eb428faaef6aa0410ada19222775a4331f712016d5f6c744b411950a10a22180

Sharing

Copy URL Twitter E-mail

General

Target

eb428faaef6aa0410ada19222775a4331f712016d5f6c744b411950a10a22180
Size

496KB
MD5

0f2612afe3a6a49b159c45cc7ae5e4b0
SHA1

21edac6422d49623a2ab8b3268248b9f42c84c4e
SHA256

eb428faaef6aa0410ada19222775a4331f712016d5f6c744b411950a10a22180
SHA512

65470c38609a7f5a062a23c9ed1cc125167208fc3beb4db32742c7cc842987b543d71f154827380420de45c892dac4bc697edc56a334ccc25e8fcfe56c0552eb
SSDEEP

12288:u6Kb9jm15hZZRd3avNy+7yyfZDKqkiWBEeevu:PrR3KRHk5B9

Score

N/A

Malware Config

Signatures

Files

eb428faaef6aa0410ada19222775a4331f712016d5f6c744b411950a10a22180
.exe windows x86

51fa0fcd3edf561b96b0c55901a85bb5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapFree
HeapAlloc
GetCurrentThreadId
GetCurrentDirectoryA
CreateDirectoryA
IsDBCSLeadByte
GetFileAttributesA
GetModuleHandleA
GetEnvironmentVariableA
GlobalAlloc
_lclose
GlobalLock
_lread
_hread
GlobalUnlock
GlobalFree
SetCurrentDirectoryA
CopyFileA
_llseek
ReadFile
CompareStringA
SetFilePointer
lstrcpynA
CreateFileMappingA
MapViewOfFile
lstrcmpA
UnmapViewOfFile
GetModuleFileNameA
LoadLibraryA
FreeLibrary
InterlockedDecrement
MultiByteToWideChar
GetProcAddress
InterlockedIncrement
_hwrite
CreateProcessA
Sleep
GetTempPathA
GetUserDefaultLCID
SizeofResource
GetPrivateProfileSectionA
GetTempFileNameA
WriteFile
FindNextFileA
DeleteFileA
VerLanguageNameA
WritePrivateProfileStringA
CreateFileA
CloseHandle
GetVersionExA
GetLocalTime
GetVersion
GetSystemDirectoryA
GetWindowsDirectoryA
FindFirstFileA
GetSystemInfo
FindClose
GetLastError
lstrcatA
lstrcmpiA
GetTickCount
lstrlenA
GetPrivateProfileStringA
lstrcpyA
LockResource
FindResourceA
LoadResource
FreeResource
GetFileSize
HeapDestroy
HeapCreate
IsBadCodePtr
GetOEMCP
GetACP
SetUnhandledExceptionFilter
IsBadReadPtr
GetStringTypeW
GetStringTypeA
GetCPInfo
VirtualAlloc
IsBadWritePtr
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
HeapReAlloc
VirtualFree
HeapSize
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
GetFileType
GetStdHandle
DeleteCriticalSection
SetErrorMode
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTime
GetTimeZoneInformation
RtlUnwind
ExitProcess
GetCommandLineA
GetStartupInfoA
GetDriveTypeA
LCMapStringA
LCMapStringW
RaiseException
CompareStringW
SetEnvironmentVariableA
InterlockedExchange

