d042083dc66b7cdff71d824078395d17ef66007f11ffaabf13ae995dfcf7ac76

Sharing

Copy URL Twitter E-mail

General

Target

d042083dc66b7cdff71d824078395d17ef66007f11ffaabf13ae995dfcf7ac76
Size

2.7MB
MD5

5be78baaeeb31563829b46b0e3cea9ea
SHA1

af34a18568b59e5429d9d1d94bc8162fbfaaebe8
SHA256

d042083dc66b7cdff71d824078395d17ef66007f11ffaabf13ae995dfcf7ac76
SHA512

d414757861669c492ef5854ca9410a0531dc4387b0d86bb914a1704d0342f9fa294329365278f8e9164ebeac26b71428790c0c2f8a7b6a9b9bcade0cdb1812cb
SSDEEP

49152:Oyy9Ng8dpIZHuVF+uqX6kqRgFKvc4clwY:D8jNorqkqV

Score

N/A

Malware Config

Signatures

Files

d042083dc66b7cdff71d824078395d17ef66007f11ffaabf13ae995dfcf7ac76
.exe windows x86

d7feddf0d2e327e40cb784ea820c840f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA
GetUserNameW

kernel32

FindResourceW
LocalFree
CreateDirectoryW
OutputDebugStringW
MoveFileW
LoadResource
SizeofResource
LockResource
QueryPerformanceCounter
QueryPerformanceFrequency
GetVersionExW
GetLocaleInfoW
CompareStringA
GetProcessHeap
HeapAlloc
HeapFree
GlobalAlloc
GlobalFree
ExitProcess
InterlockedCompareExchange
InterlockedExchange
lstrlenW
LoadLibraryA
GetStartupInfoA
SetUnhandledExceptionFilter
GetCommandLineW
SetCurrentDirectoryW
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
DebugBreak
OutputDebugStringA
WideCharToMultiByte
GetSystemInfo
IsProcessorFeaturePresent
WriteFile
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileA
UnmapViewOfFile
FindResourceA
VirtualFree
VirtualAlloc
InterlockedIncrement
InterlockedDecrement
RegisterApplicationRestart
GetCurrentThreadId
DeleteFileA
DeleteFileW
ReadFile
GetTempFileNameA
GetTempPathA
FreeResource
SetFilePointer
GetFullPathNameA
GlobalMemoryStatus
SetEndOfFile
lstrcmpiA
LoadLibraryExW
EnumResourceNamesW
EnumResourceTypesW
ExpandEnvironmentStringsW
FormatMessageW
LocalAlloc
GetThreadLocale
FindResourceExW
CreateThread
WriteConsoleW
GetFileType
GetStdHandle
GetCurrentDirectoryW
GetSystemDirectoryW
LoadLibraryW
FreeLibrary
MultiByteToWideChar
ResetEvent
WaitForSingleObject
WaitForMultipleObjects
SetEvent
DeleteCriticalSection
CreateEventW
InitializeCriticalSection
GetVersionExA
GetProcAddress
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSetInformation
CreateMutexW
GetTickCount
GetLastError
MulDiv
CreateFileW
GetModuleHandleA
CloseHandle
GetModuleHandleW
GetModuleFileNameW

gdi32

CreateRoundRectRgn
GetTextColor
MoveToEx
ExtTextOutA
SetMapMode
SetTextAlign
CreateFontIndirectA
GetFontLanguageInfo
GetBkColor
SetBkMode
GetCharacterPlacementW
GetCharacterPlacementA
DeleteDC
CreateDIBSection
GetGlyphOutlineA
GetTextMetricsA
GetObjectA
Rectangle
GetTextMetricsW
CreatePen
GetObjectW
GetStockObject
GetDeviceCaps
CreateFontIndirectW
SelectObject
GetTextExtentPoint32W
SetTextColor
SetBkColor
ExtTextOutW
CreateCompatibleDC
CreateBitmap
BitBlt
ExcludeClipRect
DeleteObject
CreateSolidBrush

user32

GetCursorInfo
SetWindowTextW
DestroyAcceleratorTable
GetKeyboardLayoutList
GetWindowTextW
DialogBoxParamW
RegisterClassW
CreateWindowExW
DestroyMenu
SetWindowLongW
GetFocus
GetDoubleClickTime
GetProcessDefaultLayout
GetSysColorBrush
DrawTextW
LoadIconW
GetIconInfo
CreateDialogIndirectParamW
CreateDialogParamW
GetNextDlgTabItem
IsDialogMessageW
SetWindowRgn
EnumChildWindows
IsWindowEnabled
DrawEdge
BeginPaint
EndPaint
CallWindowProcW
EndDialog
GetDlgCtrlID
SetFocus
GetNextDlgGroupItem
GetClassNameW
GetWindow
GetForegroundWindow
GetParent
SendInput
MessageBoxW
DestroyWindow
UnregisterClassW
InvalidateRect
PostQuitMessage
GetClassLongW
GetMessageExtraInfo
PostMessageW
KillTimer
DefWindowProcW
GetWindowLongW
IsWindowVisible
SetRectEmpty
AdjustWindowRect
MonitorFromRect
UnionRect
EqualRect
SetTimer
FindWindowW
ShowWindow
BringWindowToTop
SetForegroundWindow
SetProcessDPIAware
LoadMenuW
RemoveMenu
SetWindowsHookExW
GetKeyState
MonitorFromWindow
GetMonitorInfoW
GetWindowPlacement
SetWindowPlacement
UpdateWindow
RegisterRawInputDevices
SetWindowPos
LoadAcceleratorsW
UnhookWindowsHookEx
GetDC
SystemParametersInfoW
GetKeyboardLayout
TranslateAcceleratorW
ReleaseDC
LoadCursorW
SetCursor
CheckMenuItem
GetSysColor
DrawFrameControl
GetRawInputData
OffsetRect
PtInRect
RegisterWindowMessageW
LoadStringW
ReleaseCapture
GetCursorPos
SetRect
SetCursorPos
MapWindowPoints
ShowCursor
CheckRadioButton
SetDlgItemTextW
GetMessageW
TranslateMessage
DispatchMessageW
PeekMessageW
GetDlgItem
CheckDlgButton
IsDlgButtonChecked
EnableWindow
CallNextHookEx
TrackPopupMenu
GetMenuItemCount
GetMenuItemInfoW
SetMenuItemInfoW
SetMenuInfo
GetWindowRect
IsZoomed
IsIconic
NotifyWinEvent
GetMenu
EnableMenuItem
GetSubMenu
GetSystemMetrics
SendMessageW
GetClientRect
ClientToScreen
SetCapture

