129be7f7b62b6005a16db787924ed762d09db0864c85244cc185944903353d12

Sharing

Copy URL

Twitter E-mail

General

Target

129be7f7b62b6005a16db787924ed762d09db0864c85244cc185944903353d12
Size

268KB
MD5

a483e75e8d55245d7a9f9f56ed30c424
SHA1

e1de3ffc2e24cf7304c76cdc682a8fb5c97b851c
SHA256

129be7f7b62b6005a16db787924ed762d09db0864c85244cc185944903353d12
SHA512

fbe4a8ca6a693c208e5ea070d10bb2ade3eefc738b9f61b2910b6e7fe71e4680e400e73ad4126112df9e6775bc467f9c28debe6d2a9007d162efffe892bde3d0
SSDEEP

3072:kkzyefwsAiY3HDurR0qprf/+xe8wTdeOrHTch9FMuZjobcPJHQeJHikDXeXq7v/f:kJJ3HDyCUfmxeCHiuT9JVv/ZgoCFQe

Score

N/A

Malware Config

Signatures

Files

129be7f7b62b6005a16db787924ed762d09db0864c85244cc185944903353d12
.exe windows x86

fb0af85d86c6c84e704b5ea20c2b5f9b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msimg32

TransparentBlt

gdiplus

GdiplusShutdown
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdipCreateBitmapFromFileICM
GdipCloneImage
GdipFree
GdipDisposeImage
GdipAlloc
GdipGetImageThumbnail
GdipCreateBitmapFromFile

winmm

PlaySoundA
timeGetTime
timeSetEvent

mxksproxy

__ff7x011@8
__ff9b006@4
__ff7x00k@4
__ff7x00r@0
__ff7x00y@4
__ff7x005@4
__ff7x002@16
__f6k003@32
__ff9b002@4

cximage

?Destroy@CxImage@@QAE_NXZ
?DestroyFrames@CxImage@@QAE_NXZ
??0CxImage@@QAE@K@Z
??0CxImage@@QAE@ABV0@_N11@Z
??4CxImage@@QAEAAV0@ABV0@@Z
??1CxMemFile@@UAE@XZ
??0CxMemFile@@QAE@PAEK@Z
?Close@CxMemFile@@UAE_NXZ
?Read@CxMemFile@@UAEIPAXII@Z
?Write@CxMemFile@@UAEIPBXII@Z
?Seek@CxMemFile@@UAE_NJH@Z
?Size@CxMemFile@@UAEJXZ
?Flush@CxMemFile@@UAE_NXZ
?Save@CxImage@@QAE_NPBDK@Z
?CreateFromArray@CxImage@@QAE_NPAEKKKK_N@Z
?Tell@CxMemFile@@UAEJXZ
?Scanf@CxMemFile@@UAEJPBDPAX@Z
?GetS@CxMemFile@@UAEPADPADH@Z
?GetC@CxMemFile@@UAEJXZ
?PutC@CxMemFile@@UAE_NE@Z
?Error@CxMemFile@@UAEJXZ
?Eof@CxMemFile@@UAE_NXZ

mfc42

ord6453
ord6197
ord6215
ord3402
ord924
ord537
ord6442
ord2452
ord1099
ord640
ord2753
ord5785
ord1640
ord323
ord2764
ord4204
ord2405
ord613
ord289
ord2860
ord4673
ord4274
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord539
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord2514
ord2621
ord1134
ord1232
ord2725
ord5265
ord4376
ord4853
ord4998
ord4710
ord6052
ord1775
ord5280
ord4425
ord3597
ord324
ord641
ord4234
ord3619
ord2135
ord2302
ord4160
ord540
ord2863
ord6270
ord1644
ord922
ord6199
ord2567
ord6880
ord6605
ord5781
ord3089
ord5875
ord1862
ord4220
ord2584
ord3654
ord2438
ord2455
ord1175
ord2754
ord283
ord3721
ord795
ord860
ord858
ord2776
ord2152
ord6379
ord5789
ord472
ord2370
ord1949
ord4034
ord6883
ord800
ord801
ord541
ord3790
ord535
ord5861
ord823
ord3571
ord2864
ord2859
ord5981
ord2379
ord3573
ord3706
ord3663
ord1641
ord5788
ord4297
ord4133
ord2414
ord3626
ord3693
ord3920
ord470
ord755
ord2096
ord1146
ord1168
ord1233
ord4275
ord686
ord2408
ord6143
ord567
ord384
ord818
ord3742
ord4424
ord4627
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5290
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1776
ord4078
ord6055
ord825
ord5302
ord1576

