d194d7a1ba44b2773196cbe79aac6dbc0710d756a0aae4b15d40f027b85a4fb0

Sharing

Copy URL Twitter E-mail

General

Target

d194d7a1ba44b2773196cbe79aac6dbc0710d756a0aae4b15d40f027b85a4fb0
Size

9.3MB
MD5

47553f1069d8c176046b853df1e9fb8d
SHA1

2cfeb1703f53661b73f839a2f3ba97c4bd59101c
SHA256

d194d7a1ba44b2773196cbe79aac6dbc0710d756a0aae4b15d40f027b85a4fb0
SHA512

6beacbe3a0a168f751ecf77ee9c906732e1f02d335dc18d48b673747b3e3fe44af861cc13e2b6e2fccf50d5da0d7c6ed28a857a51047637a103bc43d6400e788
SSDEEP

98304:bQLNi3SUGGssLJygeEEtEE8EEUQEO2FYL+pFtFlO2yRkLqg:UiiUGGsYSEEtEE8EEAXqg

Score

N/A

Malware Config

Signatures

Files

d194d7a1ba44b2773196cbe79aac6dbc0710d756a0aae4b15d40f027b85a4fb0
.exe windows x86

9f945fb724c6f521c84f33d53b6ac086

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

GetAdaptersInfo

kernel32

GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
HeapSize
GetACP
GetTimeZoneInformation
HeapDestroy
HeapCreate
GetConsoleCP
GetConsoleMode
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeA
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetExitCodeProcess
SetEnvironmentVariableA
InitializeCriticalSection
DeleteCriticalSection
Sleep
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceA
GetWindowsDirectoryA
OpenFile
WinExec
MulDiv
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalHandle
GlobalFree
GetModuleFileNameA
GetTickCount
CreateThread
DeleteFileA
CreateFileA
CloseHandle
CopyFileA
MultiByteToWideChar
FindFirstFileA
FindClose
lstrlenA
WriteFile
lstrcpyA
WaitForSingleObject
GetFileSize
ReadFile
SetThreadPriority
ExitThread
TerminateProcess
SetLastError
GetLastError
LoadLibraryA
GetModuleHandleA
GetProcAddress
LoadLibraryExA
FreeLibrary
TerminateThread
GetSystemDirectoryA
GetTempPathA
GetComputerNameA
GetFileAttributesA
GetVersion
GetCurrentProcessId
GetCurrentProcess
CreateDirectoryA
CreateProcessA
FormatMessageA
LocalFree
RemoveDirectoryA
CreateEventA
ResumeThread
SetEvent
MoveFileA
CompareStringW
lstrlenW
InterlockedExchange
CompareStringA
CreateMutexA
ReleaseMutex
InterlockedIncrement
InterlockedDecrement
GetSystemInfo
VirtualFree
DuplicateHandle
VirtualAlloc
GetCurrentThread
GetVersionExA
SuspendThread
GlobalSize
FreeResource
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetModuleFileNameW
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetThreadLocale
GetVolumeInformationA
GetFullPathNameA
FindNextFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
lstrcmpA
GetFileTime
GetProfileIntA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
WritePrivateProfileStringA
LocalAlloc
TlsGetValue
GlobalReAlloc
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
SetErrorMode
GetCurrentDirectoryA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
HeapReAlloc
VirtualProtect
VirtualQuery
ExitProcess

user32

EndDialog
GetMenuItemID
GetMenuItemCount
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuA
GetMenuState
CheckMenuItem
SetWindowsHookExA
CallNextHookEx
GetMessageA
GetKeyState
ValidateRect
RegisterWindowMessageA
GetActiveWindow
GetFocus
GetCapture
GetSysColor
ShowScrollBar
CharUpperA
SetClipboardData
EmptyClipboard
GetParent
EnableMenuItem
CreatePopupMenu
IsWindowVisible
GetForegroundWindow
GetWindowDC
IsWindow
DestroyIcon
FindWindowA
RedrawWindow
KillTimer
AppendMenuA
GetSystemMenu
ChangeDisplaySettingsA
SendInput
ExitWindowsEx
GetWindowThreadProcessId
GetWindowTextA
GetWindow
GetNextDlgTabItem
SetLayeredWindowAttributes
GetWindowLongA
mouse_event
SetCursorPos
PostThreadMessageA
OffsetRect
ReleaseCapture
ClipCursor
SetCapture
LoadIconA
wsprintfA
IsRectEmpty
DestroyWindow
UpdateWindow
EqualRect
ScreenToClient
AdjustWindowRectEx
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
ShowWindow
CopyRect
DispatchMessageA
TranslateMessage
PeekMessageA
SetRect
GetSystemMetrics
PostMessageA
ReleaseDC
DrawIcon
GetIconInfo
GetDC
GetCursor
GetSubMenu
LoadMenuA
GetScrollPos
PtInRect
GetCursorPos
SetScrollRange
SetScrollPos
LoadCursorA
SetCursor
IsWindowEnabled
GetDlgItem
CreateDialogIndirectParamA
SetActiveWindow
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
SetWindowPos
CallWindowProcA
InvalidateRect
SetTimer
DefWindowProcA
GetDlgCtrlID
FindWindowExA
GetMenu
SetForegroundWindow
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow
GetLastActivePopup
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
MessageBoxA
PostQuitMessage
SendMessageA
EnableWindow
OpenClipboard
GetClipboardData
CloseClipboard
GetClientRect
LoadBitmapA
BringWindowToTop
GetWindowRect
GetDesktopWindow
SetWindowRgn
GetClassLongA
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
MessageBeep
UnregisterClassA
GetSysColorBrush
WindowFromPoint
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
IsClipboardFormatAvailable
CharNextA
DestroyMenu
InflateRect
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
MoveWindow
SetWindowTextA
IsDialogMessageA
SendDlgItemMessageA
WinHelpA
SetWindowLongA
IsChild

