bc0d50132f2172628e1ee64241668b06b29c8efa46e28ad16514d6497be8128c

Sharing

Copy URL Twitter E-mail

General

Target

bc0d50132f2172628e1ee64241668b06b29c8efa46e28ad16514d6497be8128c
Size

3.4MB
MD5

b75a9b3fe1e4f6397bdd22474e2cea39
SHA1

fa853b58e9d8caaa95b8bfc8f77336836ccf55d7
SHA256

bc0d50132f2172628e1ee64241668b06b29c8efa46e28ad16514d6497be8128c
SHA512

8dadb72315e009d3357f7c3fb11a22dbc5541ca731fe12d4aa7cc6091449d181a6c999c16e2713521ec25338ee698c3190a307817f4a368cad919feff36de083
SSDEEP

49152:U2HFnHRW+W0x5GVTlK+LODuJ932m7Dr2IE38rn0KtX2:U2ZHAr0ILODuJ932m7Dr2IE38ptX

Score

N/A

Malware Config

Signatures

Files

bc0d50132f2172628e1ee64241668b06b29c8efa46e28ad16514d6497be8128c
.exe windows x86

141cf9796cf68454d06a2debf03c808f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

kernel32

FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetDriveTypeA
IsBadCodePtr
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
CreateEventA
CloseHandle
TerminateThread
UnhandledExceptionFilter
WaitForSingleObject
SetEvent
ResumeThread
CreateThread
VirtualFree
VirtualAlloc
ReadFile
GetFileSize
CreateFileA
CopyFileA
DeleteFileA
GetFileAttributesA
GetTickCount
LocalAlloc
GetModuleFileNameA
Sleep
FreeLibrary
GetProcAddress
LoadLibraryA
lstrlenA
LocalFree
SetFilePointer
GetDiskFreeSpaceExA
GetVolumeInformationA
GetLogicalDriveStringsA
lstrcpynA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
HeapSize
GetFileType
SetStdHandle
TerminateProcess
GetSystemTime
GetTimeZoneInformation
GetACP
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapReAlloc
RaiseException
ExitThread
RtlUnwind
SetErrorMode
GetProcessVersion
GlobalFlags
GlobalSize
SystemTimeToFileTime
LocalFileTimeToFileTime
TlsGetValue
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetCurrentThread
FindClose
FindNextFileA
FindFirstFileA
WriteFile
RemoveDirectoryA
MoveFileA
GetLastError
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
SetLastError
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrlenW
lstrcmpiA
CompareStringA
FormatMessageA
GetTempFileNameA
GetCurrentDirectoryA
EnumResourceLanguagesA
EnumResourceNamesA
EnumResourceTypesA
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
OpenProcess
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
VirtualQuery
GetExitCodeThread
SetThreadPriority
ResetEvent
GetOEMCP
GetCPInfo
MulDiv
GetCurrentThreadId
GetModuleHandleA
GetCurrentProcessId
lstrcmpA
GetVersion
GetVersionExA
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
LocalSize
lstrcatA
LocalReAlloc
HeapFree
IsBadReadPtr
VirtualProtect
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CancelIo
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
PostQueuedCompletionStatus
InitializeCriticalSection
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
SetUnhandledExceptionFilter
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpyA
CreateDirectoryA

