92717b51c24b4f1748e40bfea55aab9da0cf4139e4d654e49148a117df5f2beb

Sharing

Copy URL Twitter E-mail

General

Target

92717b51c24b4f1748e40bfea55aab9da0cf4139e4d654e49148a117df5f2beb
Size

700KB
MD5

3103dba130029fd57f15b2a3a6f9c410
SHA1

533525eaed8102416323a9277a76a002014639d5
SHA256

92717b51c24b4f1748e40bfea55aab9da0cf4139e4d654e49148a117df5f2beb
SHA512

77017f4c59eae1e2cbeb26096128ee9eeb1f0e22951ed9eb5ecf8ea2f20596949dbbce52c329230159728f6f84ea13bb57fd41930c3c1f9f3c13c2efecfd3f78
SSDEEP

12288:LKkdLX/DlpQfoHTKDz7//Ze45gRRKTFVMmy7QY6Emiu+beAE2D/U2N6+Q+FxxujF:LZX/Z9KDzD/ZexRRKTsj7QY6JiiEhhPs

Score

N/A

Malware Config

Signatures

Files

92717b51c24b4f1748e40bfea55aab9da0cf4139e4d654e49148a117df5f2beb
.exe windows x86

8c5b5f67a492e7a601cdcf9d207fa40d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

medialibrary

SetUserUpdatedMediaLibrary
ModifyIconWithUAC
UpdateMediaLibraryEx
UpdateMediaLibraryFromPlatform
SetMediaLibraryCallback
HasUserUpdatedMediaLibrary
OpenMediaLibraryDir
UpdateMediaLibrarySilent
IsNeedChangeNewStatus
RemoveShellViewIcon
UpdateDesktopShortcutIcon
RemoveRestartExplorerFlag
IsNeedRestartExplorer
RunPlatForm
IsPlatformRun
?GetDislikeListEx@UserInfoFromGalaxy@@SAHAAV?$vector@UIconMovieInfo@@V?$allocator@UIconMovieInfo@@@std@@@std@@@Z
?GetLikeListEx@UserInfoFromGalaxy@@SAHAAV?$vector@UIconMovieInfo@@V?$allocator@UIconMovieInfo@@@std@@@std@@@Z
?SetDisLikeItemCancel@UserInfoFromGalaxy@@SAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SetDisLikeItem@UserInfoFromGalaxy@@SAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0000@Z
?SetLikeItemCancel@UserInfoFromGalaxy@@SAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
?SetLikeItem@UserInfoFromGalaxy@@SAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@0000@Z
?IsInLikeList@UserInfoFromGalaxy@@SAHABV?$CStringT@_WV?$StrTraitATL@_WV?$ChTraitsCRT@_W@ATL@@@ATL@@@ATL@@@Z
GetMediaLibraryDir
UpdateMediaLibrary

crt

ord38
ord36
ord46
ord55
ord77
ord27
ord58
ord29
ord3
ord4
ord62
ord10
ord133
ord37
ord72
ord35
ord78
ord119
ord74
ord5
ord34

gdiplus

GdipImageGetFrameDimensionsCount
GdipCreateBitmapFromStream
GdipGetImageHeight
GdipGetImageWidth
GdipImageGetFrameDimensionsList
GdipLoadImageFromStream
GdipCloneImage
GdipDisposeImage
GdipDrawImageRectRect
GdiplusShutdown
GdiplusStartup
GdipFillRectangle
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipSetSmoothingMode
GdipSetCompositingQuality
GdipSetCompositingMode
GdipAlloc
GdipReleaseDC
GdipFree
GdipImageGetFrameCount
GdipSetPixelOffsetMode
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipLoadImageFromFile
GdipLoadImageFromStreamICM

kernel32

HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
InterlockedPushEntrySList
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedPopEntrySList
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
InterlockedExchange
GlobalReAlloc
GlobalFree
ReadFile
GetFileSize
InitializeCriticalSectionAndSpinCount
LoadLibraryExW
lstrcmpiW
MultiByteToWideChar
GetModuleFileNameW
GetTickCount
WideCharToMultiByte
GetCommandLineW
WaitForSingleObject
CreateEventW
CreateEventA
SetEvent
CloseHandle
CreateMutexW
CreateThread
ResumeThread
GetExitCodeThread
Sleep
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
QueryPerformanceCounter
TerminateThread
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
FlushInstructionCache
GetCurrentThreadId
InterlockedDecrement
InterlockedIncrement
GetLastError
lstrlenW
RaiseException
SetLastError
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
lstrcmpW
OutputDebugStringW
CopyFileW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
DeleteFileW
FindNextFileW
GetFileAttributesW
CreateDirectoryW
SuspendThread
LoadLibraryW
GetProcAddress
GetModuleHandleW
FreeLibrary
DeleteCriticalSection
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
TerminateProcess
GetWindowsDirectoryW
WinExec
GetLocalTime
CreateFileW
SetFilePointer
WriteFile
GetVersionExW
lstrcpyW
lstrcmpiA

