45f58d3f3ac57cc06910a980b5ee98787fdf134932fbc0521c1d8a4ac09b3929

Sharing

Copy URL Twitter E-mail

General

Target

45f58d3f3ac57cc06910a980b5ee98787fdf134932fbc0521c1d8a4ac09b3929
Size

1.8MB
MD5

e314b63bd47681bb7fe813f7402bc04c
SHA1

5dd3c792960bf83c22a7d6352166268b63dbba38
SHA256

45f58d3f3ac57cc06910a980b5ee98787fdf134932fbc0521c1d8a4ac09b3929
SHA512

8d81dd05526bfded56c92833242b289d16cb66540a91f5d865c1652f3678c6541da316fb644d719ad4001a5a2192526feb6c1b49d6b50b3bfb2b796ba5c2a3c9
SSDEEP

24576:kxHnEsIXRLScsKyVToO4GhCrBI0kOF3iFROwM/pinLAtoRbiBcjCTlHW0Sii1b4+:AnbULSVOEJFOwM/snLAiRu/hIJ1b48T

Score

N/A

Malware Config

Signatures

Files

45f58d3f3ac57cc06910a980b5ee98787fdf134932fbc0521c1d8a4ac09b3929
.exe windows x86

eb13ea222d27c36c69af714a120be82d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeKillEvent
timeSetEvent
waveOutSetVolume
mciSendCommandA
mciGetErrorStringA
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
waveOutGetErrorTextA
timeEndPeriod
timeBeginPeriod
timeGetTime
waveOutMessage
waveOutReset
waveOutRestart
waveOutPause
waveOutGetPosition
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite

avcodec-52

ord906
ord903
ord919
ord958
ord921
ord841
ord840
ord839
ord912
ord927
ord932
ord937
ord910
ord858
ord950
ord882
ord862
ord843
ord844
ord867
ord940
ord925
ord960
ord931
ord860
ord842
ord854
ord908
ord923
ord959
ord956
ord868
ord914
ord857
ord865
ord896
ord926
ord924
ord873
ord933
ord902
ord848
ord945
ord874
ord936
ord875
ord852
ord957
ord847
ord859
ord863
ord845
ord881
ord889
ord883
ord920
ord944
ord946
ord905
ord935
ord911

avdevice-52

ord1

avformat-52

ord464
ord49
ord77
ord344
ord36
ord30
ord28
ord43
ord478
ord44
ord476
ord80
ord26
ord47
ord25
ord68
ord45
ord63
ord71
ord35
ord60
ord467
ord491
ord31
ord466
ord82
ord61
ord23
ord46
ord51
ord81
ord58
ord79
ord78
ord473
ord110
ord70
ord21
ord264
ord62

avutil-50

ord29
ord67
ord24
ord27
ord23
ord20
ord22
ord57
ord25
ord42
ord40
ord59
ord58
ord38
ord46
ord71
ord32
ord31
ord60
ord45
ord72
ord12
ord43

