
CallWindowProcW
GetClassInfoExW
RegisterClassExW
DestroyAcceleratorTable
GetDC
IsChild
GetWindow
RedrawWindow
CreateAcceleratorTableW
MoveWindow
InvalidateRgn
GetMessageW
TranslateMessage
DispatchMessageW
LoadStringW
IsWindow
GetDlgItem
SendMessageW
CreateWindowExW
SetWindowLongPtrW
UnregisterClassA
CharLowerW
CharUpperW
SetProcessDPIAware
LockSetForegroundWindow
ShowWindow
LoadBitmapW
SystemParametersInfoW
SetProcessDefaultLayout
MessageBoxW
LoadIconW
MapWindowPoints
GetWindowRect
GetWindowPlacement
CreateDialogParamW
PostMessageW
GetSystemMetrics
GetMenuItemCount
GetMenuItemInfoW
EnableMenuItem
GetDlgCtrlID
SetForegroundWindow
SetTimer
LoadAcceleratorsW
TranslateAcceleratorW
InflateRect
GetActiveWindow
OpenClipboard
GetClipboardData
CloseClipboard
KillTimer
LockWindowUpdate
DestroyMenu
LoadMenuW
GetSubMenu
LoadImageW
SetWindowsHookExW
UnhookWindowsHookEx
IsWindowEnabled
MessageBeep
GetMenuItemID
SetMenuItemInfoW
IsWindowVisible
GetWindowThreadProcessId
GetKeyState
UpdateWindow
GetSysColorBrush
FrameRect
GetMessagePos
WindowFromPoint
PtInRect
SetCursor
SetRectEmpty
GetCapture
GetCursorPos
IsMenu
GetWindowDC
CallNextHookEx
DrawFocusRect
OffsetRect
DrawEdge
TrackPopupMenuEx
GetMonitorInfoW
MonitorFromPoint
ModifyMenuW
DrawTextW
DrawFrameControl
DrawTextExW
EnableWindow
DialogBoxParamW
EndDialog
InsertMenuW
SetDlgItemTextW

msvcrt

memcmp
_unlock
?terminate@@YAXXZ
__set_app_type
_fmode
_commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
exit
_cexit
_ismbblead
_exit
_XcptFilter
__getmainargs
wcscpy_s
memmove_s
_stricmp
_wsplitpath_s
wcstoul
_wtof
_wfopen
fread
fclose
_wcslwr_s
__C_specific_handler
memset
memcpy_s
malloc
wcsncpy_s
??2@YAPEAX_K@Z
swprintf_s
free
_wtoi64
wcscat_s
_lock
_onexit
??1type_info@@UEAA@XZ
realloc
_errno
??_U@YAPEAX_K@Z
??_V@YAXPEAX@Z
??3@YAXPEAX@Z
wcspbrk
__CxxFrameHandler3
wcstol
_wcsicmp
_vsnwprintf
iswspace
wcscoll
qsort
_purecall
wcsstr
wcsrchr
_CxxThrowException
memcpy
__dllonexit

shell32

ord190
SHCreateItemFromParsingName
SHGetFolderPathW
CommandLineToArgvW
SHCreateShellItem
ShellExecuteW
DragQueryPoint
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHCreateQueryCancelAutoPlayMoniker
SHGetSpecialFolderLocation
ord155
DragQueryFileW

ole32

GetRunningObjectTable
CoTaskMemAlloc
OleInitialize
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
ReleaseStgMedium
CoUninitialize
CoInitializeEx
RegisterDragDrop
RevokeDragDrop
CLSIDFromString
CreateStreamOnHGlobal
CoRegisterClassObject
CoResumeClassObjects
CoRevokeClassObject
OleUninitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemRealloc

oleaut32

SysStringByteLen
VarUI4FromStr
SysAllocStringLen
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
OleCreateFontIndirect
VarBstrCmp
SysAllocString
SysFreeString