gdi32

GetRgnBox
GetMapMode
GetTextColor
GetBkColor
CreatePatternBrush
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
MoveToEx
LineTo
SetMapMode
RestoreDC
SaveDC
CreateRectRgnIndirect
CopyMetaFileA
GetTextExtentPoint32A
CreatePolygonRgn
SetBrushOrgEx
GetPixel
GetDCOrgEx
GetClipBox
CreateDIBSection
CreateFontA
CreateDCA
SetDIBits
ExtTextOutA
RoundRect
SetBkMode
SetBkColor
SetTextColor
GetTextExtentPointA
CreateHatchBrush
PatBlt
OffsetRgn
CombineRgn
CreateRectRgn
Ellipse
GetStockObject
SelectObject
DeleteDC
GetDIBits
SetBitmapBits
CreateBitmap
GetBitmapBits
BitBlt
CreateCompatibleBitmap
Rectangle
CreatePen
CreateRoundRectRgn
CreateFontIndirectA
GetDeviceCaps
StretchBlt
GetObjectA
CreateCompatibleDC
DeleteObject
CreateSolidBrush

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
GetUserNameA
RegOpenKeyA
RegCreateKeyA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
DragQueryFileA
SHGetSpecialFolderPathA
ShellExecuteA
Shell_NotifyIconA

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA

oledlg

ord8

ole32

CoRegisterMessageFilter
CoRevokeClassObject
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CoGetClassObject
OleRun
CLSIDFromString
OleUninitialize
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleDuplicateData
ReleaseStgMedium
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
CoUninitialize
CLSIDFromProgID
OleInitialize
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoInitialize
CoCreateInstance

oleaut32

OleCreateFontIndirect
SysAllocStringLen
VariantChangeType
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocString
VariantInit
GetActiveObject
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantCopy
SafeArrayDestroy
VariantClear

ws2_32

gethostbyname
WSAStartup
WSASendTo
ioctlsocket
ntohs
listen
bind
inet_ntoa
getsockname
shutdown
inet_addr
WSACleanup
send
recv
connect
htons
accept
closesocket
socket

winmm

mmioDescend
mmioCreateChunk
mmioOpenA
mmioRead
mmioWrite
mmioClose
mmioAscend
waveInGetDevCapsA
waveInGetErrorTextA
waveInGetNumDevs
waveInUnprepareHeader
waveInClose
waveInReset
waveInStop
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
timeGetTime
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutClose
waveOutReset
waveOutSetVolume
waveOutOpen

gdiplus

GdipDeleteGraphics
GdipSetSmoothingMode
GdipFillRectangleI
GdipCreateSolidFill
GdipDeleteBrush
GdipAlloc
GdipCloneBrush
GdipFree
GdipGetDC
GdipCreateFontFromLogfontA
GdipDrawCurve
GdipReleaseDC
GdipDrawString
GdipSetPenDashStyle
GdipDrawRectangleI
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipCloneImage
GdipDrawImagePointRectI
GdipDrawImageRectRect
GdiplusStartup
GdiplusShutdown
GdipSetPenLineJoin
GdipSetPenLineCap197819
GdipDeleteFont
GdipDrawLines
GdipCreatePen1
GdipDrawPolygon
GdipDrawLineI
GdipDrawEllipseI
GdipDeletePen
GdipCreateFromHDC

setupapi

SetupDiCallClassInstaller
SetupDiDestroyDeviceInfoList
SetupDiSetClassInstallParamsA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

rpcrt4

UuidFromStringA

msacm32

acmFormatSuggest
acmFormatTagDetailsA
acmMetrics
acmFormatChooseA

msvfw32

ICSeqCompressFrameStart
DrawDibEnd
DrawDibBegin
DrawDibOpen
ICSeqCompressFrameEnd
ICCompressorFree
ICGetInfo
ICInfo
ICSeqCompressFrame
ICDecompress
ICClose
ICSendMessage
ICOpen
ord2
DrawDibClose

avifil32

AVIFileExit
AVIFileInit
AVIFileOpenA
AVIFileCreateStreamA
AVIMakeCompressedStream
AVIStreamSetFormat
AVIStreamWrite
AVISaveOptionsFree
AVIFileRelease
AVIStreamRelease
AVISaveVW
AVIFileGetStream
CreateEditableStream
AVIStreamOpenFromFileA
AVIStreamInfoA
AVIStreamReadFormat
AVIStreamStart

avicap32

capGetDriverDescriptionA
capCreateCaptureWindowA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 244KB - Virtual size: 242KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 6.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 7.8MB - Virtual size: 7.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9f945fb724c6f521c84f33d53b6ac086

Headers

File Characteristics

Imports

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

winmm

gdiplus

setupapi

rpcrt4

msacm32

msvfw32

avifil32

avicap32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 244KB - Virtual size: 242KB

.data Size: 40KB - Virtual size: 6.1MB

.rsrc Size: 7.8MB - Virtual size: 7.8MB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 244KB - Virtual size: 242KB

.data
Size: 40KB - Virtual size: 6.1MB

.rsrc
Size: 7.8MB - Virtual size: 7.8MB