cfb056a77322c3ab33ab1747b3c884290cf7eae2a605512c76b530783cc792d5

Sharing

Copy URL Twitter E-mail

General

Target

cfb056a77322c3ab33ab1747b3c884290cf7eae2a605512c76b530783cc792d5
Size

1.2MB
MD5

9192997629137e0a84fa195b2f435379
SHA1

5d6d0945564685fb5d96ce468a7ce099d9c7819d
SHA256

cfb056a77322c3ab33ab1747b3c884290cf7eae2a605512c76b530783cc792d5
SHA512

b583c2595b7e31ae01f52fd291914a4075432321ee452d3dc8cde7870d196ed2e9dbf5ba30313951f9427e082bfc9798f4c27f41757e938256489770aa551dd4
SSDEEP

12288:36eI/yISGo+XW6rYxz9S3+QI++35aG9kegH4MkKvZtL231bC9Pacg/jz7aoXdTfg:W/yINTMBQvgk/nv7QZ9f9tf9a

Score

N/A

Malware Config

Signatures

Files

cfb056a77322c3ab33ab1747b3c884290cf7eae2a605512c76b530783cc792d5
.exe windows x86

4a7444f7efdbe300f5ef9d6d8d18398f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ltfil12n

ord103
ord101

ltimg12n

ord101
ord117
ord122
ord113
ord111

ltkrn12n

ord134
ord197
ord125
ord112
ord104
ord111
ord151
ord145
ord115
ord144
ord106
ord241
ord107
ord110
ord116
ord157

ltdis12n

ord129
ord138
ord122
ord132

bpenhan

?CreateMappingTable@@YG_NPAGKKPAVEnhanceSetting@@_N0@Z
?HueSaturationAdjustment@@YG_NPAEHGGHH@Z

kernel32

GetTempFileNameA
GetDiskFreeSpaceA
LocalAlloc
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentDirectoryA
RtlUnwind
HeapFree
GetCurrentThread
SetCurrentDirectoryA
SetEnvironmentVariableA
CreateDirectoryA
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapSize
HeapReAlloc
GetACP
GetTimeZoneInformation
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetLastError
lstrcpynA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
lstrcmpA
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
GetPrivateProfileStringA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
SetLastError
WinExec
GetSystemDirectoryA
FindResourceA
LoadResource
LockResource
lstrlenA
lstrcmpiA
GetVolumeInformationA
GetDriveTypeA
WritePrivateProfileStringA
FindFirstFileA
FindNextFileA
LoadLibraryA
GetProcAddress
FreeLibrary
MulDiv
lstrcpyA
GetModuleFileNameA
GlobalFree
GetPrivateProfileIntA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc

user32

SetScrollInfo
GetScrollInfo
ScrollWindow
EndDeferWindowPos
BeginDeferWindowPos
DeferWindowPos
IsWindow
MapWindowPoints
SendDlgItemMessageA
LoadIconA
GetDlgItemInt
SetDlgItemInt
SetWindowTextA
EnableMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
CreateDialogIndirectParamA
EndDialog
wvsprintfA
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
DestroyMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
CharUpperA
ValidateRect
ShowOwnedPopups
GetSysColorBrush
InsertMenuA
DeleteMenu
GetMenuStringA
DestroyIcon
RegisterWindowMessageA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetMenu
LoadMenuA
SetMenu
GetSubMenu
CheckMenuItem
ShowWindow
ScreenToClient
ClientToScreen
ShowScrollBar
MessageBeep
AdjustWindowRectEx
WinHelpA
MapDialogRect
IsRectEmpty
GetActiveWindow
GetMessageA
GetScrollRange
DispatchMessageA
SetActiveWindow
PostQuitMessage
IsWindowEnabled
GetDlgCtrlID
CallMsgFilterA
CharLowerBuffA
CharNextA
GetNextDlgGroupItem
GetWindowTextA
PeekMessageA
IsDialogMessageA
CreateWindowExA
GetDlgItem
GetCapture
IsWindowVisible
SetWindowLongA
GetKeyState
GetFocus
IsChild
GetClassNameA
GetWindow
GetWindowLongA
GetNextDlgTabItem
SetRectEmpty
LoadStringA
GetLastActivePopup
InflateRect
ClipCursor
LoadCursorA
SetCursor
FindWindowA
SetFocus
GetDC
PostMessageA
UpdateWindow
GetCursorPos
CopyRect
wsprintfA
GetSystemMetrics
GetWindowRect
KillTimer
SetTimer
EqualRect
GetSysColor
FrameRect
OffsetRect
ReleaseCapture
IntersectRect
GetParent
LoadBitmapA
DrawTextA
SetCapture
SendMessageA
SetRect
FillRect
InvalidateRect
PtInRect
EnableWindow
GetClientRect
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
DefWindowProcA
DestroyWindow
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
TranslateMessage
MessageBoxA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
GetMessagePos
GetForegroundWindow
SetForegroundWindow
MoveWindow
SetWindowPos
ReleaseDC
UnregisterClassA

gdi32

GetObjectA
CreateCompatibleDC
RealizePalette
ExtTextOutA
SetPixel
BitBlt
GetPixel
CreateSolidBrush
CreateFontIndirectA
GetTextExtentPoint32A
CreatePen
UnrealizeObject
RoundRect
CreateCompatibleBitmap
LineTo
MoveToEx
SelectObject
GetStockObject
DeleteObject
PaintRgn
CreatePolygonRgn
Rectangle
PtInRegion
DPtoLP
LPtoDP
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SetTextAlign
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
GetDeviceCaps

comdlg32

GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyA
RegSetValueA
RegCreateKeyA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
GetFileSecurityA
SetFileSecurityA
RegDeleteKeyA
RegQueryValueA
RegQueryValueExA

shell32

DragQueryFileA
SHGetFileInfoA
ExtractIconA
DragFinish

comctl32

ord17

Sections

.text
Size: 656KB - Virtual size: 652KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 84KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 404KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.irdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

4a7444f7efdbe300f5ef9d6d8d18398f

Headers

File Characteristics

Imports

ltfil12n

ltimg12n

ltkrn12n

ltdis12n

bpenhan

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 656KB - Virtual size: 652KB

.rdata Size: 84KB - Virtual size: 80KB

.data Size: 16KB - Virtual size: 48KB

.rsrc Size: 404KB - Virtual size: 401KB

.irdata Size: 20KB - Virtual size: 20KB

.text
Size: 656KB - Virtual size: 652KB

.rdata
Size: 84KB - Virtual size: 80KB

.data
Size: 16KB - Virtual size: 48KB

.rsrc
Size: 404KB - Virtual size: 401KB

.irdata
Size: 20KB - Virtual size: 20KB