msvcrt

_mbsrchr
wcsrchr
wcscpy
wcslen
swprintf
_mbsicmp
time
srand
rand
wcscmp
strrchr
sscanf
_mbscmp
sprintf
_splitpath
__CxxFrameHandler
fscanf
fgets
getc
fputc
fflush
ftell
fseek
fwrite
fread
fopen
_setmbcp
_stricmp
_chkesp
memcmp
memcpy
memset
_vsnprintf
vsprintf
?terminate@@YAXXZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
free
_controlfp
_purecall
fclose
_except_handler3

kernel32

LocalFree
RaiseException
SetUnhandledExceptionFilter
IsBadCodePtr
GetCommandLineA
MulDiv
GlobalAlloc
GlobalLock
GlobalUnlock
GetProcAddress
WideCharToMultiByte
GetCurrentProcessId
Sleep
lstrcmpiA
GetModuleFileNameW
GetLocalTime
LoadLibraryA
FreeLibrary
GetPrivateProfileIntA
GetPrivateProfileStringA
lstrlenA
MultiByteToWideChar
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
GetUserDefaultLangID
GetTickCount
GetModuleHandleA
GetCurrentThreadId
GetPrivateProfileStringW
GetModuleFileNameA
CloseHandle
GetVersionExA
lstrcpyA
GlobalReAlloc
lstrcatA
CreateFileA
CreateEventA
CreateThread
WaitForSingleObject
CreateSemaphoreA
SetEvent
GetACP
ResetEvent
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
IsBadWritePtr
IsBadReadPtr
SetThreadPriority
GetThreadPriority
GetCurrentThread
WaitForMultipleObjects
GetLastError
DebugBreak
GetProfileIntA
WriteFile
SetFilePointer
SetConsoleTitleA
AllocConsole
GetStdHandle
FatalAppExitA
InterlockedIncrement
InterlockedDecrement
GetStartupInfoA
OutputDebugStringA
WritePrivateProfileStringA
GlobalFree

user32

PeekMessageA
MsgWaitForMultipleObjects
wvsprintfA
wsprintfA
PostThreadMessageA
RegisterWindowMessageA
GetQueueStatus
DispatchMessageA
FindWindowA
GetClassInfoA
SendMessageA
AppendMenuA
GetSystemMenu
DrawIcon
GetSystemMetrics
IsIconic
LoadCursorA
LoadIconA
FillRect
GetClientRect
PtInRect
ReleaseDC
GetDC
PostMessageA
GetParent
InvalidateRect
TrackMouseEvent
MessageBoxA
ReleaseCapture
ClientToScreen
EnableWindow
LoadImageA
IsWindow
GetClassNameA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
CallWindowProcA
FrameRect
CopyRect
SetCursor
UpdateWindow
RedrawWindow
ScreenToClient
GetFocus
GetWindowLongA
GetWindowRgn
SetWindowPos
SetTimer
KillTimer
GetDesktopWindow
SetRect
GetSysColor
InflateRect
SetCapture
SetWindowRgn
OffsetRect
GetWindowRect
CheckMenuItem
CreatePopupMenu
SetWindowLongA
LoadStringA
SetParent

gdi32

GetDeviceCaps
CreateCompatibleBitmap
CreatePolygonRgn
CreateSolidBrush
FillRgn
DeleteObject
CreatePen
CreateCompatibleDC
GetTextExtentPoint32A
PtInRegion
SelectClipRgn
CreatePatternBrush
CreateRoundRectRgn
CreateFontA
StretchBlt
CreateRectRgn
GetObjectA
CreateDIBSection
SelectObject
BitBlt
ExtCreateRegion
CombineRgn
DeleteDC

advapi32

RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA
StrStrIA
SHGetSpecialFolderPathA
SHFileOperationA

comctl32

ImageList_ReplaceIcon
ImageList_Draw
InitCommonControlsEx
ImageList_GetImageCount
ImageList_SetImageCount
ImageList_Replace

ole32

StgCreateDocfile
GetRunningObjectTable
CreateItemMoniker
CoCreateInstance
StringFromGUID2
CoUninitialize
CoTaskMemFree
CoTaskMemAlloc
StgOpenStorage
CoInitialize

