ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9

Sharing

Copy URL

Twitter E-mail

General

Target

ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9
Size

146KB
MD5

66fff0911f6e624ce2afba6874c6a0f4
SHA1

ccea49ace698c6486ad72a9010ce2ac8c8fdd7b7
SHA256

ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9
SHA512

f0d8847949f04c3740d9a285dc615bf50ead736ed4d2e4e4792e548c3cf771e5a3f27253f0385a7b96be26e7af9935d52a89a651c423ca4a7a2c589b1e8ab255
SSDEEP

3072:PRu/X9XMurgnqM4xf3yAqqTGSfeLrLInQeikcvwvQe0WFX9UeHSzzu:PRu/X9cSM4xaAzKSfecy5ovQeFqeHSzz

Score

N/A

Malware Config

Signatures

Files

ad16cd972d51921ed61f2885101576155a1a3193c50bb28519da97f45c25c1d9
.dll windows x86

5503e266d2d13c1ede74e99123f830c3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

wcscspn
_controlfp
strpbrk
__set_app_type
strerror
srand
fclose
__p__fmode
putc
putchar
free
__p__commode
_amsg_exit
strrchr
_initterm
_acmdln
isxdigit
exit
vsprintf
gets
wcscat
malloc
_ismbblead
wcscmp
ungetc
strchr
time
iswctype
_XcptFilter
bsearch
wcslen
_exit
iswdigit
clock
toupper
_cexit
isalpha
fseek
puts
iswspace
realloc
fwrite
setlocale
__setusermatherr
wcspbrk
strtol
tolower
__getmainargs

gdi32

SetBrushOrgEx
CreateFontIndirectW
SaveDC
AddFontResourceW
PolyBezier
SetTextColor
SetRectRgn
GetBitmapBits
CombineRgn
CreateCompatibleBitmap
RectInRegion
GetTextColor
CreateSolidBrush
GetWindowOrgEx
SetBkMode
GetTextExtentExPointW
ScaleWindowExtEx
GetTextExtentPoint32W
GetTextExtentPointW
BitBlt
PtInRegion
Polygon
CreatePolygonRgn
WidenPath
StretchDIBits
CreateDIBitmap
CreateDIBSection
SetViewportOrgEx
GetObjectA
FillRgn
GetViewportOrgEx
CreatePenIndirect
ExcludeClipRect
CreateFontIndirectA
SetDIBitsToDevice
ResizePalette
SetDIBColorTable
GetMapMode
EnumFontFamiliesExW
BeginPath
PtVisible
ExtFloodFill
CreateHalftonePalette
EndPath
StartDocW

comctl32

InitCommonControlsEx
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Write
PropertySheetW
ImageList_SetIconSize

kernel32

lstrlenA
GetOEMCP
WaitForSingleObject
SetNamedPipeHandleState
VirtualAlloc
SetThreadExecutionState
GetBinaryTypeA
GlobalFindAtomW
PulseEvent
EnumResourceNamesA
FindFirstFileA
lstrcpyA
GetFileAttributesW
LoadLibraryExA
GetCommModemStatus
CompareFileTime
GetShortPathNameA
LockFile
GetModuleHandleA
GetFileType
GetNumberFormatW
IsDBCSLeadByte
HeapValidate
GlobalMemoryStatus
GlobalLock
DeleteFileA
MoveFileW
SetSystemTime
LoadLibraryA
FormatMessageA
lstrcpyW
CreateMutexA
EnumResourceNamesW
IsValidLocale
WaitForMultipleObjects
GlobalReAlloc
SetCommMask
GetStdHandle
GetSystemInfo
GetProcAddress
SetHandleInformation
GlobalGetAtomNameA
CreateDirectoryA
GetCommState
FindResourceW
MultiByteToWideChar
GetThreadContext
GetLocaleInfoA
FileTimeToLocalFileTime
EnumSystemLocalesA
lstrcatW
LoadLibraryW
IsBadWritePtr

