a3049d7317e0ac582cc61e19fc1454285c23ab23c4118d761f9bb1fdd359e8ff

Sharing

Copy URL Twitter E-mail

General

Target

a3049d7317e0ac582cc61e19fc1454285c23ab23c4118d761f9bb1fdd359e8ff
Size

174KB
MD5

329d4bf01ae70ebf0607c35174149ae1
SHA1

785b95133a6bf90744171bb0a5f871cda114abb2
SHA256

a3049d7317e0ac582cc61e19fc1454285c23ab23c4118d761f9bb1fdd359e8ff
SHA512

a81541ae1a16345e9b233a5dfab55c7933d51e5beec187b353c37ba152c3fed742b9dfbee2c5bd0b00df642edea3067559cdfc28bacbf95040817ac3399e5046
SSDEEP

3072:y03xr1BK/X4hH0llTsmE92oe3HNtNL9nGXod8CeMDCK3:yg12XBWdApLZCo6CGE

Score

N/A

Malware Config

Signatures

Files

a3049d7317e0ac582cc61e19fc1454285c23ab23c4118d761f9bb1fdd359e8ff
.dll windows x86

464eb2235972f816249ede204068b8db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncmp
_vsnprintf
_ftol
_except_handler3
wcsncpy
_adjust_fdiv
malloc
_initterm
free
wcscpy
memmove
wcstoul

user32

DrawTextExW
DrawTextExA
RegisterWindowMessageA
UnregisterClassW
LoadIconA
LoadCursorA
GetClassInfoExW
RegisterClassExW
GetActiveWindow
GetCaretBlinkTime
BeginPaint
EndPaint
GetSysColor
CreateWindowExW
GetSystemMetrics
MapWindowPoints
SetWindowPos
DestroyWindow
GetCursorPos
MoveWindow
IsWindowVisible
ShowWindow
LoadImageA
DestroyIcon
PtInRect
ScreenToClient
InvalidateRect
SetWindowLongA
DefWindowProcA
KillTimer
SetTimer
GetWindowLongA
SystemParametersInfoA
GetDC
SetRect
ReleaseDC
GetClientRect
ClientToScreen
PostMessageW
PostMessageA
GetFocus
IsWindow
ToUnicode
GetKeyboardLayout
CreateWindowExA
ReleaseCapture
SetCapture
AdjustWindowRectEx
WindowFromPoint
RegisterClassExA
GetClassInfoExA
SetCursor
GetDoubleClickTime
DrawEdge
DrawIconEx
FillRect
GetIconInfo
OffsetRect
InflateRect
IntersectRect
GetSysColorBrush
DrawStateA
FrameRect
GetCursor
GetKeyState
keybd_event
SendMessageW
IsWindowUnicode
GetWindowRect
SendMessageA
GetKeyboardState

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegCreateKeyExA
RegSetValueExA
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
RegQueryValueExA

kernel32

WideCharToMultiByte
IsDBCSLeadByteEx
GetLocaleInfoW
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsFree
GetVersionExA
GetACP
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
SetUnhandledExceptionFilter
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
lstrcmpA
LocalFree
LocalAlloc
IsBadWritePtr
lstrlenA
lstrlenW
lstrcpynA
GetSystemDirectoryA
GetSystemWindowsDirectoryA
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetModuleHandleA
LoadLibraryA
GetModuleHandleW
LoadLibraryW
LocalReAlloc
GetLastError
InterlockedDecrement
InterlockedIncrement
TlsGetValue
TlsSetValue
GetModuleFileNameA
LoadResource
FindResourceA
GetSystemDefaultLangID
EnumResourceLanguagesA
GetWindowsDirectoryA
UnhandledExceptionFilter

gdi32

Polyline
BitBlt
CreateFontIndirectW
CreateFontIndirectA
SelectObject
GetTextMetricsA
DeleteObject
MoveToEx
ExtCreatePen
GetTextColor
SetTextColor
SetBkColor
PatBlt
DeleteDC
SetViewportOrgEx
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
SetBkMode
CreatePen
CreateFontA
CreateSolidBrush
CreateDCA
CreateDIBSection
CreateRectRgn
GetClipRgn
IntersectClipRect
ExtSelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetTextExtentPointA
GetTextExtentPoint32W
GetTextAlign
SetTextAlign
ExtTextOutA
ExtTextOutW
GetObjectA
TranslateCharsetInfo
GetCurrentObject
GetObjectW
CreateBitmap
CreateBrushIndirect
LineTo
GetStockObject

imm32

ImmDestroyIMCC
ImmNotifyIME
ImmEnumInputContext
ImmGetContext
ImmGetDefaultIMEWnd
ImmSetConversionStatus
ImmGetAppCompatFlags
ImmSetCompositionStringW
ImmGetProperty
ImmCreateIMCC
ImmLockIMC
ImmUnlockIMC
ImmLockIMCC
ImmUnlockIMCC
ImmGetIMCCSize
ImmReSizeIMCC
ImmRequestMessageA
ImmSetOpenStatus
ImmGetCompositionFontA
ImmGetCompositionStringW
CtfImmGenerateMessage
CtfImmIsCiceroStartedInThread

Exports

Exports

CtfImeCreateInputContext
CtfImeCreateThreadMgr
CtfImeDestroyInputContext
CtfImeDestroyThreadMgr
CtfImeDispatchDefImeMessage
CtfImeEscapeEx
CtfImeGetGuidAtom
CtfImeInquireExW
CtfImeIsGuidMapEnable
CtfImeIsIME
CtfImeProcessCicHotkey
CtfImeSelectEx
CtfImeSetActiveContextAlways
CtfImeThreadDetach
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
UIWndProc

Sections

.text
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.upx_
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

464eb2235972f816249ede204068b8db

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

kernel32

gdi32

imm32

Exports

Exports

Sections

.text Size: 155KB - Virtual size: 156KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 11KB - Virtual size: 12KB

.upx_ Size: 1KB - Virtual size: 4KB

.text
Size: 155KB - Virtual size: 156KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 11KB - Virtual size: 12KB

.upx_
Size: 1KB - Virtual size: 4KB