6ceadf290e45872f7b2672b3a0818fb4ed2f57cd727aac7ad1218e3106939273

Sharing

Copy URL Twitter E-mail

General

Target

6ceadf290e45872f7b2672b3a0818fb4ed2f57cd727aac7ad1218e3106939273
Size

2.6MB
MD5

d2d92df58fe939ad9bd4b25dd03f3c9b
SHA1

d7f4a706e9f115c978fb54ff24f4d7e86afd02dd
SHA256

6ceadf290e45872f7b2672b3a0818fb4ed2f57cd727aac7ad1218e3106939273
SHA512

0ffe233781e56d3768ae09bc0ceba0f4684c83278df4edc5581345815e706378a7b00a323ba36dcf68319152e0a6e6a87ae18f9f13f61607cd142cff220e9bee
SSDEEP

49152:cmT21RVAseB6jjlR/kaEqT//vKGuKwSMr9qlq+Br1C2lCtxwfQjFepgSjrJWchYE:9T21RVAseB6jjlR/kaEqT///PwSM5qkg

Score

N/A

Malware Config

Signatures

Files

6ceadf290e45872f7b2672b3a0818fb4ed2f57cd727aac7ad1218e3106939273
.dll windows x86

5f524ab3980df0a97f866d5f9f61d79a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsIconic
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
SetForegroundWindow
RegisterWindowMessageA
GetMenuItemCount
SetPropA
GetPropA
GetClassLongA
CreateWindowExA
RegisterClipboardFormatA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
SetActiveWindow
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
PeekMessageA
wsprintfA
MessageBoxA
GetForegroundWindow
GetDlgItem
FindWindowA
GetDC
SetCursorPos
GetAncestor
EnumWindows
GetCursorPos
SetWindowsHookExA
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
EnableWindow
SetCursor
SendMessageA
PostMessageA
PostQuitMessage
LoadIconA
UpdateWindow
MapWindowPoints
GetSysColor
DestroyWindow
GetMenuItemID
GetSubMenu
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
IsWindow
SystemParametersInfoA
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
DestroyMenu
UnhookWindowsHookEx
UnregisterClassA
GetClassNameA
PtInRect
GetWindowRect
GetDlgCtrlID
GetWindow
ClientToScreen
SetWindowTextA
GetWindowTextA
LoadCursorA
TabbedTextOutA
DrawTextA
GrayStringA
SendDlgItemMessageA
IsDialogMessageA
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
GetSystemMetrics
PostThreadMessageA
LoadStringA
ReleaseDC
GetSysColorBrush
MapWindowPoints
LoadStringA
UnregisterClassA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
ScrollWindowEx
SendDlgItemMessageA
FrameRect
AdjustWindowRectEx
GetScrollPos
RegisterClassA
GetMenuItemCount
GetMenuItemID
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetLastActivePopup
RegisterWindowMessageA
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
DestroyWindow
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
CharUpperA
GetDlgItem
GetDesktopWindow
GetWindowTextA
GetSysColorBrush
GetWindowDC
CallWindowProcA
CallNextHookEx
GetClassNameA
GetWindowTextLengthA
UnhookWindowsHookEx
SetWindowsHookExA
DrawTextA
WaitForInputIdle
wsprintfA
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetSystemMetrics
GetCursorPos
MessageBoxA
MessageBeep
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
GetTopWindow
GetParent
GetFocus
GetClientRect
InvalidateRect
ValidateRect
UpdateWindow
EqualRect
GetWindowRect
SetForegroundWindow
DestroyMenu
TrackPopupMenu
IsChild
ReleaseDC
IsRectEmpty
FillRect
GetDC
SetCursor
LoadCursorA
SetCursorPos
SetActiveWindow
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
EnableWindow
IsWindowVisible
OffsetRect
PtInRect
DestroyIcon
IntersectRect
InflateRect
SetRect
SetScrollPos
SetScrollRange
GetScrollRange
SetCapture
GetCapture
ReleaseCapture
SetTimer
KillTimer
WinHelpA
LoadBitmapA
CopyRect
ChildWindowFromPointEx
ScreenToClient
GetMessagePos
SetWindowRgn
DestroyAcceleratorTable
GetWindow
GetActiveWindow
SetFocus
IsIconic
PeekMessageA
SetMenu
GetMenu
DeleteMenu
GetSystemMenu
DefWindowProcA
GetClassInfoA
IsZoomed
PostQuitMessage
CopyAcceleratorTableA
GetKeyState
TranslateAcceleratorA
IsWindowEnabled
ShowWindow
SystemParametersInfoA
LoadImageA
EnumDisplaySettingsA
ClientToScreen
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl
TranslateMessage
LoadIconA
GetNextDlgTabItem
GetForegroundWindow