olepro32

ord250

oleaut32

SysAllocString
VariantClear
SysFreeString
OleLoadPicturePath

shlwapi

PathFileExistsA

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@CAPBGXZ@4GB
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??8std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
?_Grow@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAE_NI_N@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?_Eos@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEXI@Z
??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ
?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ
?_Tidy@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@AAEX_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

mxpubimglib

?InitSprite@CMxSpriteRGBA@@UAEHAAVCMximage@@HHHH@Z
??1CMxSpriteRGBA@@UAE@XZ
?GetThumbFromAVI@CMxPubFunc@@SGPAUHBITMAP__@@PADHH@Z
?GetDisabIcon@CMxPubFunc@@SGPAUHICON__@@PAU2@@Z
?AlphaBlend@CMxSpriteRGBA@@UAEXPAEHH@Z
?HighlightIcon@CMxPubFunc@@SGPAUHICON__@@PAU2@@Z
??1CMximage@@UAE@XZ
?CalSpritePos@CMxSpriteRGBA@@UAEXHH@Z
?GetPressIcon@CMxPubFunc@@SGPAUHICON__@@PAU2@@Z

Exports

Exports

??0CMxBlendText@@QAE@ABV0@@Z
??0CMxBlendText@@QAE@XZ
??0CMxFaceDetect@@QAE@ABV0@@Z
??0CMxFaceDetect@@QAE@XZ
??0CMxSpriteRGBA@@QAE@ABV0@@Z
??0CMximage@@QAE@ABV0@@Z
??0CxFile@@QAE@ABV0@@Z
??0CxFile@@QAE@XZ
??0CxIOFile@@QAE@ABV0@@Z
??0CxIOFile@@QAE@PAU_iobuf@@@Z
??0CxMemFile@@QAE@ABV0@@Z
??1CMxBlendText@@UAE@XZ
??1CMxFaceDetect@@UAE@XZ
??1CxFile@@UAE@XZ
??1CxIOFile@@UAE@XZ
??1CxImage@@UAE@XZ
??4CMxBlendText@@QAEAAV0@ABV0@@Z
??4CMxFaceDetect@@QAEAAV0@ABV0@@Z
??4CMxPubFunc@@QAEAAV0@ABV0@@Z
??4CMxSpriteRGBA@@QAEAAV0@ABV0@@Z
??4CMximage@@QAEAAV0@ABV0@@Z
??4CxFile@@QAEAAV0@ABV0@@Z
??4CxIOFile@@QAEAAV0@ABV0@@Z
??4CxMemFile@@QAEAAV0@ABV0@@Z
??_7CMxBlendText@@6B@
??_7CMxFaceDetect@@6B@
??_7CMxSpriteRGBA@@6B@
??_7CMximage@@6B@
??_7CxFile@@6B@
??_7CxIOFile@@6B@
??_7CxImage@@6B@
??_7CxMemFile@@6B@
??_FCxIOFile@@QAEXXZ
??_FCxImage@@QAEXXZ
??_FCxMemFile@@QAEXXZ
??_OCxImage@@QAEXABV0@@Z
?Close@CxIOFile@@UAE_NXZ
?Eof@CxIOFile@@UAE_NXZ
?Error@CxIOFile@@UAEJXZ
?Flush@CxIOFile@@UAE_NXZ
?GetC@CxIOFile@@UAEJXZ
?GetS@CxIOFile@@UAEPADPADH@Z
?Open@CxIOFile@@QAE_NPBD0@Z
?PutC@CxFile@@UAE_NE@Z
?PutC@CxIOFile@@UAE_NE@Z
?Read@CxIOFile@@UAEIPAXII@Z
?Scanf@CxIOFile@@UAEJPBDPAX@Z
?Seek@CxIOFile@@UAE_NJH@Z
?Size@CxIOFile@@UAEJXZ
?Tell@CxIOFile@@UAEJXZ
?Write@CxIOFile@@UAEIPBXII@Z

Sections

.text
Size: 176KB - Virtual size: 174KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb0af85d86c6c84e704b5ea20c2b5f9b

Headers

File Characteristics

Imports

msimg32

gdiplus

winmm

mxksproxy

cximage

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

olepro32

oleaut32

shlwapi

msvcp60

mxpubimglib

Exports

Exports

Sections

.text Size: 176KB - Virtual size: 174KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 28KB - Virtual size: 31KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 176KB - Virtual size: 174KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 28KB - Virtual size: 31KB

.rsrc
Size: 28KB - Virtual size: 25KB