dd65306a8e769984e3ad9c7368b869f9973e02453e2c6b42d4a92e200174efb7

Sharing

Copy URL Twitter E-mail

General

Target

dd65306a8e769984e3ad9c7368b869f9973e02453e2c6b42d4a92e200174efb7
Size

952KB
MD5

4663fbf5b17338fe8e29df98b23a4159
SHA1

70ff750039c3d64584a32e9f6f64c30ec275d429
SHA256

dd65306a8e769984e3ad9c7368b869f9973e02453e2c6b42d4a92e200174efb7
SHA512

0a371333b1a7bda59a966a4c27904e074e29c2669913195a91ceb95b8ec23e44bd017f1ed3d8bf42c48416fb8b8f4959e590ebf0f74701d890358c623ef2e9ff
SSDEEP

24576:yoRMEkFtGvVrpwz6Mj3GkNaXK48WvfgRmtHNLdD2jFVqIY9bZ:y8MEbvV0qVXtgItjSjFw

Score

N/A

Malware Config

Signatures

Files

dd65306a8e769984e3ad9c7368b869f9973e02453e2c6b42d4a92e200174efb7
.exe windows x86

9662e5b27f28546cf6b7ca61ce75966a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetDlgItemTextW
EndDialog
OpenClipboard
ScreenToClient
GetDlgItemTextW
wsprintfW
SetRectEmpty
DestroyMenu
LockWindowUpdate
EqualRect
SetWindowLongW
GetClassInfoW
SetWindowTextW
MoveWindow
SetClassLongW
IsClipboardFormatAvailable
SetCursor
AdjustWindowRectEx
IsRectEmpty
SetActiveWindow
GetWindowDC
FindWindowExW
GetActiveWindow
GetComboBoxInfo
IsZoomed
MapDialogRect
RegisterHotKey
SendMessageTimeoutW
LoadCursorW
CloseClipboard
GetMenu
EnableWindow
ShowWindow
OffsetRect
DestroyIcon
wvsprintfA
CheckDlgButton
IsWindowEnabled
GetCursorPos
GetClipboardData
LoadIconW
WindowFromPoint
wsprintfA
UpdateLayeredWindow
DrawIconEx

shell32

ILGetSize
ExtractIconA
SHGetDesktopFolder
ShellExecuteExW
SHGetFileInfoW
SHGetSpecialFolderPathW
DragAcceptFiles
ShellExecuteW
SHGetSpecialFolderLocation
SHBindToParent
SHGetPathFromIDListW
SHFileOperationW
SHGetMalloc
DragQueryFileW
SHBrowseForFolderW

winmm

mciSendCommandA
mciGetErrorStringW
mmioDescend
timeGetTime
mmioClose
mmioOpenW

msimg32

AlphaBlend

shlwapi

PathRemoveFileSpecA
PathIsRelativeW
PathCompactPathW
PathAddBackslashW
StrCmpIW
PathFindExtensionW
PathRemoveExtensionW
PathIsRootW
PathFileExistsW
PathIsDirectoryW
PathFindFileNameW
PathAppendA
StrStrIW
PathRemoveFileSpecW
PathRenameExtensionW
PathAddExtensionW
PathAppendW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

advapi32

CryptDecrypt
RegCreateKeyExW
RegCloseKey
RegOpenKeyExW
EqualSid
CryptHashData
RegCreateKeyExA
CryptDestroyKey
CryptDeriveKey
RegDeleteKeyW
CryptReleaseContext
RegQueryInfoKeyW
CryptEncrypt
RegEnumKeyExW
RegQueryValueExW
ReportEventW
RegEnumValueW
RegSetValueExA
OpenProcessToken
GetUserNameA
CryptCreateHash
AdjustTokenPrivileges
LookupPrivilegeValueW
FreeSid
CryptDestroyHash
RegQueryValueExA
RegSetValueExW
GetTokenInformation
RegisterEventSourceW
AllocateAndInitializeSid
CryptAcquireContextW

avifil32

AVIFileExit
AVIFileRelease
AVIFileGetStream
AVIStreamRelease
AVIStreamInfoW
AVIFileInit
AVIStreamReadFormat
AVIStreamRead
AVIFileOpenW

ole32

CoTaskMemAlloc
CoInitialize
OleInitialize
ReleaseStgMedium
CoGetObject
CreateClassMoniker
StringFromGUID2
CoUninitialize
GetRunningObjectTable
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
OleUninitialize
CoTaskMemFree

kernel32

EnterCriticalSection
GetSystemTime
GetCurrentProcessId
CreateEventW
GlobalUnlock
GlobalAlloc
WideCharToMultiByte
CreateMutexW
GetLastError
FileTimeToLocalFileTime
OutputDebugStringW
GetTempFileNameW
CopyFileW
GetModuleFileNameA
SetEvent
FindClose
FindFirstFileW
Thread32Next
Thread32First
FindNextFileW
GetPrivateProfileStringW
LeaveCriticalSection
Sleep
lstrlenA
lstrcpyW
GetVolumeInformationW
LocalFree
GetVersion
GlobalFree
GetLocaleInfoW
GetFileAttributesW
SetFilePointer
CreateDirectoryW
FormatMessageW
SetFileAttributesW
ResetEvent
GetNumberFormatW
Process32NextW
OpenProcess
GetDiskFreeSpaceExW
FileTimeToSystemTime
GlobalLock
ReleaseMutex
FlushFileBuffers
LoadLibraryW

gdi32

CreateBitmap
GetDeviceCaps
DeleteDC
ExtTextOutW
RectVisible
CreateCompatibleBitmap
CreatePen
StretchBlt
GetTextExtentPoint32W
TextOutW
BitBlt
Escape
SelectObject
CreateSolidBrush
PtVisible
CreateCompatibleDC
DeleteObject
Rectangle
CreateFontIndirectW
GetObjectW

comctl32

ImageList_Replace
ImageList_BeginDrag
ImageList_DragLeave
ImageList_GetIconSize
_TrackMouseEvent
ImageList_EndDrag
ImageList_GetIcon
ImageList_ReplaceIcon
FlatSB_GetScrollInfo
ImageList_DragMove
ImageList_AddMasked
ImageList_DragEnter
ImageList_Draw
ImageList_SetBkColor

comdlg32

ChooseColorW
CommDlgExtendedError
GetFileTitleW
ChooseFontW

gdiplus

GdipDrawImageRectRect
GdipGetImageHeight
GdipDisposeImage
GdipLoadImageFromFile
GdipFree
GdipImageRotateFlip
GdiplusShutdown
GdipCreateFromHDC
GdipGetImageBounds
GdipLoadImageFromFileICM
GdipGetImageWidth
GdipCloneImage
GdiplusStartup
GdipCreateHBITMAPFromBitmap
GdipGetImageThumbnail
GdipDeleteGraphics
GdipBitmapGetPixel
GdipAlloc

Sections

.text
Size: 622KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 319KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9662e5b27f28546cf6b7ca61ce75966a

Headers

File Characteristics

Imports

user32

shell32

winmm

msimg32

shlwapi

version

advapi32

avifil32

ole32

kernel32

gdi32

comctl32

comdlg32

gdiplus

Sections

.text Size: 622KB - Virtual size: 622KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 319KB - Virtual size: 3.6MB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 622KB - Virtual size: 622KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 319KB - Virtual size: 3.6MB

.rsrc
Size: 2KB - Virtual size: 2KB