438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3

Sharing

Copy URL Twitter E-mail

General

Target

438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3
Size

312KB
MD5

c3c496cff7aa277effd820d554a35776
SHA1

2e09446cc93057014965aa291a8445c1f961f4ec
SHA256

438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3
SHA512

721c36ef57eb6d20550a7809d8fd39f390716d51da844487a6f5e55a1868bc8011ed7856590d36f1c359ae95b6cf29606c4d529595a1c60db98d944d2a492117
SSDEEP

6144:TibFCKHTvXfBEWhJ8lyQQhE4MLvFnFns//5sgpm1Q3i:EFLmRAhE3LvXs//yZ1

Score

N/A

Malware Config

Signatures

Files

438013186a81d68f4942ad05e5657750ab20da00f46e06bae43f18bd24a07de3
.exe windows x86

a4389bedc0784d5df53c154466bbe61c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextW
GetKeyState
GetFocus
SetWindowRgn
SetWindowPos
EndPaint
SetWindowLongW
GetWindowTextW
GetDC
EndDialog
MapWindowPoints
UnregisterClassA
GetWindowTextLengthW
UnionRect
EqualRect
IsWindowEnabled
IsChild
BeginPaint
GetClientRect
GetWindowRect
CreateWindowExW
CallNextHookEx
SendMessageA
MessageBoxExW
ShowWindow
RegisterClassExW
InvalidateRect
GetWindowLongW
GetClassNameW
IntersectRect
CharNextW
GetMonitorInfoW
GetClassInfoExW
MapDialogRect
PostMessageW
OffsetRect
UnhookWindowsHookEx
SetCursor
DestroyWindow
EnableWindow
CharToOemBuffA
GetMenu
AdjustWindowRectEx
SetWindowContextHelpId
GetParent
IsWindow
GetWindow
SetWindowsHookExW
SendMessageW
SetFocus
LoadCursorW
MonitorFromWindow
ReleaseDC
DefWindowProcW
PtInRect
CallWindowProcW
SetTimer
wsprintfA
CreateAcceleratorTableW
RegisterWindowMessageA
GetCaretPos
GetMenuItemInfoW
DialogBoxParamA
SetMenu
GetIconInfo
MessageBoxW
SetActiveWindow
GetDlgItemInt
GetMenuState
WinHelpW
TrackPopupMenu
CreateAcceleratorTableA
SetWindowTextA
GetActiveWindow
AppendMenuW
MoveWindow
GetTopWindow
SetCursorPos
WinHelpA
GetMenuInfo
WaitMessage
GetCapture

advapi32

RegOpenKeyExA
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW

shlwapi

PathFileExistsW
PathCanonicalizeW
PathRemoveExtensionW
PathIsRelativeW
PathFindFileNameW
PathStripToRootW
PathIsURLW
PathStripPathW
PathIsRootW

gdi32

SetViewportOrgEx
CreateMetaFileW
SetWindowOrgEx
TextOutW
DeleteObject
SetWindowExtEx
SetMapMode
GetDeviceCaps
SetTextAlign
CreateFontIndirectW
SaveDC
DeleteDC
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
LPtoDP
GetTextColor

oleaut32

SysAllocString
SysFreeString
SysStringByteLen
SafeArrayCreate
VarBstrCmp
VariantInit
SafeArrayCopy
UnRegisterTypeLi
SafeArrayGetLBound
GetErrorInfo
VariantClear
SysAllocStringByteLen
SafeArrayGetUBound
DispCallFunc
VariantCopy
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayUnlock
VariantChangeType
SafeArrayLock
LoadTypeLi
SysStringLen
SafeArrayAccessData
OleCreatePropertyFrame
SysAllocStringLen
LoadRegTypeLi
SafeArrayGetElement
SafeArrayGetVartype
VarBstrCat
RegisterTypeLi

ole32

CoTaskMemFree
IIDFromString
CreateOleAdviseHolder
StringFromGUID2
CLSIDFromProgID
CoCreateGuid
StringFromCLSID
CreateStreamOnHGlobal
CoCreateInstance
ProgIDFromCLSID
CreateDataAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
CLSIDFromString
CoTaskMemAlloc
OleRegGetMiscStatus

kernel32

HeapDestroy
FreeLibrary
lstrlenA
RaiseException
IsDebuggerPresent
SetFileAttributesA
EnumResourceNamesW
WaitForSingleObject
CreateFileMappingW
GlobalLock
SwitchToThread
GlobalUnlock
TlsAlloc
WideCharToMultiByte
TlsSetValue
IsValidCodePage
SetThreadPriority
VirtualAlloc
SetFileAttributesW
CreateEventW
HeapAlloc
TlsFree
MulDiv
GetFullPathNameW
CreateFileA
HeapFree
HeapSize
SizeofResource
GetModuleHandleW
MapViewOfFile
FindResourceW
lstrlenW
CopyFileW
GlobalAlloc
LockResource
CreateFileW
CreateDirectoryW
UnmapViewOfFile
UnhandledExceptionFilter
ReadFile
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
VirtualFree
CreateThread
HeapReAlloc
FindResourceExW
LoadResource
GetProcessHeap
FlushInstructionCache
FindClose
InterlockedPushEntrySList
GetCurrentDirectoryW
DeleteCriticalSection
ExpandEnvironmentStringsW
GetFileSize
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcmpW
LocalAlloc
CloseHandle
EnterCriticalSection
GetShortPathNameW
GetComputerNameW
FindFirstFileW
OutputDebugStringW
InterlockedPopEntrySList
FindNextFileW
IsProcessorFeaturePresent
GetSystemDefaultLCID
LeaveCriticalSection
RemoveDirectoryW
CopyFileA
SetLastError
GetACP
TlsGetValue
GetModuleHandleA
VirtualAllocEx

qdvd

DllCanUnloadNow

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4389bedc0784d5df53c154466bbe61c

Headers

File Characteristics

Imports

user32

advapi32

shlwapi

gdi32

oleaut32

ole32

kernel32

qdvd

Sections

.text Size: 17KB - Virtual size: 17KB

.data Size: 264KB - Virtual size: 1.1MB

.rdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 24KB - Virtual size: 55KB

.text
Size: 17KB - Virtual size: 17KB

.data
Size: 264KB - Virtual size: 1.1MB

.rdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 24KB - Virtual size: 55KB