a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4

Sharing

Copy URL

Twitter E-mail

General

Target

a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4
Size

868KB
MD5

22c4e5349713785c6554cbaf47bc69c0
SHA1

2988bc367826aca0ae79df54fe3b6afe0caae7ff
SHA256

a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4
SHA512

571e311e67a422423083551d464fa2609116512e56a34416e64c1df97829068e17153b1b91e5912e9f252939264232105b7e3c2286478ae9d72c22be3ff5e055
SSDEEP

24576:CokEyEsEesVAqLJiZvqyrC9FNNaxXGrlwIB87qhZUFd4XH4eRCyDGcpZkdzFD:CokSsvT26BF

Score

N/A

Malware Config

Signatures

Files

a8305b2f050ee6220ab610c6f684d5b2d104138d24d95dcd33082336a3f9a7d4
.dll windows x86

3da097b4d68c09051d4a29ed921c2b8a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
MultiByteToWideChar
WideCharToMultiByte
GlobalAlloc
lstrcpynW
lstrcpyW
GlobalFree
SuspendThread
ResumeThread
RaiseException
Process32FirstW
Process32NextW
GetProcessHeap
HeapFree
GetFileAttributesW
ExitProcess
CreateToolhelp32Snapshot
Module32FirstW
Module32NextW
GetLastError
InterlockedCompareExchange
WaitForMultipleObjects
ReleaseSemaphore
CreateProcessW
SetEvent
WaitForSingleObject
CreateEventW
CreateSemaphoreW
LeaveCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
EnterCriticalSection
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
VirtualQuery
InitializeCriticalSectionAndSpinCount
FreeLibrary
SetStdHandle
GetTimeZoneInformation
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeA
FlushFileBuffers
lstrlenW
DeleteCriticalSection
InitializeCriticalSection
CreateFileW
GetFileSize
SetFilePointer
GetConsoleMode
GetConsoleCP
WriteFile
HeapReAlloc
FatalAppExitA
DebugBreak
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapDestroy
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetModuleHandleA
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
SetEndOfFile
GetStringTypeW
LCMapStringW
LCMapStringA
GetCPInfo
GetCommandLineA
CreateThread
ExitThread
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
ExpandEnvironmentStringsW
GetModuleHandleW
GetModuleFileNameW
GetVersionExW
ReadFile
SetThreadPriority
FindResourceExW
LockResource
SizeofResource
CreateFileA
CloseHandle
GetPrivateProfileIntW
MoveFileExW
DeleteFileW
LoadResource
FindResourceW
ResetEvent
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleHandleExW
Sleep
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
LoadLibraryW
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
SetLastError
MulDiv

user32

EqualRect
CopyRect
SetCursor
PostMessageW
IsWindow
SetWindowLongW
MessageBoxW
CallWindowProcW
ShowWindow
SetWindowPos
GetWindowLongW
MapWindowPoints
GetClientRect
SystemParametersInfoW
GetWindowRect
GetWindow
GetParent
SendMessageW
DestroyIcon
LoadIconW
GetWindowTextW
FindWindowExA
GetActiveWindow
DispatchMessageW
LoadCursorW
GetMessageW
GetClassNameW
GetDlgItem
GetWindowTextA
GetClassNameA
SetTimer
DestroyWindow
KillTimer
mouse_event
SetFocus
EndDialog
CreateDialogParamW
DialogBoxParamW
wsprintfW
UnregisterClassA
FrameRect
InflateRect
RedrawWindow
OffsetRect
GetFocus
SetScrollPos
EnableWindow
UpdateLayeredWindow
SetLayeredWindowAttributes
SetWindowRgn
SetParent
GetSystemMetrics
MoveWindow
BeginPaint
EndPaint
ClientToScreen
SetPropW
RegisterClassExW
GetClassInfoExW
DefWindowProcW
CreateWindowExW
GetPropW
GetWindowTextLengthW
InvalidateRect
SetWindowTextW
GetWindowDC
PtInRect
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
TranslateMessage
GetDC
ReleaseDC
IsRectEmpty
IsWindowVisible

