399a9f48b524af6b99ad6d98c9612ad907203411373debf640414516d429536d

Sharing

Copy URL Twitter E-mail

General

Target

399a9f48b524af6b99ad6d98c9612ad907203411373debf640414516d429536d
Size

1.1MB
MD5

a0e138eba1306cb137e98d83b5d37c30
SHA1

51bb38aada205ed7bc3468eca2d650a89594381c
SHA256

399a9f48b524af6b99ad6d98c9612ad907203411373debf640414516d429536d
SHA512

50eff8f734fb2913f11abf3cf96e7202ffbaf58487df9fdfb086aad8a8a59857d79064224e876fa10bbdc604810b421adcbe5cf6efb761e861f3746344fa5a07
SSDEEP

12288:fSonVGozpN9OC4NHaOQD/xvY8JNIf29AvtmE0C9erfSN+CWzXu/9Q2TAu4:fSonVGeONHj+BHJN3E0CMrfSNQ09zw

Score

N/A

Malware Config

Signatures

Files

399a9f48b524af6b99ad6d98c9612ad907203411373debf640414516d429536d
.exe windows x86

42eab5c572737642b25ce3d52243810f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualQuery
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
HeapSize
GetStdHandle
GetACP
HeapDestroy
HeapCreate
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GetCurrentThreadId
Sleep
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalHandle
GlobalFree
GetTickCount
CreateFileA
WriteFile
VirtualProtect
CloseHandle
CreateThread
DeleteFileA
CopyFileA
MultiByteToWideChar
OpenFile
GetModuleFileNameA
GetWindowsDirectoryA
FindFirstFileA
FindClose
lstrlenA
MulDiv
lstrcpyA
WinExec
DeleteCriticalSection
LoadLibraryA
GetProcAddress
GetCurrentProcessId
WaitForSingleObject
GetFileSize
ReadFile
TerminateThread
ExitThread
FormatMessageA
FreeLibrary
GetLastError
LocalFree
SetLastError
GetModuleHandleA
CreateEventA
ResumeThread
SetEvent
CreateDirectoryA
CompareStringW
lstrlenW
InterlockedExchange
CompareStringA
GetVersion
GetLocalTime
GetDateFormatA
GetTimeFormatA
HeapFree
HeapAlloc
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentDirectoryA
SetErrorMode
FindNextFileA
GetOEMCP
CreateMutexA
ReleaseMutex
InterlockedIncrement
InterlockedDecrement
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalReAlloc
TlsGetValue
LocalAlloc
WritePrivateProfileStringA
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GetFileTime
GetFileAttributesA
GetSystemInfo
VirtualFree
DuplicateHandle
GetCurrentProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
GetModuleFileNameW
GetFullPathNameA
GetVolumeInformationA
GetThreadLocale
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GlobalSize
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
FreeResource
SuspendThread
GetVersionExA
GetCurrentThread
VirtualAlloc

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
CharNextA
UnregisterClassA
GetSysColorBrush
DestroyMenu
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
MoveWindow
IsDialogMessageA
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
TabbedTextOutA
SendDlgItemMessageA
WinHelpA
IsChild
GetClassLongA
GetClassNameA
SetPropA
GetPropA
SetFocus
GetWindowTextLengthA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetForegroundWindow
GetMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowPos
OffsetRect
IntersectRect
IsIconic
GetWindowPlacement
SetActiveWindow
CreateDialogIndirectParamA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
RemovePropA
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
IsWindowVisible
ValidateRect
RegisterWindowMessageA
GetActiveWindow
WindowFromPoint
ClientToScreen
DrawTextA
IsWindow
KillTimer
CharUpperA
SetClipboardData
EmptyClipboard
GetParent
EnableMenuItem
CreatePopupMenu
GetFocus
PtInRect
GetCapture
GetSysColor
GetSubMenu
LoadMenuA
ReleaseCapture
ClipCursor
SetCapture
BringWindowToTop
SetLayeredWindowAttributes
GetWindowLongA
SetWindowLongA
LoadCursorA
SetCursor
GetWindowTextA
GetWindowThreadProcessId
GetWindow
PostThreadMessageA
SetWindowTextA
PostMessageA
GetDesktopWindow
SystemParametersInfoA
AppendMenuA
GetSystemMenu
LoadIconA
GetKeyState
SendMessageA
InvalidateRect
LoadBitmapA
wsprintfA
IsRectEmpty
DestroyWindow
UpdateWindow
ShowWindow
CopyRect
DispatchMessageA
TranslateMessage
PeekMessageA
SetRect
GetSystemMetrics
ReleaseDC
MessageBoxA
DrawIcon
GetIconInfo
GetCursorPos
GetDC
GetCursor
EnableWindow
SetTimer
SetWindowRgn
GetWindowRect
GetClientRect
CloseClipboard
GetClipboardData
OpenClipboard
PostQuitMessage

