f9b16b67fa638499fadc0309cbd3f7ec27c702b3adc26daf35043b6b8a25540b

Sharing

Copy URL Twitter E-mail

General

Target

f9b16b67fa638499fadc0309cbd3f7ec27c702b3adc26daf35043b6b8a25540b
Size

175KB
MD5

a056737618be0d9930d9421695d939db
SHA1

c3092ac6345049f9b6e506e22ad5cc31d195a745
SHA256

f9b16b67fa638499fadc0309cbd3f7ec27c702b3adc26daf35043b6b8a25540b
SHA512

3825bc5cb8a563db364604764e7563c9782185c3dfc7d2df8a56145e67253e123e9a6a63c9b7beed0477f7af87b5d25514fa63844714c8aa0088b5ee200cb689
SSDEEP

3072:ajeJvTHjs3ypJ7ib5tf5wExuijs1n4oCku7CgveTXs1E7/cjo:keJvTY3EiVEaXjs1n4oCkumgGAjo

Score

N/A

Malware Config

Signatures

Files

f9b16b67fa638499fadc0309cbd3f7ec27c702b3adc26daf35043b6b8a25540b
.exe windows x86

2e96bf47e33b05e5e509173a0211b4e4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
InvalidateRect
OffsetRect
GetWindowLongA
ScreenToClient
GetClassLongA
SetFocus
LoadCursorA
ShowWindow
SetWindowTextA
GetClientRect
DispatchMessageA
DestroyWindow
PeekMessageA
GetFocus
EndPaint
MessageBoxA
CreateWindowExA
wvsprintfA
SubtractRect
TranslateMessage
SetCursor
SetWindowLongA
BeginPaint
IsWindow
ReleaseCapture
DefWindowProcA
MoveWindow
LoadIconA
GetWindowRect
RegisterClassA
SendMessageA
GetMessageA
CallWindowProcA
UpdateWindow
GetKeyState
SetCapture

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

kernel32

QueryDosDeviceW
LocalAlloc
ProcessIdToSessionId
DisableThreadLibraryCalls
GetProcessId
Sleep
GetFileSize
ReadFile
CreateFileMappingA
SetFilePointer
CloseHandle
LocalFree
UnmapViewOfFile
EnumResourceTypesA
CreateFileA
WriteFile
ExitProcess
lstrlenA
MapViewOfFile
GlobalAlloc
GlobalSize
GlobalFree

msvfw32

ICDecompress
ICSendMessage
ICOpen
ICClose

comctl32

CreateToolbarEx

avifil32

AVIFileOpenA
AVIStreamRelease
AVIFileInit
AVISaveOptions
AVIStreamGetFrameOpen
AVIFileRelease
AVIStreamGetFrameClose
AVIStreamInfoA
AVIFileCreateStreamA
AVIStreamSetFormat
AVIStreamGetFrame
AVIStreamWrite
AVIFileGetStream
AVIMakeCompressedStream

gdi32

BitBlt
SetStretchBltMode
CreateRectRgn
FillRgn
GetCurrentObject
StretchDIBits
GetStockObject
SetDIBColorTable
SetDIBitsToDevice
CreateCompatibleDC
GetObjectA
CreateDIBSection
CombineRgn
DeleteDC
DeleteObject
SelectObject
StretchBlt

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 372KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2e96bf47e33b05e5e509173a0211b4e4

Headers

File Characteristics

Imports

user32

avicap32

kernel32

msvfw32

comctl32

avifil32

gdi32

Sections

.text Size: 102KB - Virtual size: 101KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 68KB - Virtual size: 67KB

.tls Size: 1024B - Virtual size: 372KB

.text
Size: 102KB - Virtual size: 101KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 68KB - Virtual size: 67KB

.tls
Size: 1024B - Virtual size: 372KB