omdproject

OmdGetClassObject

comdlg32

ChooseColorW
GetOpenFileNameW
GetSaveFileNameW

shlwapi

PathFindFileNameW
PathAppendW
SHAutoComplete
PathFileExistsW
PathFindExtensionW

gdiplus

GdipCreateBitmapFromHBITMAP
GdipImageRotateFlip
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipDrawImageRectRectI
GdipSetImageAttributesColorMatrix
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetImageHeight
GdipGetImageWidth
GdipSetCompositingMode
GdipDrawImageI
GdipLoadImageFromStream
GdipCreateBitmapFromFile
GdipDrawImageRect
GdipDrawString
GdipSetStringFormatFlags
GdipDeleteStringFormat
GdipCreateStringFormat
GdiplusStartup
GdipCreateFromHDC
GdipDeleteGraphics
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdipCreateMatrix
GdipDeleteMatrix
GdipTranslateMatrix
GdipGraphicsClear
GdipSetWorldTransform
GdipFillPath
GdipDrawPath
GdipDeletePath
GdipFree
GdipDeletePen
GdipAlloc
GdipCreatePath
GdipAddPathEllipse
GdipAddPathArc
GdipGetPathLastPoint
GdipAddPathLine
GdipClosePathFigure
GdipTransformPath
GdipAddPathRectangle
GdipCreatePathGradientFromPath
GdipDeleteBrush
GdipCloneBrush
GdipSetPathGradientCenterColor
GdipSetPathGradientSurroundColorsWithCount
GdipGetPathGradientPointCount
GdipSetPathGradientCenterPoint
GdipCreatePen1
GdipSetPenMode
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipFillRectangleI
GdipCreateHBITMAPFromBitmap
GdipCreateFont
GdipDeleteFontFamily
GdipGetGenericFontFamilySansSerif
GdipCreateFontFamilyFromName
GdipSetTextRenderingHint
GdipGetFamilyName
GdipGetFamily
GdipDrawImageRectI
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromScan0
GdipFillRectangle
GdipScaleMatrix

d3d9

Direct3DCreate9
Direct3DCreate9Ex

uxtheme

SetWindowTheme

slc

SLGetWindowsInformationDWORD

wmvcore

WMCreateSyncReader

Exports

Exports

??0CtrlContainerFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAXPEAVCompositeFrame@1@@Z
??0CtrlFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAXPEAVCompositeFrame@1@@Z
??0FrameEqualizer@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@@Z
??0GroupBoxFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAX1PEAVCompositeFrame@1@@Z
??0GroupBoxFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAXPEAVCompositeFrame@1@@Z
??0HorizFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAVCompositeFrame@1@@Z
??0IMsoAutoLayoutDialog@DlgAutoLayout@@IEAA@XZ
??0ListEditFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAX1PEAVCompositeFrame@1@@Z
??0MsoWCtrlContainerFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@GPEAVMsoWCompositeFrame@@@Z
??0MsoWCtrlFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@GPEAVMsoWCompositeFrame@@@Z
??0MsoWFrameEqualizer@@QEAA@AEAVIMsoWAutoLayoutDialog@@@Z
??0MsoWGroupBoxFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@GGPEAVMsoWCompositeFrame@@@Z
??0MsoWGroupBoxFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@GPEAVMsoWCompositeFrame@@@Z
??0MsoWHorizFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@PEAVMsoWCompositeFrame@@@Z
??0MsoWListEditFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@GGPEAVMsoWCompositeFrame@@@Z
??0MsoWNumInputFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@GGPEAVMsoWCompositeFrame@@@Z
??0MsoWOverlapFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@PEAVMsoWCompositeFrame@@@Z
??0MsoWTabCtrlFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@GPEAVMsoWCompositeFrame@@@Z
??0MsoWTableFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@HHPEAVMsoWCompositeFrame@@@Z
??0MsoWVertFrame@@QEAA@AEAVIMsoWAutoLayoutDialog@@PEAVMsoWCompositeFrame@@@Z
??0NumInputFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAX1PEAVCompositeFrame@1@@Z
??0NumInputFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAXPEAVCompositeFrame@1@@Z
??0OverlapFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAVCompositeFrame@1@@Z
??0TabCtrlFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAX1PEAVCompositeFrame@1@@Z
??0TabCtrlFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAXPEAVCompositeFrame@1@@Z
??0TableFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@HHPEAVCompositeFrame@1@@Z
??0VertFrame@DlgAutoLayout@@QEAA@AEAVIMsoAutoLayoutDialog@1@PEAVCompositeFrame@1@@Z
??1IMsoAutoLayoutDialog@DlgAutoLayout@@MEAA@XZ
MsoDALCheckBoxBMHeight
MsoDALCheckBoxBMWidth
MsoDALCheckBoxBMWidthPlusMargin
MsoDALDestructFrames
MsoDALEditStrHeightPix
MsoDALFDlgIsValid
MsoDALGroupBoxNoLabelTopAdjustPix
MsoDALMarkDlgInvalid
MsoDALSuspendFrameDestruction
MsoDUToPix
MsoDestroyIMsoWAutoLayoutDialog
MsoFCreateIMsoWAutoLayoutDialog
MsoPixToDU
MsoWIsAutoLayoutEnabled
MsoWTabCtrlIndexToHwnd

Sections

.text
Size: 638KB - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

qkqmzrj
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

00ec814f23e39307839c273d4d46520b

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

shell32

ole32

oleaut32

omdproject

comdlg32

shlwapi

gdiplus

d3d9

uxtheme

slc

wmvcore

Exports

Exports

Sections

.text Size: 638KB - Virtual size: 638KB

.data Size: 3KB - Virtual size: 6KB

.pdata Size: 43KB - Virtual size: 42KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 36KB - Virtual size: 37KB

qkqmzrj Size: - Virtual size: 4KB

.text
Size: 638KB - Virtual size: 638KB

.data
Size: 3KB - Virtual size: 6KB

.pdata
Size: 43KB - Virtual size: 42KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 36KB - Virtual size: 37KB

qkqmzrj
Size: - Virtual size: 4KB