41be4d14937f0dc7898c8df8318cf36a064f466c9c7a0bdf49c5edb4070bae80

Sharing

Copy URL Twitter E-mail

General

Target

41be4d14937f0dc7898c8df8318cf36a064f466c9c7a0bdf49c5edb4070bae80
Size

349KB
MD5

8ecf8620ed7a46e59edaf98137273728
SHA1

e7a32db59f693c47336e2dad0bf6869fcbf6f713
SHA256

41be4d14937f0dc7898c8df8318cf36a064f466c9c7a0bdf49c5edb4070bae80
SHA512

8c402db752996e2b89109631303421676352366add3f8a18f1186ba303fbbd95e79b8f0a6a4e4efdc8d254ccd04600389a693683cf551f853d8875d19e062527
SSDEEP

6144:hSvyPyIhU4YqqGhXKJKb3Agh6op5QHgpxwzxgTvD5lq6IlO6ag8v6i2wxc:syhYGh1Rtp5QHgpxjXTqIiirc

Score

N/A

Malware Config

Signatures

Files

41be4d14937f0dc7898c8df8318cf36a064f466c9c7a0bdf49c5edb4070bae80
.dll windows x86

0674428e59926ad547e8f6919287750c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundW

ntdll

RtlUnwind
_CIlog
iswspace
ceil
bsearch
_wcsicmp
_vsnwprintf
_vsnprintf
qsort
memset
memmove
memcpy
towupper
wcsrchr
wcsstr
wcstoul

shell32

SHChangeNotify
SHBrowseForFolderW
SHGetDesktopFolder
DragQueryFileW
CommandLineToArgvW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ShellExecuteExW
SHBindToParent

kernel32

CreateEventW
CreateFileMappingW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindNextFileW
FindResourceExW
FindResourceW
FlushInstructionCache
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
GetCommandLineA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentVariableW
GetFileAttributesW
GetFileSize
GetLastError
GetLocalTime
GetLogicalDriveStringsW
GetLongPathNameW
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetPrivateProfileIntW
CreateDirectoryW
VirtualFree
lstrlenW
lstrcmpiW
WriteFile
WaitForMultipleObjects
CopyFileExW
VirtualAlloc
UnmapViewOfFile
UnhandledExceptionFilter
TerminateProcess
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
SizeofResource
SetUnhandledExceptionFilter
SetThreadLocale
SetLastError
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryPerformanceCounter
OutputDebugStringA
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MoveFileExW
MapViewOfFile
LockResource
LocalFree
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
LoadLibraryA
LeaveCriticalSection
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
InitializeCriticalSection
HeapFree
HeapAlloc
GetVolumeInformationW
GetVersionExA
GetVersion
GetTickCount
GetThreadLocale
GetTempPathW
GetTempFileNameW
GetSystemTimeAsFileTime
GetSystemTime
GetProcessPriorityBoost
GetProcessHeap
GetProcAddress
CloseHandle
CompareFileTime
CompareStringW
GetPrivateProfileStringW

user32

PostThreadMessageW
PostMessageW
PeekMessageW
OffsetRect
MsgWaitForMultipleObjects
MoveWindow
UnregisterDeviceNotification
UnregisterClassA
UnhookWinEvent
TranslateMessage
SystemParametersInfoW
ShowWindow
SetWindowTextW
SetWindowPos
SetWindowLongW
SetWinEventHook
SetPropW
SetForegroundWindow
SetFocus
SetDlgItemTextW
SetCursor
SendMessageW
SendDlgItemMessageW
RemovePropW
ReleaseDC
RegisterWindowMessageW
AllowSetForegroundWindow
BeginDeferWindowPos
CharNextW
CharUpperBuffW
CharUpperW
CopyImage
CreateDialogParamW
CreatePopupMenu
CreateWindowExW
DeferWindowPos
DestroyIcon
DestroyMenu
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawTextW
EnableMenuItem
EnableWindow
EndDeferWindowPos
EndDialog
EnumWindows
FillRect
GetClassNameW
GetClientRect
GetCursor
GetDC
GetDesktopWindow
GetDlgItem
GetLastActivePopup
GetMessageW
GetMonitorInfoW
GetParent
GetPropW
GetSysColor
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetWindow
GetWindowLongW
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
IntersectRect
InvalidateRect
IsDlgButtonChecked
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadImageW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromRect
RegisterDeviceNotificationW

ole32

StringFromGUID2
ReleaseStgMedium
PropVariantCopy
PropVariantClear
HWND_UserUnmarshal
HWND_UserSize
HWND_UserMarshal
HWND_UserFree
HICON_UserUnmarshal
HICON_UserSize
HICON_UserMarshal
HICON_UserFree
HBITMAP_UserUnmarshal
HBITMAP_UserSize
HBITMAP_UserMarshal
HBITMAP_UserFree
CreateBindCtx
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
CoTaskMemAlloc
CoRevokeClassObject
CoRegisterClassObject
CoMarshalInterThreadInterfaceInStream
CoInitializeEx
CoGetInterfaceAndReleaseStream
CoCreateInstance
CoAllowSetForegroundWindow
CLSIDFromString
CoInitialize

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

gdi32

SetBkMode
SetBrushOrgEx
SetBkColor
SetTextColor
StretchBlt
SelectPalette
SelectObject
SaveDC
RestoreDC
Rectangle
RealizePalette
GetStockObject
GetObjectW
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHalftonePalette
CreateDIBSection
SetStretchBltMode
BitBlt
CreateCompatibleDC

setupapi

SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceW
SetupDiOpenDevRegKey
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList

advapi32

TraceEvent
RegisterTraceGuidsW
RegSetValueExW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey
InitializeAcl
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
UnregisterTraceGuids

msvcrt

malloc
free
calloc
_unlock
_onexit
_lock
_initterm
_errno
_amsg_exit
__dllonexit
_XcptFilter
_CxxThrowException
_CIexp
realloc

shlwapi

StrCSpnW
StrCmpNIW
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveExtensionW
PathParseIconLocationW
PathMatchSpecW
PathIsDirectoryW
PathFindFileNameW
PathFindExtensionW
PathFileExistsW
PathAppendW
PathAddBackslashW
StrCmpW
StrRetToBufW
StrStrW
SHStrDupW

oleaut32

BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
LPSAFEARRAY_UserFree
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserUnmarshal
LoadTypeLi
RegisterTypeLi
SysAllocString
SysFreeString
SysStringLen
UnRegisterTypeLi
VarBstrCmp
VarUI4FromStr
VariantClear
VariantInit
VariantTimeToSystemTime

rpcrt4

CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrOleAllocate
NdrOleFree

Exports

Exports

InPlaceLshift
SetItemString
StandardError
XMLCharRefReplaceErrors

Sections

.text
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 217KB - Virtual size: 216KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0674428e59926ad547e8f6919287750c

Headers

File Characteristics

Imports

winmm

ntdll

shell32

kernel32

user32

ole32

version

gdi32

setupapi

advapi32

msvcrt

shlwapi

oleaut32

rpcrt4

Exports

Exports

Sections

.text Size: 29KB - Virtual size: 29KB

.rdata Size: 217KB - Virtual size: 216KB

.data Size: 70KB - Virtual size: 70KB

.rsrc Size: 28KB - Virtual size: 27KB

.reloc Size: 4KB - Virtual size: 4KB

.text
Size: 29KB - Virtual size: 29KB

.rdata
Size: 217KB - Virtual size: 216KB

.data
Size: 70KB - Virtual size: 70KB

.rsrc
Size: 28KB - Virtual size: 27KB

.reloc
Size: 4KB - Virtual size: 4KB