user32

TranslateAcceleratorA
ReuseDDElParam
UnpackDDElParam
TranslateMDISysAccel
GetNextDlgGroupItem
PostThreadMessageA
SetDlgItemTextA
SendDlgItemMessageA
ScrollWindow
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
WinHelpA
SetPropA
GetPropA
RemovePropA
GetMessageTime
GetMessagePos
GetWindowPlacement
GetClipboardFormatNameA
MapDialogRect
GetTabbedTextExtentA
IsZoomed
SetActiveWindow
DestroyWindow
GetDoubleClickTime
CreateWindowExA
GetWindowDC
CreatePopupMenu
GetDlgItem
MapWindowPoints
SetFocus
IsDialogMessageA
IsClipboardFormatAvailable
SetCursorPos
UnionRect
ShowWindow
MoveWindow
BringWindowToTop
SetClassLongA
CharUpperA
GetKeyboardLayoutList
GetKeyboardState
ToAsciiEx
GetKeyboardLayout
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
IsWindowEnabled
IsIconic
LoadAcceleratorsA
CopyAcceleratorTableA
GetWindowRgn
HideCaret
ShowCaret
GetMenuItemInfoA
IsMenu
GetMenuDefaultItem
SetWindowContextHelpId
RegisterClipboardFormatA
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
SetParent
IsChild
GetMenuStringW
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
SetWindowRgn
ShowOwnedPopups
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetDialogBaseUnits
LockWindowUpdate
GetDCEx
IntersectRect
DrawMenuBar
AdjustWindowRect
RegisterClassW
RegisterClassA
DefMDIChildProcW
DefMDIChildProcA
DefDlgProcW
DefDlgProcA
DefFrameProcW
DefFrameProcA
DefWindowProcW
CallWindowProcW
GetScrollInfo
EnableScrollBar
SetScrollInfo
SetScrollPos
GetSysColorBrush
GrayStringA
DrawTextA
TabbedTextOutA
EnumWindows
GetWindowThreadProcessId
IsWindowUnicode
GetWindowLongW
CallWindowProcA
SetWindowLongW
SetWindowLongA
EndPaint
BeginPaint
IsRectEmpty
AdjustWindowRectEx
DrawIconEx
GetClassLongA
SendMessageTimeoutA
EqualRect
PeekMessageA
WaitMessage
MapVirtualKeyA
GetTopWindow
GetCapture
CallNextHookEx
GetClassNameA
SetWindowsHookExA
UnhookWindowsHookEx
GetMenuStringA
AppendMenuA
CreateMenu
InsertMenuA
GetSystemMenu
GetMenuState
CheckMenuItem
SetMenuDefaultItem
TrackPopupMenu
SetMenu
ValidateRect
GetMenuItemID
IsWindow
LoadBitmapA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetMenu
SetForegroundWindow
MessageBeep
LoadIconA
GetSystemMetrics
DrawEdge
RedrawWindow
GetDesktopWindow
SystemParametersInfoA
CharNextA
DeleteMenu
GetMenuItemCount
EnableMenuItem
GetCursorPos
GetFocus
GetDlgCtrlID
PostQuitMessage
wvsprintfA
EndDialog
CreateDialogIndirectParamA
LoadStringA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
SetWindowTextA
GetWindowTextLengthA
SetWindowPos
IsWindowVisible
UpdateWindow
ScreenToClient
GetWindow
CopyIcon
PtInRect
KillTimer
GetKeyState
ReleaseCapture
SetCapture
SetTimer
SetRectEmpty
DrawFrameControl
GetCursor
GetClassInfoA
DefWindowProcA
LoadCursorA
MessageBoxA
FindWindowA
wsprintfA
EnableWindow
LoadMenuA
LoadImageA
GetIconInfo
GetDC
CreateIconIndirect
ReleaseDC
GetSysColor
FillRect
DrawStateA
OffsetRect
GetClientRect
CopyRect
InflateRect
DrawFocusRect
GetWindowRect
GetSubMenu
TrackPopupMenuEx
PostMessageA
ClientToScreen
WindowFromPoint
GetActiveWindow
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
SendMessageA
GetWindowLongA
DestroyIcon
DestroyCursor
DestroyMenu
RegisterWindowMessageA
SetRect
GetMessageA
TranslateMessage
DispatchMessageA
ExcludeUpdateRgn
UnregisterClassA
InvertRect