user32

GetMenuItemCount
DrawTextW
GetPropA
SetRectEmpty
SystemParametersInfoW
GetMonitorInfoW
MonitorFromWindow
SetCursor
PtInRect
SetParent
IsWindowVisible
GetSystemMetrics
SetActiveWindow
SetForegroundWindow
IsIconic
FindWindowExW
EnumChildWindows
MessageBoxW
GetCapture
FindWindowW
RegisterWindowMessageW
GetWindowDC
GetWindowTextW
SetWindowTextW
BeginPaint
EndPaint
IsChild
GetFocus
FindWindowA
SetWindowTextA
InflateRect
CopyRect
OffsetRect
GetMenuItemInfoW
UnhookWindowsHookEx
UnregisterClassA
DefWindowProcW
GetParent
GetWindowRect
SetWindowLongW
GetWindowLongW
CallWindowProcW
SendMessageW
GetDlgItem
IsWindow
DestroyWindow
KillTimer
SetTimer
PostMessageW
ShowWindow
MsgWaitForMultipleObjects
SetPropA
SetWindowsHookExW
GetCursorPos
CallNextHookEx
GetClassNameA
GetMenuInfo
SetMenuInfo
GetMenuState
RemoveMenu
MapWindowPoints
IsWindowEnabled
TrackMouseEvent
SetWindowRgn
EnableWindow
PostQuitMessage
DrawIconEx
SetMenuItemInfoW
SetRect
IsRectEmpty
IsZoomed
EqualRect
GetWindowTextLengthW
SetFocus
GetWindow
GetClassNameW
GetSysColor
CharNextW
SetWindowPos
RedrawWindow
GetClassInfoExW
CreateWindowExW
CreateAcceleratorTableW
ClientToScreen
ScreenToClient
MoveWindow
SetCapture
ReleaseCapture
FillRect
GetClientRect
InvalidateRgn
InvalidateRect
GetDC
ReleaseDC
GetDesktopWindow
DestroyAcceleratorTable
LoadCursorW
RegisterClassExW
GetMessageW
PostThreadMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
UpdateWindow

gdi32

SetBkMode
SetTextColor
GetClipBox
ExcludeClipRect
Rectangle
StretchBlt
GetPixel
CreateFontIndirectW
EnumFontFamiliesExW
GetRgnBox
RoundRect
GetTextExtentPoint32W
Ellipse
CreateDCW
SelectPalette
CreatePen
ExtTextOutW
SetBkColor
CreateSolidBrush
GetObjectW
GetDeviceCaps
BitBlt
DeleteDC
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
GetStockObject
DeleteObject
CreateFontW
CombineRgn
ExtCreateRegion
CreateDIBSection
CreateDIBitmap
GetDIBits
RealizePalette

advapi32

RegDeleteKeyW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW

shell32

ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHChangeNotify
SHGetSpecialFolderPathW

ole32

CoTaskMemAlloc
StringFromGUID2
OleLockRunning
CreateStreamOnHGlobal
CoCreateInstance
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoInitialize
CoUninitialize
OleUninitialize
CoInitializeEx
CoTaskMemFree
CoTaskMemRealloc

oleaut32

LoadTypeLi
SysFreeString
SysAllocString
OleCreateFontIndirect
SysStringLen
LoadRegTypeLi
SysAllocStringLen
VariantInit
VariantClear
DispGetParam
VarUI4FromStr
VariantChangeType
VariantCopy
VarBstrCmp
DispCallFunc

shlwapi

PathAppendW
PathFileExistsW
StrStrIW
PathCombineW
PathFindFileNameW
PathRemoveFileSpecW
PathIsDirectoryW
StrCpyW
StrChrIW
StrCmpIW

comctl32

InitCommonControlsEx
_TrackMouseEvent

msimg32

TransparentBlt

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

msvcr100

_unlock
__dllonexit
_lock
wcsstr
wcscpy_s
iswspace
_snwprintf_s
_vscwprintf
_wcslwr_s
vswprintf_s
wcsrchr
wcschr
wcsnlen
wcsncpy_s
wmemcpy_s
iswdigit
_wtoi
malloc
?terminate@@YAXXZ
_recalloc
free
_beginthreadex
??_V@YAXPAX@Z
_purecall
memmove
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
_vsnwprintf_s
??2@YAPAXI@Z
wcscat_s
_wcsicmp
memmove_s
memcpy_s
??3@YAXPAX@Z
memset
_mbslwr_s
_snwprintf
_wtof
swprintf_s
_wtol
_onexit
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
memcpy
__CxxFrameHandler3
__RTDynamicCast
_CxxThrowException

Sections

.text
Size: 317KB - Virtual size: 317KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 175KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

8c5b5f67a492e7a601cdcf9d207fa40d

Headers

DLL Characteristics

File Characteristics

Imports

medialibrary

crt

gdiplus

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

msvcp100

msvcr100

Sections

.text Size: 317KB - Virtual size: 317KB

.rdata Size: 87KB - Virtual size: 86KB

.data Size: 10KB - Virtual size: 11KB

.rsrc Size: 175KB - Virtual size: 175KB

.reloc Size: 103KB - Virtual size: 104KB

.text
Size: 317KB - Virtual size: 317KB

.rdata
Size: 87KB - Virtual size: 86KB

.data
Size: 10KB - Virtual size: 11KB

.rsrc
Size: 175KB - Virtual size: 175KB

.reloc
Size: 103KB - Virtual size: 104KB