kernel32

GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
RtlUnwind
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
LocalSize
ReadProcessMemory
CreateToolhelp32Snapshot
Process32First
CloseHandle
Process32Next
GetCommandLineA
VirtualQueryEx
CreateFileA
RtlMoveMemory
RtlFillMemory
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
HeapSize
GetModuleFileNameA
GetLocalTime
WriteFile
Sleep
LCMapStringA
GetUserDefaultLCID
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
ResumeThread
GetWindowsDirectoryA
GetModuleHandleA
lstrcpyn
WritePrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GetCPInfo
FlushFileBuffers
GetCurrentProcess
GetProcessVersion
FindResourceA
LoadResource
LockResource
TlsAlloc
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GetLastError
SetLastError
InterlockedIncrement
GlobalFlags
MulDiv
GetVersion
lstrcpynA
WriteProcessMemory
RaiseException
GetTickCount
TerminateProcess
lstrcpyA
lstrcatA
SetErrorMode
InterlockedDecrement
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
OpenProcess
DeviceIoControl
HeapCreate
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
lstrlenA
LocalAlloc
LocalFree
InitializeCriticalSection
GetOEMCP
IsBadCodePtr
IsBadReadPtr
CompareStringW
CompareStringA
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetStdHandle
SetHandleCount
GetACP
HeapSize
RaiseException
GetLocalTime
GetSystemTime
RtlUnwind
GetOEMCP
GetCPInfo
GetProcessVersion
SetErrorMode
GlobalFlags
GetCurrentThread
GetFileTime
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
InterlockedDecrement
InterlockedIncrement
SuspendThread
ReleaseMutex
CreateMutexA
GetTimeZoneInformation
SetLastError
SetStdHandle
InterlockedExchange
GetFileType
TerminateProcess
GetFileSize
SetFilePointer
GetVersion
lstrcmpiA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentProcess
GetWindowsDirectoryA
GetSystemDirectoryA
TerminateThread
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
DeviceIoControl
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
RemoveDirectoryA
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
CloseHandle
WaitForSingleObject
CreateProcessA
GetTickCount
GetCommandLineA
SetLocalTime
MulDiv
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetVolumeLabelA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateDirectoryA
CopyFileA
DeleteFileA
MoveFileA
GetFileAttributesA
SetFileAttributesA
FindClose
FindFirstFileA
GetTempPathA
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateEventA
CreateThread
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA

gdi32

ScaleWindowExtEx
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
PtVisible
GetClipBox
CreateBitmap
RestoreDC
GetDeviceCaps
DeleteDC
SaveDC
GetStockObject
SetBkColor
Rectangle
CreateFontIndirectA
SelectObject
SetBkMode
SetTextColor
TextOutA
DeleteObject
GetObjectA
Escape
ExtTextOutA
RectVisible
SetWindowExtEx
ScaleViewportExtEx
Escape
ExtTextOutA
RectVisible
PtVisible
GetViewportExtEx
ExtSelectClipRgn
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetTextMetricsA
CreateEllipticRgnIndirect
MoveToEx
LineTo
SetDIBitsToDevice
SetTextColor
SetBkMode
TextOutA
SetBkColor
CreateRectRgnIndirect
CreateDIBSection
SetPixel
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
StretchBlt
SelectPalette
RealizePalette
GetDIBits
GetWindowExtEx
GetViewportOrgEx
GetWindowOrgEx
BeginPath
EndPath
PathToRegion
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
CreatePatternBrush
SelectObject
GetObjectA
CreatePen
PatBlt
CombineRgn
CreateRectRgn
FillRgn
CreateSolidBrush
GetStockObject
CreateFontIndirectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
Arc
GetTextExtentPoint32A
GetDeviceCaps
SetViewportExtEx

ws2_32

setsockopt
send
inet_addr
ntohs
select
recv
getpeername
ntohl
accept
inet_ntoa
recv
ioctlsocket
recvfrom
socket
WSAAsyncSelect
closesocket
WSACleanup
WSAStartup

atl

ord42

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA
OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyA
RegOpenKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA

comctl32

ord17
ImageList_GetIcon
_TrackMouseEvent
ord17
ImageList_Destroy
ImageList_Duplicate
ImageList_Read

oledlg

ord8

ole32

CoRevokeClassObject
CoRegisterMessageFilter
OleUninitialize
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleRun
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
CLSIDFromString
OleUninitialize
OleInitialize

oleaut32

VariantChangeType
VariantInit
SafeArrayGetDim
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
VarR8FromCy
VarR8FromBool
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
SafeArrayGetLBound
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA
AVIStreamGetFrame

winmm

waveOutReset
waveOutRestart
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
waveOutOpen
waveOutGetNumDevs
waveOutClose
midiOutUnprepareHeader
waveOutPause
waveOutWrite
waveOutPrepareHeader
PlaySoundA
waveOutUnprepareHeader

msimg32

GradientFill

comdlg32

ChooseColorA
ChooseFontA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA

shell32

SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA

Exports

Exports

AKA998761

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 400KB - Virtual size: 396KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 324KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f524ab3980df0a97f866d5f9f61d79a

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ws2_32

atl

winspool.drv

advapi32

comctl32

oledlg

ole32

oleaut32

msvfw32

avifil32

winmm

msimg32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 400KB - Virtual size: 396KB

.data Size: 324KB - Virtual size: 648KB

.rsrc Size: 32KB - Virtual size: 28KB

.reloc Size: 152KB - Virtual size: 149KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 400KB - Virtual size: 396KB

.data
Size: 324KB - Virtual size: 648KB

.rsrc
Size: 32KB - Virtual size: 28KB

.reloc
Size: 152KB - Virtual size: 149KB