61145c518f2c88ab4adfe47d014202d9b9d6b6b67ef5e61099651406933f9a41

Sharing

Copy URL Twitter E-mail

General

Target

61145c518f2c88ab4adfe47d014202d9b9d6b6b67ef5e61099651406933f9a41
Size

505KB
MD5

029c22c88562e95fbe5fc62b2889bec0
SHA1

4802e85d8ba6b5ecb43fc700f4027df74a6e132e
SHA256

61145c518f2c88ab4adfe47d014202d9b9d6b6b67ef5e61099651406933f9a41
SHA512

392984006a97cdba18ad7c28ff791b51f49c0711deaf603867e6a973d0605d50a4cffc26ca024bb099b3f5505fc08177fb9fcd9bc513044752eb7a99122cd6fd
SSDEEP

12288:GBeY1ZmyoqNusSZ+ocuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuuu6+53OJMcBlg7:GN1ZmyoqUfcuuuuuuuuuuuuuuuuuuuuN

Score

N/A

Malware Config

Signatures

Files

61145c518f2c88ab4adfe47d014202d9b9d6b6b67ef5e61099651406933f9a41
.exe windows x86

58d51d70bae2a55db48ad684d8ecc5d7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

crlutl

BOXIDGetCopyrightInfo
?GetAppUIName@WAppSkinSettingData@@QAE?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@XZ
?CreateSilentEvent@IGLB_UILanguage@@SAPAXXZ
?GetSplashScreenImagePath@WAppSkinSettingData@@QAE_NAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z
?GetFireBallImagePath@WAppSkinSettingData@@QAE_NAAV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@@Z

gdiplus

GdipDisposeImage
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromFile
GdipFree
GdiplusStartup
GdiplusShutdown
GdipAlloc

crlutils

?SetCommandLine@CommandLine@CrlUtils@@QAEXPB_W_N@Z
?Combine@Path@SystemIO@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W0@Z
?Exists@File@SystemIO@@YA_NPB_W@Z
?GetFolderName@Path@SystemIO@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
??0CommandLine@CrlUtils@@QAE@XZ
??1CommandLine@CrlUtils@@QAE@XZ
?GetFileName@Path@SystemIO@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PB_W@Z
?GetProcessFileName@Path@SystemIO@@YA?AV?$CStringT@_WV?$StrTraitMFC_DLL@_WV?$ChTraitsCRT@_W@ATL@@@@@ATL@@PAUHINSTANCE__@@@Z

mfc100u

ord4642
ord11159
ord2852
ord2952
ord11116
ord2339
ord5276
ord12557
ord10725
ord6156
ord13388
ord7109
ord13382
ord2665
ord3992
ord14067
ord3999
ord4416
ord4383
ord4379
ord4413
ord4434
ord4392
ord4421
ord14145
ord4430
ord4400
ord4404
ord4408
ord4396
ord4425
ord4388
ord1519
ord1512
ord1514
ord1508
ord1501
ord11244
ord11246
ord12724
ord2853
ord8393
ord10045
ord6247
ord11210
ord8112
ord3491
ord13047
ord1296
ord4923
ord4901
ord11997
ord11998
ord6080
ord5862
ord3446
ord796
ord4355
ord290
ord2407
ord12951
ord4360
ord7619
ord6365
ord417
ord4889
ord1934
ord3846
ord1479
ord4512
ord287
ord1987
ord1310
ord2088
ord268
ord280
ord11494
ord1298
ord4290
ord296
ord286
ord902
ord1312
ord1300
ord5143
ord4645
ord4794
ord4623
ord13380
ord10937
ord3402
ord8277
ord14060
ord14148
ord14146
ord2418
ord5115
ord897
ord8483
ord7385
ord2884
ord2887
ord12610
ord5558
ord14147
ord2951
ord8346
ord9333
ord7393
ord4792
ord6922
ord6932
ord6931
ord6661
ord14059
ord14132
ord14149
ord5468
ord2030

msvcr100

malloc
calloc
free
swprintf_s
memset
modf
printf
cos
sin
_hypot
rand
__CxxFrameHandler3
_vsnwprintf
toupper
islower
wcscat_s
strlen
wcsrchr
wcscpy_s
memcpy
ceil
sprintf_s
memcmp
wcsncpy_s
_stricmp
_amsg_exit
__wgetmainargs
_cexit
_exit
wcsncpy
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
_unlock
__dllonexit
_lock
_onexit
?terminate@@YAXXZ
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
_invoke_watson
_controlfp_s
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
_HUGE
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_XcptFilter
?what@exception@std@@UBEPBDXZ
_CxxThrowException