msvcrt

??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
frexp
iswspace
wcstombs_s
fgetwc
fread
fseek
ftell
_wfopen_s
fwrite
fclose
mbtowc
fputwc
fgetc
strchr
strncmp
strcat_s
wcsstr
wcstoul
towlower
_ftol2
memmove
_CIpow
qsort
_stricmp
_wcsnicmp
wcstod
time
swprintf_s
wcscat_s
srand
rand
?_set_new_handler@@YAP6AHI@ZP6AHI@Z@Z
?_set_new_mode@@YAHH@Z
wcsrchr
wcschr
memset
??0exception@@QAE@ABV0@@Z
_CIsin
_CIcos
_wtoi
mbstowcs_s
_vsnprintf
_CxxThrowException
_CIacos
_CIatan2
_CIsqrt
_finite
_clearfp
_strdup
setlocale
sscanf
_CIlog
_CIasin
_CIatan
iswpunct
iswdigit
iswalpha
ceil
wcstombs
atof
tolower
isdigit
isalnum
isalpha
isxdigit
atoi
_fpclass
_isnan
_CItanh
_CIsinh
_CIfmod
_CIexp
_CIcosh
_ultoa
isspace
atol
toupper
wcsncpy_s
_vsnwprintf_s
_vscwprintf
_errno
_wcsdup
_beginthreadex
wcsspn
wcscspn
memmove_s
wcsnlen
wcsncmp
wcstol
_snwprintf_s
_callnewh
realloc
_purecall
wcscpy_s
_wcsicmp
free
malloc
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_acmdln
_initterm
_amsg_exit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_except_handler4_common
_controlfp
floor
memcpy
sscanf_s
__CxxFrameHandler3
_CItan
_ftol2_sse

oleaut32

VariantInit
SysFreeString
SysStringLen
SysAllocString

ntdll

WinSqmAddToStream

ole32

CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CreateStreamOnHGlobal

shell32

ShellAboutW
CommandLineToArgvW
SHSetLocalizedName
SHGetKnownFolderPath
ExtractIconW
SHGetFolderPathEx
SHGetFolderPathW
ShellExecuteW

comctl32

ImageList_Add
ImageList_Destroy
InitCommonControlsEx
ImageList_Create

gdiplus

GdipSetClipRectI
GdipDrawImagePointRectI
GdipCloneImage
GdipCloneBrush
GdipCreateFont
GdipDrawImageRectI
GdipDrawString
GdipSetTextRenderingHint
GdipCreateFromHDC
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipSetStringFormatFlags
GdipCreateSolidFill
GdipCreateBitmapFromResource
GdipDisposeImage
GdipDeleteFont
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteGraphics
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDeleteBrush
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipMeasureString
GdipFillRegion
GdipFillRectangleI
GdipCreateHBITMAPFromBitmap
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawRectangleI
GdipDrawRectangle
GdipDrawLineI
GdipReleaseDC
GdipGetDC
GdipGetImageGraphicsContext
GdipSetStringFormatHotkeyPrefix
GdipSetPenDashStyle
GdipCreateLineBrushFromRectI
GdipSetImageAttributesWrapMode
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipImageRotateFlip
GdipGetImageHeight
GdipGetImageWidth
GdipLoadImageFromStreamICM
GdipLoadImageFromStream
GdipDeleteRegion
GdipDeletePen
GdipCreatePen1
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipSetClipRegion
GdipCreateRegionHrgn
GdipDrawImageRectRectI

dsound

ord11

winmm

mmioWrite
mmioClose
mmioOpenW
mmioAdvance
mmioDescend
mmioRead
mmioAscend
mmioSetInfo
timeGetTime
mmioSeek
mmioGetInfo
mmioCreateChunk

oleacc

LresultFromObject

slc

SLGetWindowsInformationDWORD

dinput8

DirectInput8Create

usp10

ScriptBreak
ScriptItemize

shlwapi

PathFileExistsW

secur32

GetUserNameExW

xinput9_1_0

XInputGetState

Sections

.pexe
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 95KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d7feddf0d2e327e40cb784ea820c840f

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

oleaut32

ntdll

ole32

shell32

comctl32

gdiplus

dsound

winmm

oleacc

slc

dinput8

usp10

shlwapi

secur32

xinput9_1_0

Sections

.pexe Size: 15KB - Virtual size: 15KB

.text Size: 1.1MB - Virtual size: 1.1MB

.data Size: 95KB - Virtual size: 95KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 41KB - Virtual size: 41KB

.pexe
Size: 15KB - Virtual size: 15KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 95KB - Virtual size: 95KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 41KB - Virtual size: 41KB