shell32

ord165
ExtractIconExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFolderPathW

ole32

CoCreateInstance
CoTaskMemFree
CoCreateGuid
CoInitialize

oleaut32

CreateErrorInfo
VariantInit
SysFreeString
VariantClear
SysAllocString
GetErrorInfo
VariantChangeType
SetErrorInfo

shlwapi

PathQuoteSpacesW
PathFileExistsW
PathAppendW
PathIsURLW
PathRemoveFileSpecW

comctl32

ImageList_ReplaceIcon
ImageList_Create
_TrackMouseEvent

msimg32

AlphaBlend

gdiplus

GdipCloneImage
GdipLoadImageFromFile
GdipLoadImageFromFileICM
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectRect
GdipGetImageHeight
GdipGetImageWidth
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipCreatePath
GdipDeletePath
GdipCreateFontFamilyFromName
GdipDeleteFontFamily
GdipCreateFont
GdipAlloc
GdipCreateStringFormat
GdipDeleteStringFormat
GdipDisposeImage
GdipGetFontSize
GdipGetFontStyle
GdipGetPathWorldBounds
GdipCloneStringFormat
GdipStringFormatGetGenericTypographic
GdipSetStringFormatTrimming
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipDrawString
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdiplusStartup
GdiplusShutdown
GdipDrawImageI
GdipFree
GdipDeleteFont
GdipAddPathString

ws2_32

inet_ntoa
ntohl
WSAStartup
gethostbyname
inet_addr

iphlpapi

GetAdaptersAddresses

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

imm32

ImmDisableIME

wininet

InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetSetCookieW
HttpOpenRequestW
InternetQueryOptionW
InternetSetOptionW
HttpAddRequestHeadersW
HttpSendRequestExA
HttpQueryInfoW
HttpQueryInfoA
HttpSendRequestExW
HttpSendRequestW
InternetSetStatusCallbackW
HttpEndRequestW
InternetConnectW
InternetWriteFile
InternetReadFileExA

winmm

timeGetTime

gdi32

GetObjectW
GetCurrentObject
CreateFontIndirectW
SetBkColor
ExtTextOutW
CreateCompatibleBitmap
CreateSolidBrush
CreatePen
CreatePolygonRgn
GetTextMetricsW
GetStockObject
MoveToEx
LineTo
GetDeviceCaps
DPtoLP
SetBkMode
DeleteObject
CreateCompatibleDC
DeleteDC
StretchBlt
BitBlt
GetClipBox
SetTextColor
SelectObject
ExcludeClipRect

advapi32

RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegCloseKey

Exports

Exports

AddDownloadJob
AddExeToViewList
AttachPage
CustomPageShow
DisableButton
EnableDownloadProgress
EnableMyOwnDownload
FindModuleInProcessByName
InitDownload
InitSkinEngine
InstallPageShow
JustDoIt
Log
OnCtrlBack
OnMBBack
RegisterControl
RegisterMBControl
RegisterMBShortCutKey
RegisterShortCutKey
RemoveDownloadJob
SetButtonTextColor
SetMBUserData
SetUserData
SetVisible
UnInitDownload
nsCreateFolderDialog
nsMessageBox

Sections

.text
Size: 675KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3da097b4d68c09051d4a29ed921c2b8a

Headers

File Characteristics

Imports

kernel32

user32

shell32

ole32

oleaut32

shlwapi

comctl32

msimg32

gdiplus

ws2_32

iphlpapi

version

imm32

wininet

winmm

gdi32

advapi32

Exports

Exports

Sections

.text Size: 675KB - Virtual size: 674KB

.rdata Size: 95KB - Virtual size: 94KB

.data Size: 11KB - Virtual size: 21KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 28KB - Virtual size: 27KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 675KB - Virtual size: 674KB

.rdata
Size: 95KB - Virtual size: 94KB

.data
Size: 11KB - Virtual size: 21KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 28KB - Virtual size: 27KB

.rmnet
Size: 56KB - Virtual size: 60KB