swscale-0

ord77
ord66
ord63
ord69

zlib1

ord67

kernel32

GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedCompareExchange
IsProcessorFeaturePresent
GetThreadContext
SetThreadContext
LCMapStringW
GetCommandLineA
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
GetCurrentThread
SuspendThread
VirtualProtect
WriteProcessMemory
GetProcAddress
GetCurrentProcess
LoadLibraryA
InterlockedExchange
MultiByteToWideChar
lstrcmpiA
WideCharToMultiByte
lstrlenW
GetVersion
lstrlenA
GetLastError
CompareStringA
GetEnvironmentVariableA
CompareStringW
SizeofResource
LockResource
LoadResource
FindResourceA
FreeLibrary
SetLastError
GetModuleHandleA
lstrcpynA
RaiseException
GetModuleFileNameA
GetTickCount
GetVersionExA
FreeResource
GetWindowsDirectoryA
WinExec
Sleep
CloseHandle
GetTempFileNameA
DeleteFileA
CreateThread
WaitForSingleObject
ReadFile
DuplicateHandle
GetCurrentProcessId
WriteFile
GetTempPathA
CreateSemaphoreA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemDirectoryA
CopyFileA
GetFileAttributesA
FindFirstFileA
FindClose
CreateFileA
GetFileTime
FileTimeToSystemTime
SetFilePointer
CreateFileW
ReadFileEx
GetFileSize
GetFileSizeEx
SetFilePointerEx
GetFileInformationByHandle
EnterCriticalSection
LeaveCriticalSection
MulDiv
InitializeCriticalSection
DeleteCriticalSection
GlobalAlloc
LoadLibraryExA
lstrcmpA
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
GlobalFree
GetCurrentThreadId
FlushInstructionCache
GlobalLock
GlobalUnlock
OutputDebugStringA
QueryPerformanceCounter
CreateMutexA
ReleaseMutex
SetEvent
CreateEventA
ResetEvent
SetEnvironmentVariableA
ReleaseSemaphore
SetThreadPriority
ResumeThread
GetLocaleInfoA
GetACP
SetErrorMode
GetDriveTypeA
GetSystemDefaultLCID
FindResourceExA
FindNextFileW
FindFirstFileW
GetLocaleInfoW
EnumResourceLanguagesA
ConvertDefaultLocale
GlobalDeleteAtom
GlobalAddAtomA
LocalFree
FormatMessageA
WritePrivateProfileStringA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleFileNameW
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
HeapAlloc
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapFree
UnhandledExceptionFilter
IsDebuggerPresent
ExitThread
ExitProcess
GetSystemTimeAsFileTime
GetProcessHeap
GetStartupInfoA
SetConsoleCtrlHandler
RtlUnwind
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
IsValidCodePage
LCMapStringA

user32

IsRectEmpty
UpdateWindow
GetClassInfoA
DefWindowProcA
DestroyCursor
SetRectEmpty
GetMessageA
GetCursor
TranslateMessage
DispatchMessageA
GetKeyState
GetWindowLongA
SystemParametersInfoA
GetDesktopWindow
SetForegroundWindow
LoadMenuA
GetSubMenu
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
LoadIconA
GetCaretPos
MessageBeep
GetMessagePos
SetWindowLongA
IsIconic
DrawIcon
SetPropA
EnableMenuItem
SetWindowRgn
CallNextHookEx
MessageBoxA
EqualRect
GetPropA
EnumWindows
ShowWindow
IsWindowVisible
SetActiveWindow
GetLastActivePopup
ExitWindowsEx
LoadImageA
GetClassNameA
CreateWindowExA
InvalidateRgn
DestroyWindow
GetClassInfoExA
RegisterClassExA
GetWindow
SetWindowTextA
GetWindowTextA
IsChild
GetWindowTextLengthA
SetFocus
GetDlgItem
CreateAcceleratorTableA
DestroyAcceleratorTable
MoveWindow
SetWindowPos
CallWindowProcA
CharNextA
BeginPaint
EndPaint
EnumDisplaySettingsA
DestroyIcon
ChangeDisplaySettingsA
GetForegroundWindow
AdjustWindowRectEx
GetMenu
IsZoomed
DrawTextW
PeekMessageA
InflateRect
MapWindowPoints
GetKeyboardState
UnregisterClassA
GetKeyboardLayout
ToAsciiEx
SetCursorPos
PostQuitMessage
ClipCursor
AdjustWindowRect
ToUnicode
RegisterClassA
MsgWaitForMultipleObjects
MapVirtualKeyA
SetClassLongA
CreateIconFromResourceEx
CreateCursor
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
MapVirtualKeyExA
ValidateRect
GetActiveWindow
SetWindowsHookExA
IsWindowEnabled
GetWindowThreadProcessId
GetMenuItemCount
GetFocus
GetMenuState
MapDialogRect
SetWindowContextHelpId
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
CheckMenuItem
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowPlacement
IntersectRect
GetDlgCtrlID
SetScrollInfo
GetScrollInfo
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
RemovePropA
GetClassLongA
GetCapture
WinHelpA
SendDlgItemMessageA
GetWindowDC
IsDialogMessageA
DestroyMenu
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
GrayStringA
RedrawWindow
LockWindowUpdate
ShowScrollBar
ReleaseDC
GetDC
PostMessageA
ReleaseCapture
SetCapture
DrawTextA
LoadBitmapA
GetParent
GetSystemMetrics
GetWindowRect
DrawTextExA
DrawFrameControl
OffsetRect
FrameRect
SetCursor
LoadCursorA
IsWindow
SetRect
PtInRect
ClientToScreen
DrawFocusRect
GetSysColorBrush
FillRect
DrawEdge
GetSysColor
InvalidateRect
GetClientRect
SendMessageA
CopyRect
EnableWindow
CharUpperA
TabbedTextOutA
BringWindowToTop
ScreenToClient
GetCursorPos
KillTimer
SetTimer
RegisterWindowMessageA
WindowFromPoint

