298df57fe17444c49a22b903af5b4094e35f713b67ef4f9eabe4d0d67eae038b

Sharing

Copy URL Twitter E-mail

General

Target

298df57fe17444c49a22b903af5b4094e35f713b67ef4f9eabe4d0d67eae038b
Size

640KB
MD5

92e5cfbde46a7233d3a261f7f3a8d1c7
SHA1

fc67c271a0be272a5491e6b38b7c1fe02c638cb6
SHA256

298df57fe17444c49a22b903af5b4094e35f713b67ef4f9eabe4d0d67eae038b
SHA512

9058751e066b5850fc1ef41b1b7551e0a1194a9d291208adaeddbe281a3f006e646c38199ab405f9351e1b521e99e45b76a6c6a7ce1f567ea97aab58b114c72c
SSDEEP

12288:Q/r72NsJOvYTq+R2isDl7KdUUd6otzmZvYD:Pwq+R2lDl7mUVotMYD

Score

N/A

Malware Config

Signatures

Files

298df57fe17444c49a22b903af5b4094e35f713b67ef4f9eabe4d0d67eae038b
.exe windows x86

f380cce109ffd6cec37b9946c2a3c5d6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

_TrackMouseEvent
InitCommonControlsEx

winmm

PlaySoundW

msimg32

GradientFill

kernel32

WaitForSingleObject
Sleep
CreateThread
CreateEventW
SetEvent
GetCommandLineW
ReleaseMutex
CreateMutexW
LocalAlloc
lstrcpynW
GetACP
lstrcpyW
FreeResource
CreateFileW
SetFilePointer
LoadLibraryW
SetErrorMode
WriteFile
GetCurrentProcessId
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
GetLastError
InterlockedIncrement
InterlockedDecrement
GetProcAddress
GetModuleHandleW
lstrcmpiW
FreeLibrary
FlushInstructionCache
GetCurrentProcess
GetTickCount
CloseHandle
lstrlenA
LocalFree
GetCurrentThreadId
SetLastError
MultiByteToWideChar
LoadLibraryExW
GetModuleFileNameW
GlobalAlloc
GetTimeFormatW
GetDateFormatW
lstrcmpW
MulDiv
GlobalUnlock
GlobalLock
GlobalFree
GlobalHandle
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetStartupInfoW
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange

user32

SetWindowContextHelpId
SendDlgItemMessageW
CreateDialogIndirectParamW
RegisterWindowMessageW
GetWindowTextLengthW
GetWindowTextW
CreateAcceleratorTableW
DestroyAcceleratorTable
SetFocus
MapDialogRect
GetWindow
GetDesktopWindow
ReleaseCapture
GetClassNameW
GetDlgItem
GetParent
IsChild
SetCapture
InvalidateRgn
ClientToScreen
CharUpperW
LoadBitmapW
SystemParametersInfoW
GetDialogBaseUnits
LoadStringW
PeekMessageW
PostQuitMessage
MsgWaitForMultipleObjects
GetFocus
MoveWindow
GetSysColor
CallWindowProcW
TranslateMessage
DispatchMessageW
GetMessageW
OffsetRect
BeginPaint
EndPaint
SetCursor
GetSystemMetrics
FillRect
CreateWindowExW
PtInRect
RegisterClassExW
LoadMenuW
GetSubMenu
TrackPopupMenu
DestroyMenu
SetLayeredWindowAttributes
AnimateWindow
DefWindowProcW
DestroyWindow
GetCursorPos
PostThreadMessageW
DrawTextExW
LoadImageW
FrameRect
DrawIconEx
InflateRect
SetRect
CopyRect
LoadCursorW
GetClassInfoExW
CharNextW
IsWindow
SetWindowRgn
GetWindowRgn
MessageBoxW
KillTimer
SetTimer
RedrawWindow
ShowWindow
InvalidateRect
UpdateWindow
ReleaseDC
GetDC
ScreenToClient
GetClientRect
GetWindowRect
SetWindowPos
SetWindowTextW
SendMessageW
PostMessageW
GetWindowLongW
SetWindowLongW
UnregisterClassA

gdi32

GetClipBox
SelectClipRgn
RectVisible
FrameRgn
SetTextColor
Rectangle
CreatePen
CreateSolidBrush
MoveToEx
CreateRectRgn
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetStockObject
DeleteObject
GetTextMetricsW
CreateFontW
GetTextExtentPoint32W
GetObjectW
StretchBlt
SetBkMode
SetLayout
GetLayout
CreateRoundRectRgn
GetDeviceCaps
CreateFontIndirectW
LineTo
DPtoLP

advapi32

RegDeleteValueW
RegCloseKey
RegQueryValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW

ole32

CoResumeClassObjects
CoRegisterClassObject
CoRevokeClassObject
CoSuspendClassObjects
OleUninitialize
OleInitialize
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
OleLockRunning
StringFromGUID2
CoCreateInstance
CoInitializeEx
CoUninitialize
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CreateStreamOnHGlobal

oleaut32

CreateErrorInfo
SetErrorInfo
RegisterTypeLi
UnRegisterTypeLi
OleCreateFontIndirect
LoadTypeLi
LoadRegTypeLi
VariantCopy
VarUI4FromStr
SysStringByteLen
SysAllocStringByteLen
SysAllocString
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysStringLen
VarBstrCat

msvcp90

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ

msvcr90

?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
__set_app_type
__p__fmode
__p__commode
??3@YAXPAX@Z
wcsstr
ceil
floor
malloc
free
_CxxThrowException
wcsncpy_s
swprintf_s
__CxxFrameHandler3
_configthreadlocale
??0exception@std@@QAE@ABQBD@Z
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
memset
??0exception@std@@QAE@XZ
??_V@YAXPAX@Z
_invalid_parameter_noinfo
_adjust_fdiv
??2@YAPAXI@Z
_purecall
wcscpy_s
_recalloc
calloc
_endthreadex
_beginthreadex
_resetstkoflw
wcscat_s
_wcsicmp
_wgetcwd
_wchdir
_chdrive
toupper
_except_handler4_common
?terminate@@YAXXZ
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
__setusermatherr
??0exception@std@@QAE@ABV01@@Z
_initterm_e
memcpy_s
_itow_s

Sections

.text
Size: 153KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f380cce109ffd6cec37b9946c2a3c5d6

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

winmm

msimg32

kernel32

user32

gdi32

advapi32

ole32

oleaut32

msvcp90

msvcr90

Sections

.text Size: 153KB - Virtual size: 152KB

.rdata Size: 46KB - Virtual size: 46KB

.data Size: 11KB - Virtual size: 12KB

.rsrc Size: 428KB - Virtual size: 428KB

.text
Size: 153KB - Virtual size: 152KB

.rdata
Size: 46KB - Virtual size: 46KB

.data
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 428KB - Virtual size: 428KB