19a304944448354927a249cc46c0d1ef2803ee361da3f3087c544f05ed971017

Sharing

Copy URL Twitter E-mail

General

Target

19a304944448354927a249cc46c0d1ef2803ee361da3f3087c544f05ed971017
Size

408KB
MD5

d8d9364642a8357d4a025d7aeca5cc3f
SHA1

0f9c0e04261839cc6c3636226b7a0a73a926c3a3
SHA256

19a304944448354927a249cc46c0d1ef2803ee361da3f3087c544f05ed971017
SHA512

316ecc4c7f99da92ba653aad82e87f9fb27dc6d2ed371ff57245841b1db7bd14d03f5f21fa2f30e55ec678c2dc8ab7482fe15190b6b9864dc349d07c8cb3cd16
SSDEEP

6144:+WhEc9ncU4ksxyJdzv5PGEwp56kJg9ja1pKHkhGyekCRboPhhTQg2pri:9BJdlPb6b8IpLGyekcymi

Score

N/A

Malware Config

Signatures

Files

19a304944448354927a249cc46c0d1ef2803ee361da3f3087c544f05ed971017
.dll windows x86

c8df08117592a75e9bc7e503b953168e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
lstrcpynA
lstrcmpA
FindResourceA
lstrlenA
GetTempFileNameA
GetTempPathA
FreeLibrary
GetProcessHeap
SizeofResource
LoadResource
CreateEventA
CloseHandle
LockResource
GetEnvironmentVariableA
HeapDestroy
GetSystemTime
GetSystemInfo
GetCurrentProcessId
VirtualQuery
WriteProcessMemory
VirtualProtect
FlushInstructionCache
GetWindowsDirectoryA
DeleteFileA
RaiseException
HeapSize
ReadFile
SetFilePointer
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CreateFileA
SetEndOfFile
InterlockedExchange
InterlockedIncrement
Sleep
GetStringTypeA
InterlockedDecrement
GetStringTypeW
MultiByteToWideChar
LCMapStringW
LCMapStringA
IsBadWritePtr
RtlUnwind
LoadLibraryA
GetOEMCP
HeapReAlloc
VirtualAlloc
GetACP
GetCPInfo
LeaveCriticalSection
HeapAlloc
WriteFile
EnterCriticalSection
InitializeCriticalSection
HeapCreate
HeapFree
VirtualFree
SetEvent
WaitForSingleObject
GetEnvironmentStringsW
ExitProcess
GetVersion
GetCommandLineA
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
DeleteCriticalSection
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
GetLastError
TlsGetValue
SetLastError
TlsFree
TlsAlloc
TlsSetValue
GetCurrentThreadId
GetCurrentProcess
TerminateProcess
CreateThread
MulDiv
GetVersionExA
GetModuleHandleA
lstrcpyA
GetProcAddress

user32

EnableMenuItem
GetSystemMenu
DrawIconEx
GetClassLongA
DestroyMenu
InflateRect
EnableScrollBar
GetScrollInfo
GetScrollPos
GetScrollRange
SetScrollInfo
SetScrollPos
SetScrollRange
ShowScrollBar
GetDC
GetIconInfo
CharUpperBuffA
GetWindowTextA
DrawFrameControl
IsWindowEnabled
DestroyIcon
DrawStateA
EnumChildWindows
SetFocus
GetFocus
EnableWindow
SetRect
SetWindowWord
GetWindowWord
DrawIcon
ValidateRect
GetSubMenu
GetMenuItemID
EqualRect
IsMenu
DrawMenuBar
CharLowerA
CharUpperA
DestroyCursor
LoadImageA
LoadStringA
CopyIcon
CopyRect
MapWindowPoints
GetMessagePos
GetCapture
DrawTextExA
CreateIconIndirect
ScreenToClient
IsWindowVisible
CreatePopupMenu
ReleaseCapture
GetMenuItemCount
DestroyWindow
DrawEdge
LockWindowUpdate
DrawTextA
BeginPaint
EndPaint
ClientToScreen
PtInRect
KillTimer
InvalidateRect
SetForegroundWindow
SetTimer
UpdateWindow
UnregisterClassA
LoadCursorA
RegisterClassExA
CreateWindowExA
GetKeyState
CopyAcceleratorTableA
GetMenu
GetWindow
IsZoomed
MoveWindow
ShowWindow
PostMessageA
ReleaseDC
GetWindowDC
GetClientRect
SetWindowRgn
SetWindowPos
RemovePropA
SetPropA
SetWindowLongA
RedrawWindow
CallWindowProcA
DefWindowProcA
GetSysColorBrush
GetSysColor
GetMessageA
DispatchMessageA
IsWindow
UnhookWindowsHookEx
MessageBoxA
SetWindowsHookExA
GetParent
GetWindowLongA
GetActiveWindow
GetClassNameA
GetPropA
GetMenuState
SendMessageA
CallNextHookEx
InsertMenuItemA
GetMenuItemInfoA
GetDesktopWindow
GetCursorPos
SetCapture
FillRect
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
SetMenu
GetWindowInfo
IsRectEmpty