gdi32

CreateRectRgn
RectVisible
PtVisible
GetCurrentObject
GetBkColor
Escape
ExtTextOutA
TextOutA
Rectangle
GetTextExtentPoint32A
DeleteObject
CreateBitmap
SelectObject
RealizePalette
SelectPalette
GetDeviceCaps
CreateCompatibleBitmap
SetTextColor
CreatePolygonRgn
LineTo
MoveToEx
DeleteDC
CreateSolidBrush
CreateDIBSection
FillRgn
StretchBlt
GetObjectA
BitBlt
CreateCompatibleDC
CreateFontW
PtInRegion
SetBkMode
SetPixelFormat
ChoosePixelFormat
SwapBuffers
DescribePixelFormat
GetPixel
SetBkColor
Ellipse
GetClipBox
SaveDC
RestoreDC
SetROP2
SetPaletteEntries
GetStockObject
RoundRect
SetDIBitsToDevice
CreateRoundRectRgn
SetMapMode
GetDIBits
CreateDCA
GetBitmapBits
PlgBlt
GetSystemPaletteEntries
CreatePen
SetSystemPaletteUse
SetDeviceGammaRamp
GetDeviceGammaRamp
GetSystemPaletteUse
CreatePalette
SetDIBColorTable
CreateFontIndirectA
GetRgnBox
GetTextColor
DPtoLP
GetMapMode
CreateRectRgnIndirect
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
UnrealizeObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
IsTextUnicode
RegEnumKeyA
RegOpenKeyExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
DragQueryFileA
ShellExecuteA
Shell_NotifyIconA

comctl32

_TrackMouseEvent
InitCommonControlsEx

shlwapi

PathFindFileNameA
PathFileExistsA
PathCombineA
PathRenameExtensionA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecA

oledlg

ord8

ole32

OleInitialize
CoGetClassObject
CLSIDFromProgID
CoCreateInstance
OleLockRunning
StringFromGUID2
CoTaskMemAlloc
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
OleUninitialize
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CreateStreamOnHGlobal
CoRegisterMessageFilter

oleaut32

SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VarUI4FromStr
OleCreateFontIndirect
SysStringLen
SysStringByteLen
LoadRegTypeLi
VariantInit
VariantClear
GetErrorInfo
VariantCopy
SafeArrayDestroy
VariantChangeType
SysAllocStringByteLen
SysAllocString
LoadTypeLi
OleLoadPicture

ddraw

DirectDrawCreate

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 312KB - Virtual size: 311KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb13ea222d27c36c69af714a120be82d

Headers

File Characteristics

Imports

winmm

avcodec-52

avdevice-52

avformat-52

avutil-50

swscale-0

zlib1

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ddraw

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 312KB - Virtual size: 311KB

.data Size: 280KB - Virtual size: 3.1MB

.rsrc Size: 100KB - Virtual size: 97KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 312KB - Virtual size: 311KB

.data
Size: 280KB - Virtual size: 3.1MB

.rsrc
Size: 100KB - Virtual size: 97KB