user32

GetKeyState
GetWindowLongA
GetClassInfoA
SetWindowLongA
RegisterWindowMessageA
SetFocus
EndDialog
LoadBitmapA
SetTimer
FillRect
KillTimer
DialogBoxParamA
GetSysColor
GetWindowRect
IsRectEmpty
SetDlgItemTextA
GetSystemMetrics
SetCaretBlinkTime
MapVirtualKeyA
SubtractRect
EqualRect
EndPaint
PostMessageA
wsprintfA
PostQuitMessage
DefWindowProcA
CreateDialogParamA
GetDC
ReleaseDC
GetClientRect
IntersectRect
FindWindowA
SendMessageA
RegisterClassA
CreateWindowExA
IsWindow
GetMessageA
TranslateMessage
DispatchMessageA
LoadStringA
DestroyWindow
MessageBoxA
CopyRect
UnionRect
SendDlgItemMessageA
SetWindowTextA
LoadIconA
ReleaseCapture
SetCursor
LoadCursorA
SetCapture
DestroyCursor
SetClassLongA
LoadCursorFromFileA
GetMessageTime
GetMessagePos
UpdateWindow
WaitForInputIdle
RegisterClassExA
GetClassInfoExA
GetParent
SetParent
ScreenToClient
PtInRect
InflateRect
DrawTextA
DestroyCaret
VkKeyScanA
BeginPaint
UnhookWindowsHookEx
MessageBeep
CallNextHookEx
CharNextA
SetWindowsHookExA
IsCharAlphaA
PeekMessageA
IsCharAlphaNumericA
SetCursorPos
ClientToScreen
GetCursorPos
EnumChildWindows
InvalidateRect
DrawFocusRect
ShowWindow
IsIconic
IsWindowVisible
CreateCaret
SetCaretPos
SetWindowPos
MoveWindow
ShowCaret
GetDlgItem
CharLowerBuffA
CharUpperBuffA
DestroyMenu
CreatePopupMenu
CheckRadioButton
ValidateRect
GetWindowTextA
SetScrollRange
GetScrollRange
WindowFromPoint
IsDlgButtonChecked
SetScrollPos
SetRectEmpty
GetScrollPos
MsgWaitForMultipleObjects
CharLowerA
EnableWindow
GetDlgItemTextA
SetForegroundWindow
GetFocus
UnregisterClassA
TrackPopupMenu
GetForegroundWindow
GetDesktopWindow
AppendMenuA
SetRect
ShowScrollBar
GetSystemMenu

gdi32

RealizePalette
CreatePatternBrush
CreatePalette
GetSystemPaletteEntries
GetDeviceCaps
DeleteDC
BitBlt
DeleteObject
UnrealizeObject
CreateCompatibleDC
SelectObject
SetTextColor
SetBkMode
CreateSolidBrush
GetObjectA
RestoreDC
GetStockObject
CombineRgn
CreateRectRgnIndirect
SelectClipRgn
SaveDC
Rectangle
CreateRectRgn
CreateHatchBrush
DeleteEnhMetaFile
SetBkColor
CreateBitmap
CreateCompatibleBitmap
StretchBlt
PlayEnhMetaFile
SetEnhMetaFileBits
SetStretchBltMode
CreatePen
LineTo
SetWinMetaFileBits
SetPixel
GetPixel
MoveToEx
SetTextAlign
TextOutA
ExtTextOutA
Arc
Ellipse
SetTextCharacterExtra
CreateRoundRectRgn
CreatePolygonRgn
CreateEllipticRgn
Polygon
Polyline
RoundRect
GetTextMetricsA
GetTextExtentPoint32A
StretchDIBits
EnumFontFamiliesExA
CreateFontIndirectA
EnumFontsA
SelectPalette
CreateDCA
CreateDIBitmap
PatBlt
CreateEllipticRgnIndirect

comdlg32

GetOpenFileNameA

advapi32

RegOpenKeyA
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA

ole32

CoUninitialize
CoInitialize
CoCreateInstance

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

winmm

timeKillEvent
timeGetDevCaps
timeBeginPeriod
timeGetTime
timeSetEvent
mciSendCommandA

shell32

ShellExecuteA

Exports

Exports

AppEnumWindows
CaptureHookProc
DemoClosingDialog
DemoMenuDialog
DemoSplashDialog
EnumFontExProc
EventProcDll
JournalPlayHookProc
JournalRecordHookProc
KeyboardHookProc
LaunchAppProc
MouseHookProc
PlayerAbout
ServerWndProc
WinSupBackWndProc
WinSupWndProc

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 112KB - Virtual size: 112KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

51fa0fcd3edf561b96b0c55901a85bb5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

version

winmm

shell32

Exports

Exports

Sections

.text Size: 288KB - Virtual size: 286KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 24KB - Virtual size: 25KB

.rsrc Size: 44KB - Virtual size: 40KB

.text Size: 112KB - Virtual size: 112KB

.text
Size: 288KB - Virtual size: 286KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 24KB - Virtual size: 25KB

.rsrc
Size: 44KB - Virtual size: 40KB

.text
Size: 112KB - Virtual size: 112KB