gdi32

GetBitmapBits
ExtCreateRegion
CreatePatternBrush
GetBkColor
SetStretchBltMode
GetDIBits
SetBrushOrgEx
GetClipBox
CreatePalette
CreateDIBitmap
SelectPalette
GetViewportOrgEx
GetWindowOrgEx
GetRgnBox
CreateFontA
Polyline
StretchDIBits
GetViewportExtEx
GetWindowExtEx
Ellipse
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
MoveToEx
LineTo
PolyBezierTo
BeginPath
OffsetViewportOrgEx
GetTextExtentPoint32W
ExtTextOutW
CreateCompatibleBitmap
GetCharWidthA
GetCurrentPositionEx
ExtFloodFill
EnumFontFamiliesExA
RestoreDC
SetPolyFillMode
SetMapMode
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
SetTextAlign
GetMapMode
SetRectRgn
DPtoLP
LPtoDP
CopyMetaFileA
PatBlt
CreateRectRgnIndirect
GetCurrentObject
CreateDIBSection
GetClipRgn
IntersectClipRect
ExtSelectClipRgn
Escape
ExtTextOutA
RectVisible
PtVisible
OffsetRgn
CreateRectRgn
CombineRgn
GetTextCharsetInfo
GetDeviceCaps
Polygon
GetTextMetricsA
GetTextAlign
GetTextExtentPoint32A
GetTextColor
GetObjectType
CreatePen
RoundRect
SetBkMode
TextOutA
CreateSolidBrush
StretchBlt
PtInRegion
CreateFontIndirectA
Rectangle
PlgBlt
FillRgn
CreatePolygonRgn
GetObjectA
GetPixel
SetPixel
CreateBitmap
SelectObject
SetBkColor
GetStockObject
GetTextExtentPointA
SetTextColor
DeleteDC
BitBlt
SaveDC
DeleteObject
CreateCompatibleDC

comdlg32

ChooseColorA
GetOpenFileNameA
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegEnumKeyA
RegQueryValueA

shell32

DragQueryFileA
DragFinish
Shell_NotifyIconA
ShellExecuteA
ord71
SHGetFileInfoA
ShellExecuteExA
ExtractIconA

comctl32

ImageList_Draw
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_GetIconSize
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_DrawEx
ImageList_Add
FlatSB_GetScrollProp
ImageList_GetBkColor
ImageList_DrawIndirect
ImageList_Remove
ord17
ImageList_LoadImageA
ImageList_GetImageCount

oledlg

ord8
ord1

ole32

OleGetClipboard
ReleaseStgMedium
CoTaskMemFree
CoDisconnectObject
CLSIDFromString
CoCreateInstance
CoTaskMemAlloc
CoInitialize
CoUninitialize
OleDuplicateData
CoRevokeClassObject
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromProgID

olepro32

ord253

oleaut32

SysAllocStringLen
VarDateFromStr
VariantTimeToSystemTime
SysStringByteLen
VariantChangeType
SysAllocStringByteLen
VariantCopy
SysAllocString
OleLoadPicturePath
SysStringLen
LoadTypeLi
SysFreeString
VariantClear

shlwapi

SHAutoComplete

ws2_32

ntohs
recv
__WSAFDIsSet
send
WSACloseEvent
WSASend
WSARecv
accept
WSAGetLastError
setsockopt
WSAIoctl
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
getsockname
WSACreateEvent
WSAEventSelect
bind
listen
getpeername
WSAStartup
socket
ioctlsocket
htons
connect
select
closesocket
WSACleanup
gethostname
gethostbyname
inet_ntoa
WSASocketA

pdh

PdhAddCounterA
PdhOpenQueryA
PdhGetFormattedCounterValue
PdhCollectQueryData
PdhCloseQuery

avifil32

AVIStreamWrite
AVIStreamSetFormat
AVIFileRelease
AVIStreamRelease
AVIFileInit
AVIFileCreateStreamA
AVIFileOpenA
AVIFileExit

msvfw32

DrawDibOpen
DrawDibClose
DrawDibDraw

imagehlp

ImageDirectoryEntryToData

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rotext
Size: 112KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 288KB - Virtual size: 287KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 583KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

141cf9796cf68454d06a2debf03c808f

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

ws2_32

pdh

avifil32

msvfw32

imagehlp

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rodata Size: 12KB - Virtual size: 11KB

.rotext Size: 112KB - Virtual size: 108KB

.rdata Size: 288KB - Virtual size: 287KB

.data Size: 132KB - Virtual size: 583KB

.rsrc Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rodata
Size: 12KB - Virtual size: 11KB

.rotext
Size: 112KB - Virtual size: 108KB

.rdata
Size: 288KB - Virtual size: 287KB

.data
Size: 132KB - Virtual size: 583KB

.rsrc
Size: 1.2MB - Virtual size: 1.2MB