user32

DeleteMenu
CopyImage
AppendMenuA
CharToOemA
SetMenu
GetWindowPlacement
GetMenuItemRect
RegisterClassA
DefWindowProcA
LoadAcceleratorsW
SetMenuItemBitmaps
CallWindowProcW
DestroyWindow
GetDesktopWindow
GetKeyboardLayoutNameW
AppendMenuW
SetWindowPos
wsprintfA
GetClipCursor
LoadStringA
ChildWindowFromPointEx
ToUnicodeEx
RemovePropW
SendMessageA
InSendMessage
TranslateMessage
GetMenuStringW
GetMenuCheckMarkDimensions
MapVirtualKeyExW
IsZoomed
GetAsyncKeyState
PostMessageA
PtInRect
GetMenuItemID
GetScrollPos
DrawStateA
SetRect
CheckMenuItem
CheckDlgButton
GetKeyboardLayout
PostThreadMessageW
OpenDesktopW
RegisterClassW
CharNextExA
mouse_event
GetClassInfoExW
AdjustWindowRectEx
EnumChildWindows
CreateWindowExW
CharUpperA
GetClassLongW
InvalidateRgn
SendInput
CreateDialogParamW
GetUpdateRect
CreateCursor
GetDialogBaseUnits
GetWindowTextW
LookupIconIdFromDirectory
SetMenuDefaultItem
CreateDialogParamA
SetUserObjectInformationW
GetDlgItemTextA
TranslateAcceleratorW
InflateRect
ClientToScreen
GetShellWindow
IsDialogMessageW
GrayStringW
ShowScrollBar
PeekMessageA
LoadBitmapW
RemoveMenu
LoadCursorA
InvalidateRect
GetClassNameW
GetMenuState
SwitchToThisWindow
GetClassLongA
RegisterWindowMessageW
SystemParametersInfoA
GetParent
DestroyMenu
ShowOwnedPopups
GetDlgItem
ScreenToClient
DeferWindowPos
MapVirtualKeyA
FindWindowW
GetDlgItemInt
DispatchMessageA
DefDlgProcW
OemToCharA
DrawTextW
GetSubMenu
SetDlgItemTextA
SendMessageW
SetFocus
MoveWindow
SetSysColors
GetMessageExtraInfo
BeginDeferWindowPos
GetMessageTime
CheckRadioButton
GetSystemMetrics
GetActiveWindow
GetClassInfoExA
SetWindowRgn
SetWindowLongA
DrawTextA
OffsetRect

ole32

CoBuildVersion

Exports

Exports

?FillRectIODoiJUDKJD@@YGKPA_WK@Z
?FillRectJHDJKjhdJUD@@YGKPA_WK@Z
?FillRectJKDJJKdkjDI@@YGKPA_WK@Z
?FillRectUDuDKJHLJDLIUDU@@YGKPA_WK@Z

Sections

.text
Size: 111KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.strs
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.grab
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bts2
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts1
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bts0
Size: 512B - Virtual size: 384B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5503e266d2d13c1ede74e99123f830c3

Headers

File Characteristics

Imports

msvcrt

gdi32

comctl32

kernel32

user32

ole32

Exports

Exports

Sections

.text Size: 111KB - Virtual size: 110KB

.strs Size: 5KB - Virtual size: 8KB

.grab Size: 13KB - Virtual size: 12KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 3KB - Virtual size: 40KB

.bts2 Size: 512B - Virtual size: 320B

.bts1 Size: 512B - Virtual size: 320B

.bts0 Size: 512B - Virtual size: 384B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 111KB - Virtual size: 110KB

.strs
Size: 5KB - Virtual size: 8KB

.grab
Size: 13KB - Virtual size: 12KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 3KB - Virtual size: 40KB

.bts2
Size: 512B - Virtual size: 320B

.bts1
Size: 512B - Virtual size: 320B

.bts0
Size: 512B - Virtual size: 384B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB