5af70af6f65f6b0882cbc39e6dfa836d86bd0b2bd3db28fbf4e9685eb6f3b5a4

Sharing

Copy URL

Twitter E-mail

General

Target

5af70af6f65f6b0882cbc39e6dfa836d86bd0b2bd3db28fbf4e9685eb6f3b5a4
Size

5.0MB
MD5

46502ed76ab42ce03bc49b3dedc60ffd
SHA1

4117d1b5ed50e171e727d0bc744a7b42911a2b2c
SHA256

5af70af6f65f6b0882cbc39e6dfa836d86bd0b2bd3db28fbf4e9685eb6f3b5a4
SHA512

4b381d61db14c1a222d7199aa2cc72c47aedb2f961e37d03f62dafcca9e757eed2e5c8ed29ab186010384db4c9b704fa0288fa4b5e5c8d575d4663d27a67fdf7
SSDEEP

49152:D0NJyKDeZ8UYcwKsh2NyxMNCFw3MSIoH2o94gqV9u03S/3PXChUJYFcYr0mYwwYx:uKBDC9M3AymYUa

Score

N/A

Malware Config

Signatures

Files

5af70af6f65f6b0882cbc39e6dfa836d86bd0b2bd3db28fbf4e9685eb6f3b5a4
.exe windows x86

d626259b51e207324f1706c683c39b80

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gear32pd

ord20110
ord7080
ord6030
ord1180
ord8050
ord25040
ord25020
ord25010
ord5260
ord5220
ord19010
ord19000
ord16500
ord16130
ord5150
ord4000
ord16000
ord16180
ord16450
ord16115
ord16050
ord16250
ord1310
ord3400
ord1050
ord3430
ord3460
ord3470
ord3380
ord2040
ord2020
ord5040
ord5030
ord5070
ord9010
ord7030
ord7010
ord14030
ord14010
ord14020
ord5010
ord6000
ord5230
ord20100
ord5110

winmm

waveOutUnprepareHeader
waveInOpen
waveInPrepareHeader
waveOutClose
waveOutPrepareHeader
waveOutWrite
waveInReset
waveInUnprepareHeader
waveInClose
waveInAddBuffer
waveInStart
waveOutReset
waveOutPause
waveOutRestart
waveOutOpen

rpcrt4

RpcStringFreeW
UuidToStringW
UuidCreate

gdiplus

GdipCreateFont
GdipDeletePen
GdipDrawRectangleI
GdipCreateFontFamilyFromName
GdipGetInterpolationMode
GdipCreateBitmapFromResource
GdipCreateImageAttributes
GdipSetImageAttributesColorKeys
GdipSetImageAttributesColorMatrix
GdipDrawImageRectRectI
GdipDisposeImageAttributes
GdipGetImageVerticalResolution
GdipCreateFromHDC
GdipGetGenericFontFamilySansSerif
GdipCreateBitmapFromFile
GdipCloneBrush
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipFillRectangleI
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDeleteGraphics
GdipDeleteBrush
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCloneImage
GdipDisposeImage
GdipFree
GdiplusStartup
GdipAlloc
GdipLoadImageFromFile
GdipGetImageWidth
GdipGetImageHeight
GdiplusShutdown
GdipSaveImageToFile
GdipCreatePen1
GdipDeleteFont
GdipDrawString
GdipDeleteFontFamily
GdipCreateBitmapFromFileICM
GdipLoadImageFromFileICM
GdipGetImageHorizontalResolution

shlwapi

SHGetValueW
AssocQueryStringW

psapi

GetModuleFileNameExW

kernel32

GetACP
GetModuleHandleA
SizeofResource
lstrcatW
LoadLibraryA
GlobalGetAtomNameW
GetCurrentThread
lstrcmpiA
lstrcmpA
lstrcmpW
DuplicateHandle
GetCurrentProcess
ReadFile
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
GetShortPathNameW
SetFileTime
GetDiskFreeSpaceW
LocalFileTimeToFileTime
SystemTimeToFileTime
CreateMutexW
ReleaseMutex
GlobalFlags
GetProcessVersion
TlsAlloc
TlsFree
TlsSetValue
LocalReAlloc
TlsGetValue
GetCurrentDirectoryW
SetErrorMode
GetStartupInfoW
ExitProcess
RtlUnwind
IsBadReadPtr
RaiseException
HeapFree
HeapAlloc
GetTimeZoneInformation
HeapReAlloc
CreateThread
ExitThread
TerminateProcess
SetStdHandle
GetFileType
HeapSize
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
GetDriveTypeA
CompareStringA
CompareStringW
GetOEMCP
SetEnvironmentVariableA
GlobalSize
FileTimeToLocalFileTime
ResetEvent
SetEvent
ResumeThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFindAtomW
GlobalDeleteAtom
SetLastError
GetVersion
GetWindowsDirectoryW
CreateDirectoryW
GetTempFileNameW
LoadLibraryExW
LocalLock
GetFileTime
FileTimeToSystemTime
GetSystemTime
GetFileSize
WriteFile
GetLocalTime
MoveFileW
CreateFileW
SetFilePointer
GlobalReAlloc
FindFirstFileW
FindNextFileW
FindClose
lstrcpyW
GetCurrentThreadId
lstrcpynW
WideCharToMultiByte
GlobalHandle
GetModuleHandleW
Sleep
OpenProcess
WaitForSingleObject
CloseHandle
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
GetTempPathW
InterlockedIncrement
LoadLibraryW
GetProcAddress
lstrlenA
MultiByteToWideChar
FreeLibrary
CreateProcessW
CopyFileW
GetFileAttributesExW
MoveFileExW
GetLastError
GetSystemDirectoryW
SetFileAttributesW
GetFileAttributesW
RemoveDirectoryW
FormatMessageW
LocalAlloc
LocalFree
DeleteFileW
InterlockedDecrement
MulDiv
GetModuleFileNameW
lstrlenW
WritePrivateProfileStringW
FindResourceA
GetPrivateProfileStringW
GetPrivateProfileIntW
GetTickCount
GetVersionExW
VerSetConditionMask
VerifyVersionInfoW
LoadResource
LockResource
FindResourceW
GlobalAddAtomA
GetProfileStringA
InterlockedExchange
GlobalAddAtomW

user32

PostQuitMessage
RegisterClassExW
GetClassInfoExW
GetWindowTextLengthW
SetWindowTextW
GetDlgItem
GetWindowPlacement
IsIconic
GetForegroundWindow
GetLastActivePopup
GetMessageTime
DestroyWindow
TrackPopupMenu
RegisterClassW
WinHelpW
GetTopWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
SetScrollInfo
GetScrollInfo
ScrollWindow
AdjustWindowRectEx
SetActiveWindow
PeekMessageW
SendDlgItemMessageA
SendDlgItemMessageW
SetDlgItemTextW
IsDialogMessageW
IsWindowEnabled
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CreateDialogIndirectParamW
EndDialog
DefFrameProcW
TranslateMDISysAccel
TranslateAcceleratorW
DefMDIChildProcW
LoadAcceleratorsW
ReuseDDElParam
UnpackDDElParam
ShowOwnedPopups
TranslateMessage
RegisterClipboardFormatW
SetWindowContextHelpId
CharUpperW
IsZoomed
wvsprintfW
CharNextW
FindWindowW
SetCursorPos
PostThreadMessageW
GetNextDlgGroupItem
GetDesktopWindow
InsertMenuW
GetMenuDefaultItem
DrawEdge
GetMenuInfo
CopyAcceleratorTableW
MapVirtualKeyW
GetKeyNameTextW
CopyImage
GetMenuItemRect
GetMenuItemInfoW
IsMenu
SetMenuInfo
GetWindowDC
CheckMenuItem
SetMenu
RemoveMenu
EnumDisplayMonitors
RegisterWindowMessageW
GetMenuItemCount
GetMenuItemID
GetMenuStringW
GetMenuState
GetTabbedTextExtentW
CreatePopupMenu
AppendMenuW
GetMessageW
DispatchMessageW
GetCursor
GetMessagePos
GrayStringW
TabbedTextOutW
GetClipCursor
ClipCursor
InvertRect
GetClassInfoW
DefWindowProcW
MessageBeep
DrawFrameControl
LoadIconW
IsWindowUnicode
SetTimer
ModifyMenuW
LoadStringW
GetDCEx
EndPaint
UnhookWindowsHookEx
CallNextHookEx
LoadCursorW
GetKeyState
EqualRect
UnionRect
GetDlgCtrlID
GetCapture
SetFocus
SetCapture
SetRectEmpty
GetUpdateRect
GetClassNameW
DrawIconEx
GetSysColorBrush
MonitorFromPoint
GetMonitorInfoW
SetWindowRgn
RedrawWindow
ScreenToClient
SetWindowLongW
GetComboBoxInfo
MoveWindow
ShowWindow
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
WindowFromDC
IntersectRect
FrameRect
LoadMenuW
LoadImageW
GetIconInfo
CreateIconIndirect
DrawStateW
DrawFocusRect
GetSubMenu
TrackPopupMenuEx
ClientToScreen
WindowFromPoint
GetActiveWindow
SetCursor
GetNextDlgTabItem
GetWindowLongW
DestroyIcon
DestroyCursor
GetParent
MapWindowPoints
GetSystemMetrics
DrawTextW
SetParent
ReleaseCapture
GetWindowThreadProcessId
GetAncestor
GetWindowTextW
EnumWindows
IsRectEmpty
LockWindowUpdate
InflateRect
SetWindowPlacement
IsWindowVisible
LoadBitmapW
BringWindowToTop
CopyRect
PtInRect
SystemParametersInfoW
MessageBoxW
SetWindowPos
SetForegroundWindow
PostMessageW
InvalidateRect
UnregisterClassW
GetWindowTextLengthA
HideCaret
ShowCaret
ExcludeUpdateRgn
GetWindowTextA
DrawTextA
GetClassInfoA
DefDlgProcA
DefWindowProcA
CharNextA
CallWindowProcA
RemovePropA
SetWindowsHookExA
GetWindowLongA
SendMessageA
GetClientRect
FillRect
UpdateWindow
wsprintfW
GetFocus
IsChild
MenuItemFromPoint
GetCursorPos
KillTimer
GetMenu
DestroyMenu
GetSystemMenu
GetWindowRect
GetSysColor
GetDC
GetWindow
GetClassLongW
EnableMenuItem
IsClipboardFormatAvailable
GetDoubleClickTime
ShowScrollBar
ReleaseDC
SetRect
OffsetRect
IsWindow
SendMessageW
EnableWindow
DrawMenuBar
SetPropW
CreateWindowExW
ValidateRect
MapDialogRect
BeginPaint
GetClassNameA
SetWindowLongA
SetPropA
GetPropA
CallWindowProcW
GetPropW
SetLayeredWindowAttributes
RemovePropW
SetWindowsHookExW
DeleteMenu
DrawTextExW

