158926499cf432bd84f13dabc397acce2e7603b71e88e3ed7a837a3eeeeac853

Sharing

Copy URL Twitter E-mail

General

Target

158926499cf432bd84f13dabc397acce2e7603b71e88e3ed7a837a3eeeeac853
Size

174KB
MD5

331d835aa0066b6120174fa72be2b730
SHA1

7906b6bb891c855fa995b588ea433f9454a8dff7
SHA256

158926499cf432bd84f13dabc397acce2e7603b71e88e3ed7a837a3eeeeac853
SHA512

7cfc77d0e650e6a3ea8eae0b9c5edea2725f0d83bcc0d9b5ef6f6e08d79b9a936d3e6d750cfa786124213c0e442dc221e3e85b1a7d52a40cbc81d1efa59bc5ec
SSDEEP

3072:uC9xDIgYMstlVxlvjvTYAfbh6B3A1IDINQTWF1PKGrs+m28+R:XIgKtlprL1TXAcFASsp

Score

N/A

Malware Config

Signatures

Files

158926499cf432bd84f13dabc397acce2e7603b71e88e3ed7a837a3eeeeac853
.dll windows x86

464eb2235972f816249ede204068b8db

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

strncmp
_vsnprintf
_ftol
_except_handler3
wcsncpy
_adjust_fdiv
malloc
_initterm
free
wcscpy
memmove
wcstoul

user32

DrawTextExW
DrawTextExA
RegisterWindowMessageA
UnregisterClassW
LoadIconA
LoadCursorA
GetClassInfoExW
RegisterClassExW
GetActiveWindow
GetCaretBlinkTime
BeginPaint
EndPaint
GetSysColor
CreateWindowExW
GetSystemMetrics
MapWindowPoints
SetWindowPos
DestroyWindow
GetCursorPos
MoveWindow
IsWindowVisible
ShowWindow
LoadImageA
DestroyIcon
PtInRect
ScreenToClient
InvalidateRect
SetWindowLongA
DefWindowProcA
KillTimer
SetTimer
GetWindowLongA
SystemParametersInfoA
GetDC
SetRect
ReleaseDC
GetClientRect
ClientToScreen
PostMessageW
PostMessageA
GetFocus
IsWindow
ToUnicode
GetKeyboardLayout
CreateWindowExA
ReleaseCapture
SetCapture
AdjustWindowRectEx
WindowFromPoint
RegisterClassExA
GetClassInfoExA
SetCursor
GetDoubleClickTime
DrawEdge
DrawIconEx
FillRect
GetIconInfo
OffsetRect
InflateRect
IntersectRect
GetSysColorBrush
DrawStateA
FrameRect
GetCursor
GetKeyState
keybd_event
SendMessageW
IsWindowUnicode
GetWindowRect
SendMessageA
GetKeyboardState

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExW
RegCreateKeyExA
RegSetValueExA
FreeSid
AllocateAndInitializeSid
CheckTokenMembership
RegQueryValueExA

kernel32

WideCharToMultiByte
IsDBCSLeadByteEx
GetLocaleInfoW
GetProcAddress
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsFree
GetVersionExA
GetACP
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
MultiByteToWideChar
SetUnhandledExceptionFilter
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
LoadLibraryExA
lstrcmpA
LocalFree
LocalAlloc
IsBadWritePtr
lstrlenA
lstrlenW
lstrcpynA
GetSystemDirectoryA
GetSystemWindowsDirectoryA
GetSystemDirectoryW
GetSystemWindowsDirectoryW
GetModuleHandleA
LoadLibraryA
GetModuleHandleW
LoadLibraryW
LocalReAlloc
GetLastError
InterlockedDecrement
InterlockedIncrement
TlsGetValue
TlsSetValue
GetModuleFileNameA
LoadResource
FindResourceA
GetSystemDefaultLangID
EnumResourceLanguagesA
GetWindowsDirectoryA
UnhandledExceptionFilter

gdi32

Polyline
BitBlt
CreateFontIndirectW
CreateFontIndirectA
SelectObject
GetTextMetricsA
DeleteObject
MoveToEx
ExtCreatePen
GetTextColor
SetTextColor
SetBkColor
PatBlt
DeleteDC
SetViewportOrgEx
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
SetBkMode
CreatePen
CreateFontA
CreateSolidBrush
CreateDCA
CreateDIBSection
CreateRectRgn
GetClipRgn
IntersectClipRect
ExtSelectClipRgn
GetViewportExtEx
GetWindowExtEx
GetTextExtentPointA
GetTextExtentPoint32W
GetTextAlign
SetTextAlign
ExtTextOutA
ExtTextOutW
GetObjectA
TranslateCharsetInfo
GetCurrentObject
GetObjectW
CreateBitmap
CreateBrushIndirect
LineTo
GetStockObject

imm32

ImmDestroyIMCC
ImmNotifyIME
ImmEnumInputContext
ImmGetContext
ImmGetDefaultIMEWnd
ImmSetConversionStatus
ImmGetAppCompatFlags
ImmSetCompositionStringW
ImmGetProperty
ImmCreateIMCC
ImmLockIMC
ImmUnlockIMC
ImmLockIMCC
ImmUnlockIMCC
ImmGetIMCCSize
ImmReSizeIMCC
ImmRequestMessageA
ImmSetOpenStatus
ImmGetCompositionFontA
ImmGetCompositionStringW
CtfImmGenerateMessage
CtfImmIsCiceroStartedInThread

Exports

Exports

CtfImeCreateInputContext
CtfImeCreateThreadMgr
CtfImeDestroyInputContext
CtfImeDestroyThreadMgr
CtfImeDispatchDefImeMessage
CtfImeEscapeEx
CtfImeGetGuidAtom
CtfImeInquireExW
CtfImeIsGuidMapEnable
CtfImeIsIME
CtfImeProcessCicHotkey
CtfImeSelectEx
CtfImeSetActiveContextAlways
CtfImeThreadDetach
ImeConfigure
ImeConversionList
ImeDestroy
ImeEnumRegisterWord
ImeEscape
ImeGetRegisterWordStyle
ImeInquire
ImeProcessKey
ImeRegisterWord
ImeSelect
ImeSetActiveContext
ImeSetCompositionString
ImeToAsciiEx
ImeUnregisterWord
NotifyIME
UIWndProc

Sections

.text
Size: 155KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.upx_
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

464eb2235972f816249ede204068b8db

Headers

File Characteristics

Imports

msvcrt

user32

advapi32

kernel32

gdi32

imm32

Exports

Exports

Sections

.text Size: 155KB - Virtual size: 156KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 5KB - Virtual size: 8KB

.reloc Size: 11KB - Virtual size: 12KB

.upx_ Size: 1KB - Virtual size: 4KB

.text
Size: 155KB - Virtual size: 156KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 5KB - Virtual size: 8KB

.reloc
Size: 11KB - Virtual size: 12KB

.upx_
Size: 1KB - Virtual size: 4KB