a19c850176de76284efc489273928e7d46cccb5dc6666063c66ee72600792f6d

Sharing

Copy URL Twitter E-mail

General

Target

a19c850176de76284efc489273928e7d46cccb5dc6666063c66ee72600792f6d
Size

221KB
MD5

0d0db1fd2b2193c67375f3ec5a9a6f70
SHA1

8db76e7c1bfb37121579bc9cf0e5f1abe5b22cb5
SHA256

a19c850176de76284efc489273928e7d46cccb5dc6666063c66ee72600792f6d
SHA512

92d2ddce4f9c3797eaf0051d13279f88165b46b7d25e771b30980fa15dfe5d662a482ea4a4355be9d7ce31a098cbbb8d71eed66ed33cfce4e83806764e55be4d
SSDEEP

3072:cImGN/sAUdrXdxbap1CokvrGy0vhSOKayttHEsMhfQOWPuzOE30sGhqi:/0AEdxbxvSSOKamkrsRE37E

Score

N/A

Malware Config

Signatures

Files

a19c850176de76284efc489273928e7d46cccb5dc6666063c66ee72600792f6d
.dll windows x86

9ec9c446a84e8e9de4b083e04ef15a69

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mfc90u

ord938
ord285
ord1607
ord899
ord1254
ord846
ord2478
ord2676
ord936
ord441
ord690
ord5943
ord2955
ord2953
ord3534
ord400
ord5559
ord5734
ord6813
ord1552
ord1556
ord2084
ord524
ord744
ord1064
ord601
ord310
ord3220
ord321
ord1088
ord4543
ord287
ord266
ord265
ord2326
ord5851
ord2694
ord1137
ord5535
ord663
ord404
ord4448
ord4423
ord6801
ord4173
ord6803
ord4747
ord2251
ord2206
ord6035
ord4179
ord1048
ord5548
ord6741
ord5830
ord4213
ord2087
ord3217
ord5674
ord5676
ord4347
ord4996
ord5680
ord5663
ord6018
ord3115
ord4905
ord4681
ord3670
ord2447
ord4211
ord794
ord589
ord4043
ord6013
ord1599
ord5632
ord4631
ord5167
ord5324
ord2208
ord1810
ord1809
ord1675
ord3353
ord6408
ord1754
ord1751
ord4345
ord1492
ord4664
ord5602
ord2074
ord5512
ord6800
ord4603
ord5653
ord3743
ord5154
ord4702
ord1728
ord6466
ord5685
ord5683
ord960
ord965
ord969
ord967
ord971
ord2615
ord2635
ord2619
ord2625
ord2623
ord2621
ord2638
ord2633
ord2617
ord2640
ord2628
ord2610
ord2612
ord2630
ord2375
ord2368
ord1641
ord6802
ord4174
ord6804
ord3682
ord5404
ord6376
ord3226
ord1442
ord5625
ord2139
ord1792
ord1791
ord1727
ord5650
ord2771
ord2983
ord3112
ord4728
ord2966
ord3140
ord2774
ord2893
ord2764
ord4080
ord4081
ord4071
ord2891
ord4348
ord4910
ord4682
ord3500
ord4519
ord935
ord1329
ord2479
ord4405
ord5979
ord6514
ord4774
ord286
ord799
ord2069
ord6604
ord2597
ord6577
ord3486
ord1353
ord636
ord367
ord795
ord590
ord4530
ord6579
ord5008
ord4000
ord1354
ord782
ord580
ord3543
ord2106
ord1183
ord3537
ord639
ord374
ord3794
ord784
ord582
ord813
ord2537
ord1250
ord280
ord811
ord296
ord600
ord605
ord1274
ord1241
ord1239
ord1264
ord1180
ord1233
ord391
ord1152
ord1273
ord1271
ord1145
ord1076
ord322
ord802
ord801

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_initterm
_encoded_null
_amsg_exit
_adjust_fdiv
_crt_debugger_hook
_CxxThrowException
__clean_type_info_names_internal
_initterm_e
memset
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
__CxxFrameHandler3
_localtime64_s
wcsftime
_time64
_purecall
wcsstr
wcsncpy
memmove_s
fclose
fwrite
fread
ftell
fseek
_wfopen
wcschr
wcstol
wcsncmp
_vswprintf
memmove
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_invalid_parameter_noinfo
_wtoi
__CppXcptFilter
memcpy

kernel32

UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
CreateDirectoryW
FormatMessageW
GetLastError
GetCurrentProcess
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringW
GetLocalTime
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
lstrlenA
LocalFree
GetACP
FindFirstFileW
GetProcAddress
FreeLibrary
LoadLibraryA
RaiseException
GetModuleFileNameW

user32

SetTimer
PostMessageW
EnableWindow
GetParent
GetDesktopWindow
AnimateWindow
ScreenToClient
GetClientRect
InvalidateRect
IsWindow
IsWindowVisible
KillTimer
FindWindowW
GetSystemMetrics
UpdateLayeredWindow
GetWindowRect
SetWindowLongW
GetCursorPos
PtInRect
GetWindowLongW

gdi32

GetTextExtentPoint32W
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW

shell32

SHGetFolderPathW
ShellExecuteW

comctl32

_TrackMouseEvent

shlwapi

PathIsDirectoryW

ole32

CoInitialize
CoCreateInstance
CLSIDFromProgID
CoUninitialize

oleaut32

VariantCopy
VariantClear

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

gdiplus

GdipDeleteGraphics
GdipCreateFromHDC
GdipGetGenericFontFamilySansSerif
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipDeleteFont
GdipCreateSolidFill
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCloneBrush
GdipCreateStringFormat
GdipDeleteStringFormat
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDrawString
GdipBeginContainer2
GdipCreatePath
GdipDeletePath
GdipAddPathRectangleI
GdipSetClipPath
GdipCreateLineBrushI
GdipSetLinePresetBlend
GdipEndContainer
GdipCreateFont

Exports

Exports

??0IZxRenderUpdate@@QAE@ABV0@@Z
??4AutoExImage@@QAEAAV0@ABV0@@Z
??4IZxRenderUpdate@@QAEAAV0@ABV0@@Z
??_7IZxRenderUpdate@@6B@
?SetVertical@AutoExImage@@QAEXH@Z
GetWeatherPlug

Sections

.text
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9ec9c446a84e8e9de4b083e04ef15a69

Headers

DLL Characteristics

File Characteristics

Imports

mfc90u

msvcr90

kernel32

user32

gdi32

shell32

comctl32

shlwapi

ole32

oleaut32

msvcp90

gdiplus

Exports

Exports

Sections

.text Size: 78KB - Virtual size: 77KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 3KB - Virtual size: 3KB

.rsrc Size: 31KB - Virtual size: 31KB

.reloc Size: 10KB - Virtual size: 9KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 78KB - Virtual size: 77KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 31KB - Virtual size: 31KB

.reloc
Size: 10KB - Virtual size: 9KB

.rmnet
Size: 56KB - Virtual size: 60KB