gdi32

SaveDC
RestoreDC
SetMapMode
LineTo
MoveToEx
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
CreatePolygonRgn
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExtSelectClipRgn
CreatePatternBrush
CopyMetaFileA
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetBrushOrgEx
GetPixel
GetTextExtentPoint32A
CreateDIBSection
GetDCOrgEx
StretchBlt
CreateRectRgn
CreateFontIndirectA
CreateSolidBrush
DeleteObject
CreateRoundRectRgn
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateCompatibleBitmap
CreateBitmap
SelectObject
GetStockObject
CreatePen
Rectangle
Ellipse
BitBlt
SelectPalette
RealizePalette
SetDIBits
CreateDCA
GetDeviceCaps
CreateHatchBrush
PatBlt
GetTextExtentPointA
SetTextColor
SetBkColor
SetBkMode
RoundRect
ExtTextOutA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA
RegSetValueExA
RegOpenKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathStripToRootA
PathIsUNCA
PathFindFileNameA
PathFindExtensionA

oledlg

ord8

ole32

OleFlushClipboard
CLSIDFromString
CLSIDFromProgID
OleInitialize
OleUninitialize
OleDuplicateData
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoInitialize
CoCreateInstance
CoGetClassObject
CoRevokeClassObject
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
CreateStreamOnHGlobal
OleIsCurrentClipboard

oleaut32

VariantClear
VariantChangeType
VariantInit
SysFreeString
SysAllocString
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
OleCreateFontIndirect
SysAllocStringLen

ws2_32

closesocket
socket
htonl
setsockopt
listen
bind
send
recv
htons
inet_addr
ntohl
connect
inet_ntoa
gethostbyname
WSACleanup
WSAStartup
WSASendTo
WSAJoinLeaf
WSAStringToAddressA
WSAIoctl
WSASocketA
accept

gdiplus

GdipDrawImagePointRectI
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdipDrawRectangleI
GdipSetPenDashStyle
GdipDrawString
GdipReleaseDC
GdipDeleteFont
GdipCreateFontFromLogfontA
GdipGetDC
GdipFree
GdipCloneBrush
GdipDrawImageRectRect
GdipDeleteBrush
GdipCreateSolidFill
GdipFillRectangleI
GdipSetSmoothingMode
GdipDeleteGraphics
GdipCreateFromHDC
GdipDrawLines
GdipDrawCurve
GdipSetPenLineJoin
GdipSetPenLineCap197819
GdipDrawPolygon
GdipDrawEllipseI
GdipAlloc
GdiplusStartup
GdipCreatePen1
GdipDeletePen
GdipDrawLineI

winmm

waveInGetErrorTextA
waveInUnprepareHeader
waveInClose
waveInReset
waveInStop
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
timeGetTime
waveInGetDevCapsA
mmioAscend
mmioClose
mmioWrite
mmioRead
mmioOpenA
mmioCreateChunk
mmioDescend
waveInGetNumDevs

msacm32

acmMetrics
acmFormatTagDetailsA
acmFormatSuggest
acmFormatChooseA

msvfw32

ICClose
ICOpen
ord2
ICSendMessage
ICInfo
ICGetInfo
ICSeqCompressFrameStart
ICSeqCompressFrameEnd
ICCompressorFree
ICSeqCompressFrame
ICDecompress
DrawDibOpen
DrawDibBegin
DrawDibEnd
DrawDibClose

avifil32

AVIStreamStart
AVIStreamReadFormat
AVIStreamInfoA
AVIStreamOpenFromFileA
CreateEditableStream
AVIFileGetStream
AVIFileExit
AVIStreamRelease
AVIFileRelease
AVISaveOptionsFree
AVIStreamWrite
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileCreateStreamA
AVIFileOpenA
AVISaveVW
AVIFileInit

avicap32

capGetDriverDescriptionA
capCreateCaptureWindowA

Sections

.text
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 176KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42eab5c572737642b25ce3d52243810f

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

gdiplus

winmm

msacm32

msvfw32

avifil32

avicap32

Sections

.text Size: 708KB - Virtual size: 707KB

.rdata Size: 176KB - Virtual size: 172KB

.data Size: 36KB - Virtual size: 126KB

.rsrc Size: 180KB - Virtual size: 179KB

.text
Size: 708KB - Virtual size: 707KB

.rdata
Size: 176KB - Virtual size: 172KB

.data
Size: 36KB - Virtual size: 126KB

.rsrc
Size: 180KB - Virtual size: 179KB