gdi32

LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetBkMode
SelectPalette
RestoreDC
SaveDC
StartDocW
GetCharWidthW
GetMapMode
StretchBlt
GetBkColor
GetDIBColorTable
CreateHalftonePalette
UnrealizeObject
SetBrushOrgEx
CreatePen
Rectangle
RoundRect
GetNearestColor
SetWindowOrgEx
GetTextAlign
GetViewportExtEx
GetWindowExtEx
AbortDoc
EndDoc
EndPage
StartPage
DPtoLP
SetAbortProc
SetRectRgn
LPtoDP
GetLayout
SetTextAlign
MoveToEx
GetTextExtentPointW
GetCurrentPositionEx
GetTextColor
Escape
ExtTextOutW
RectVisible
GetTextMetricsW
CreateFontW
GetTextExtentPointA
ExtTextOutA
DeleteObject
SetPixel
GetPixel
DeleteDC
StretchDIBits
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
GetObjectW
GetTextExtentExPointW
GetDeviceCaps
CreateSolidBrush
CreateFontIndirectW
CreatePatternBrush
CreateBitmap
TextOutW
PatBlt
GetStockObject
BitBlt
SetTextColor
SetBkColor
GetDIBits
CreatePalette
CreateDCW
CreateDIBitmap
RealizePalette
CreateRectRgnIndirect
CreateRoundRectRgn
GetCurrentObject
Polyline
SelectClipRgn
SelectClipPath
EndPath
BeginPath
EnumFontFamiliesW
CombineRgn
CreateRectRgn
CreatePolygonRgn
PtVisible
GetTextExtentPoint32W

comdlg32

GetOpenFileNameW
GetSaveFileNameW
GetFileTitleW
CommDlgExtendedError
ChooseColorW
ChooseFontW
PrintDlgW

winspool.drv

GetPrinterW
OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

SetFileSecurityW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegCreateKeyW
RegSetValueW
GetFileSecurityW
RegCloseKey
RegEnumKeyW
RegOpenKeyW
RegQueryValueW
RegDeleteKeyW

shell32

DragQueryFileW
SHGetFileInfoW
ShellExecuteExW
SHGetFolderPathW
ExtractIconW
ShellExecuteW
DragFinish

comctl32

ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_Draw
_TrackMouseEvent
ImageList_GetIconSize
ImageList_AddMasked
ImageList_DrawIndirect
ImageList_LoadImageW
ImageList_Create
ImageList_Destroy
ord17
InitCommonControlsEx
ImageList_Replace
ImageList_SetBkColor
ImageList_ReplaceIcon
ImageList_Add
ImageList_GetIcon

oledlg

OleUIBusyW

ole32

CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleIsCurrentClipboard
OleFlushClipboard
CoGetClassObject
CoRegisterMessageFilter
CoDisconnectObject
StringFromCLSID
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoRevokeClassObject
CoRegisterClassObject
CoCreateFreeThreadedMarshaler
GetHGlobalFromStream
OleRun
CLSIDFromString
CLSIDFromProgID
CoCreateInstance

olepro32

ord253

oleaut32

VariantCopy
GetActiveObject
RegisterActiveObject
RevokeActiveObject
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetVartype
SafeArrayCreateVector
SafeArrayDestroy
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
VariantInit
VariantTimeToSystemTime
LoadTypeLi
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SysAllocString
VariantClear
GetErrorInfo
SysStringLen

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

msimg32

TransparentBlt
GradientFill
AlphaBlend

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 456KB - Virtual size: 455KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 460KB - Virtual size: 482KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 660KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d626259b51e207324f1706c683c39b80

Headers

File Characteristics

Imports

gear32pd

winmm

rpcrt4

gdiplus

shlwapi

psapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

version

msimg32

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 456KB - Virtual size: 455KB

.data Size: 460KB - Virtual size: 482KB

.rsrc Size: 660KB - Virtual size: 656KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 456KB - Virtual size: 455KB

.data
Size: 460KB - Virtual size: 482KB

.rsrc
Size: 660KB - Virtual size: 656KB