kernel32

GetThreadPriority
VirtualAlloc
VirtualLock
VirtualUnlock
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetVersionExW
OpenProcess
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetVolumeInformationW
GetComputerNameW
TlsAlloc
TlsSetValue
lstrlenA
TlsGetValue
FormatMessageW
lstrlenW
LocalAlloc
LocalFree
CreateFileA
_lcreat
_lopen
LoadLibraryA
SuspendThread
SetThreadContext
CreateEventW
CreateProcessW
GetCurrentThread
GetCurrentProcessId
CreateMutexW
GetCurrentProcess
DuplicateHandle
SetThreadPriority
ResumeThread
WaitForMultipleObjects
TerminateThread
TlsFree
ReadFile
GetFileSize
OutputDebugStringW
CreateFileW
HeapFree
GetProcessHeap
HeapAlloc
lstrcmpiW
lstrcpyW
GetACP
GetUserDefaultLCID
WaitForSingleObject
GetCurrentThreadId
CreateThread
SetUnhandledExceptionFilter
FreeLibrary
OutputDebugStringA
GetModuleFileNameW
LoadLibraryW
GetLastError
GetFileAttributesW
GetVersion
GetProcAddress
GetModuleHandleW
GetModuleHandleA
SetLastError
GlobalDeleteAtom
GlobalFindAtomW
CloseHandle
SetEvent

user32

CreateWindowExA
EndPaint
GetDesktopWindow
PostMessageA
RegisterClassA
MessageBoxW
CreateWindowExW
SetCursor
ShowCursor
FillRect
UpdateLayeredWindow
GetWindowRect
LoadCursorW
IsRectEmpty
InflateRect
GetClientRect
OffsetRect
SetWindowPos
AdjustWindowRect
GetParent
LoadStringW
DrawTextW
CopyRect
SetRect
SetWindowTextW
BeginPaint
EndDialog
DestroyWindow
InvalidateRect
UpdateWindow
ShowWindow
SetLayeredWindowAttributes
GetWindowLongW
SetWindowLongW
SetPropW
CreateDialogParamW
EnableWindow
GetSystemMetrics
ReleaseDC
GetDC
PostThreadMessageW
SendMessageW
TranslateMessage
GetMessageW
IsWindow
GetSysColor
DdeUnaccessData
DdeAccessData
DdeCmpStringHandles
DdeUninitialize
DdeFreeStringHandle
DdeEnableCallback
DispatchMessageW
PeekMessageW
DdeNameService
DdeCreateStringHandleW
DdeInitializeW
DefWindowProcA

gdi32

GetTextExtentPoint32W
SelectPalette
RealizePalette
SaveDC
RestoreDC
DeleteObject
CreateCompatibleDC
DeleteDC
SelectObject
GetTextMetricsW
BitBlt
MoveToEx
LineTo
CreateRectRgn
SetViewportOrgEx
SelectClipRgn
CreateCompatibleBitmap
CreatePalette
StretchDIBits
RectVisible
GetDeviceCaps
TextOutW
SetTextAlign
SetBkMode
SetTextColor
SetBkColor
Rectangle
GetNearestColor
CreateSolidBrush
GetStockObject
GetTextFaceW
CreateFontIndirectW

advapi32

OpenSCManagerA
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
QueryServiceStatus
CloseServiceHandle
OpenServiceA
LookupAccountNameW
RegCloseKey
RegOpenKeyExA
GetUserNameW

ole32

CoUninitialize
CoInitialize
CoTaskMemAlloc

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

imagehlp

CheckSumMappedFile
ImagehlpApiVersion

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data_1
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 304KB - Virtual size: 303KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.wrdata
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

58d51d70bae2a55db48ad684d8ecc5d7

Headers

DLL Characteristics

File Characteristics

Imports

crlutl

gdiplus

crlutils

mfc100u

msvcr100

kernel32

user32

gdi32

advapi32

ole32

msvcp100

imagehlp

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 25KB - Virtual size: 24KB

.data Size: 2KB - Virtual size: 10KB

.data_1 Size: 512B - Virtual size: 28B

.rsrc Size: 304KB - Virtual size: 303KB

.reloc Size: 10KB - Virtual size: 10KB

.wrdata Size: 68KB - Virtual size: 68KB

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 25KB - Virtual size: 24KB

.data
Size: 2KB - Virtual size: 10KB

.data_1
Size: 512B - Virtual size: 28B

.rsrc
Size: 304KB - Virtual size: 303KB

.reloc
Size: 10KB - Virtual size: 10KB

.wrdata
Size: 68KB - Virtual size: 68KB