gdi32

GetClipBox
CombineRgn
OffsetRgn
CreateRectRgnIndirect
BitBlt
GetStockObject
SetBkMode
SelectObject
CreateFontIndirectA
SetTextColor
CreateSolidBrush
GetTextExtentPointA
ExtCreateRegion
GetRegionData
DeleteDC
GetDIBits
CreateICA
GetObjectA
SetBkColor
CreateBitmap
RealizePalette
SelectPalette
GetDeviceCaps
CreateCompatibleBitmap
StretchBlt
Polygon
CreateCompatibleDC
SaveDC
CreateDIBitmap
RestoreDC
SetDIBitsToDevice
SetStretchBltMode
CreateDIBSection
RectVisible
StretchDIBits
ExtSelectClipRgn
ExcludeClipRect
GetPixel
PtInRegion
LineTo
MoveToEx
CreatePen
SelectClipRgn
TextOutA
GetTextExtentPoint32A
GetClipRgn
GetRgnBox
GetTextMetricsA
IntersectClipRect
PatBlt
SetBrushOrgEx
UnrealizeObject
CreatePatternBrush
ExtTextOutA
DeleteObject
CreateRectRgn

imagehlp

ImageDirectoryEntryToData

shell32

ExtractIconExA

comctl32

ImageList_Create
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize
ImageList_DrawEx
ImageList_AddMasked
ImageList_GetImageCount
ImageList_Destroy

Exports

Exports

CloseSkinData
CreateImageList
CreateSkinImageRectRegion
CreateSkinImageSectionRegion
DisableWindowScrollbarSkin
DrawSkinImageRect
DrawSkinImageSection
DrawSkinTextEffect
EnableCaptionButtons
EnableWindowScrollbarSkin
ExitSkinMagicLib
GetCaptionButtonState
GetSkinBool
GetSkinColor
GetSkinControlBkColor
GetSkinControlColor
GetSkinControlFont
GetSkinControlID
GetSkinControlRect
GetSkinDWORD
GetSkinFont
GetSkinImageSectionMargins
GetSkinInt
GetSkinMagicErrorCode
GetSkinMenu
GetSkinString
GetSkinSysColor
GetSkinSysColorBrush
GetSkinTransparentColor
HideTooltip
InitSkinMagicLib
LoadSkinFile
LoadSkinFromResource
OpenSkinData
RedrawCaptionStatic
RegisterSkinWindow
RemoveDialogSkin
RemoveWindowSkin
SetCaptionButtonState
SetCaptionButtonTooltip
SetControlSkin
SetControlTooltip
SetDialogSkin
SetShapeWindowSkin
SetSingleDialogSkin
SetSkinMenu
SetSkinWindowAccelerator
SetWindowMainMenuImage
SetWindowSkin
ShowTooltipPoint
TrackSkinPopupMenu
TrackSkinPopupMenuEx
UnregisterSkinWindow

Sections

.text
Size: 316KB - Virtual size: 314KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 992B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8df08117592a75e9bc7e503b953168e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

imagehlp

shell32

comctl32

Exports

Exports

Sections

.text Size: 316KB - Virtual size: 314KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 24KB - Virtual size: 97KB

.rsrc Size: 4KB - Virtual size: 992B

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 316KB - Virtual size: 314KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 24KB - Virtual size: 97KB

.rsrc
Size: 4KB - Virtual size: 992B

.reloc
Size: 24KB - Virtual size: 23KB