31a3e1234d4353ed9b4362a47541b8cc2b7c874725978d64e569276b5a805087

Sharing

Copy URL Twitter E-mail

General

Target

31a3e1234d4353ed9b4362a47541b8cc2b7c874725978d64e569276b5a805087
Size

296KB
MD5

940fced46780b676cee1064b6ba65710
SHA1

f220c042fd0df06163440b8fd50c8061dc0957d5
SHA256

31a3e1234d4353ed9b4362a47541b8cc2b7c874725978d64e569276b5a805087
SHA512

aa8d01cf5d58b81261760e24fd71e42b2b1cb4e97e9a985da3910561c7f342fd7df71163098a0d536361702683500bd132929ab58884f866f04c546cd1e3e2ab
SSDEEP

6144:wWbFCKHTvXfBEWhJ8lyQQhE4MLvFnFns//5sgpm1Q3i:rFLmRAhE3LvXs//yZ1

Score

N/A

Malware Config

Signatures

Files

31a3e1234d4353ed9b4362a47541b8cc2b7c874725978d64e569276b5a805087
.exe windows x86

a4389bedc0784d5df53c154466bbe61c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetWindowTextW
GetKeyState
GetFocus
SetWindowRgn
SetWindowPos
EndPaint
SetWindowLongW
GetWindowTextW
GetDC
EndDialog
MapWindowPoints
UnregisterClassA
GetWindowTextLengthW
UnionRect
EqualRect
IsWindowEnabled
IsChild
BeginPaint
GetClientRect
GetWindowRect
CreateWindowExW
CallNextHookEx
SendMessageA
MessageBoxExW
ShowWindow
RegisterClassExW
InvalidateRect
GetWindowLongW
GetClassNameW
IntersectRect
CharNextW
GetMonitorInfoW
GetClassInfoExW
MapDialogRect
PostMessageW
OffsetRect
UnhookWindowsHookEx
SetCursor
DestroyWindow
EnableWindow
CharToOemBuffA
GetMenu
AdjustWindowRectEx
SetWindowContextHelpId
GetParent
IsWindow
GetWindow
SetWindowsHookExW
SendMessageW
SetFocus
LoadCursorW
MonitorFromWindow
ReleaseDC
DefWindowProcW
PtInRect
CallWindowProcW
SetTimer
wsprintfA
CreateAcceleratorTableW
RegisterWindowMessageA
GetCaretPos
GetMenuItemInfoW
DialogBoxParamA
SetMenu
GetIconInfo
MessageBoxW
SetActiveWindow
GetDlgItemInt
GetMenuState
WinHelpW
TrackPopupMenu
CreateAcceleratorTableA
SetWindowTextA
GetActiveWindow
AppendMenuW
MoveWindow
GetTopWindow
SetCursorPos
WinHelpA
GetMenuInfo
WaitMessage
GetCapture

advapi32

RegOpenKeyExA
RegSetValueExW
RegEnumKeyExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW

shlwapi

PathFileExistsW
PathCanonicalizeW
PathRemoveExtensionW
PathIsRelativeW
PathFindFileNameW
PathStripToRootW
PathIsURLW
PathStripPathW
PathIsRootW

gdi32

SetViewportOrgEx
CreateMetaFileW
SetWindowOrgEx
TextOutW
DeleteObject
SetWindowExtEx
SetMapMode
GetDeviceCaps
SetTextAlign
CreateFontIndirectW
SaveDC
DeleteDC
CreateRectRgnIndirect
DeleteMetaFile
CloseMetaFile
RestoreDC
LPtoDP
GetTextColor

oleaut32

SysAllocString
SysFreeString
SysStringByteLen
SafeArrayCreate
VarBstrCmp
VariantInit
SafeArrayCopy
UnRegisterTypeLi
SafeArrayGetLBound
GetErrorInfo
VariantClear
SysAllocStringByteLen
SafeArrayGetUBound
DispCallFunc
VariantCopy
SafeArrayDestroy
SafeArrayUnaccessData
SafeArrayUnlock
VariantChangeType
SafeArrayLock
LoadTypeLi
SysStringLen
SafeArrayAccessData
OleCreatePropertyFrame
SysAllocStringLen
LoadRegTypeLi
SafeArrayGetElement
SafeArrayGetVartype
VarBstrCat
RegisterTypeLi

ole32

CoTaskMemFree
IIDFromString
CreateOleAdviseHolder
StringFromGUID2
CLSIDFromProgID
CoCreateGuid
StringFromCLSID
CreateStreamOnHGlobal
CoCreateInstance
ProgIDFromCLSID
CreateDataAdviseHolder
OleRegEnumVerbs
OleRegGetUserType
CLSIDFromString
CoTaskMemAlloc
OleRegGetMiscStatus

kernel32

HeapDestroy
FreeLibrary
lstrlenA
RaiseException
IsDebuggerPresent
SetFileAttributesA
EnumResourceNamesW
WaitForSingleObject
CreateFileMappingW
GlobalLock
SwitchToThread
GlobalUnlock
TlsAlloc
WideCharToMultiByte
TlsSetValue
IsValidCodePage
SetThreadPriority
VirtualAlloc
SetFileAttributesW
CreateEventW
HeapAlloc
TlsFree
MulDiv
GetFullPathNameW
CreateFileA
HeapFree
HeapSize
SizeofResource
GetModuleHandleW
MapViewOfFile
FindResourceW
lstrlenW
CopyFileW
GlobalAlloc
LockResource
CreateFileW
CreateDirectoryW
UnmapViewOfFile
UnhandledExceptionFilter
ReadFile
InitializeCriticalSectionAndSpinCount
GetCurrentThreadId
VirtualFree
CreateThread
HeapReAlloc
FindResourceExW
LoadResource
GetProcessHeap
FlushInstructionCache
FindClose
InterlockedPushEntrySList
GetCurrentDirectoryW
DeleteCriticalSection
ExpandEnvironmentStringsW
GetFileSize
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
lstrcmpW
LocalAlloc
CloseHandle
EnterCriticalSection
GetShortPathNameW
GetComputerNameW
FindFirstFileW
OutputDebugStringW
InterlockedPopEntrySList
FindNextFileW
IsProcessorFeaturePresent
GetSystemDefaultLCID
LeaveCriticalSection
RemoveDirectoryW
CopyFileA
SetLastError
GetACP
TlsGetValue
GetModuleHandleA
VirtualAllocEx

qdvd

DllCanUnloadNow

Sections

.text
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 264KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a4389bedc0784d5df53c154466bbe61c

Headers

File Characteristics

Imports

user32

advapi32

shlwapi

gdi32

oleaut32

ole32

kernel32

qdvd

Sections

.text Size: 17KB - Virtual size: 17KB

.data Size: 264KB - Virtual size: 1.1MB

.rdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 24KB - Virtual size: 55KB

.text
Size: 17KB - Virtual size: 17KB

.data
Size: 264KB - Virtual size: 1.1MB

.rdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 24KB - Virtual size: 55KB