ad135927d8f03910f01a79e0b814d2b770fc497cabd690a1b5d83fc9540978a6

Sharing

Copy URL Twitter E-mail

General

Target

ad135927d8f03910f01a79e0b814d2b770fc497cabd690a1b5d83fc9540978a6
Size

292KB
MD5

ae4615fa7ced375caaefdf70fbb969d9
SHA1

8a3b2337b9b72dcc5260b68216b8679e6f9b52c0
SHA256

ad135927d8f03910f01a79e0b814d2b770fc497cabd690a1b5d83fc9540978a6
SHA512

e25659008c5cbc12ea4c71ab57219cce2f05a8fdb78e3df8c1f9295d5f67b59d9548cd40f05207a97082a2f65d95e4ab6fdd519ba288723857e17b5307c6f204
SSDEEP

6144:jeO5sNZDQXFL7yAm6qFn8aFTlTnqbZKm3EosHkdn8wCCWGQnFA9E+z:iYsNGXFvyAO580lDKk0vWGk+

Score

N/A

Malware Config

Signatures

Files

ad135927d8f03910f01a79e0b814d2b770fc497cabd690a1b5d83fc9540978a6
.exe windows x86

b117bb165365a5d1f0d8afe1801f19aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

mmioDescend
PlaySoundA
mmioRead

gdi32

GetBkMode
CreateBitmapIndirect
SetTextAlign
EndPath
GetViewportExtEx
CreatePolyPolygonRgn
EnumObjects
EqualRgn
GetClipBox
ExtTextOutA
SelectClipPath
PaintRgn
SetPixel
GetViewportOrgEx
CombineRgn
CreateEllipticRgn
GetTextCharacterExtra
BitBlt
SetRectRgn
SetBitmapDimensionEx
FrameRgn
StrokePath
GetClipRgn
Arc
GetTextFaceA
ScaleViewportExtEx
SetMapMode
GetWindowExtEx
SetPolyFillMode
GetGlyphOutlineA
EndDoc
GetPath
GetPolyFillMode
CreatePenIndirect
GetStretchBltMode
FlattenPath
CreateSolidBrush
DeleteMetaFile
GetBitmapBits
GetTextColor
ExcludeClipRect
CreateRoundRectRgn
ExtFloodFill
GetBoundsRect
SetPixelV
GetCurrentPositionEx
StretchBlt
RectVisible
OffsetRgn
GetTextAlign
SetBkColor
CreatePatternBrush
SetBrushOrgEx
ScaleWindowExtEx
CreatePalette
LineTo
GetROP2
SetPaletteEntries
GetCharABCWidthsFloatA
GetBitmapDimensionEx
ExtEscape
GetAspectRatioFilterEx
Escape
SetArcDirection
AngleArc
GetObjectA
CreateRectRgn
GetCharWidthFloatA
AbortPath
SelectObject
GetStockObject
ExtSelectClipRgn
GetTextExtentPoint32A
SetTextCharacterExtra
UnrealizeObject
FillPath
GetMiterLimit
CreateCompatibleDC
PathToRegion
GetDCOrgEx
GetCharWidthA
CloseMetaFile
GetNearestPaletteIndex
StretchDIBits
DrawEscape
Rectangle
GetCharABCWidthsA
CreateBitmap
CreateFontA
StartPage
GetDeviceCaps
Ellipse
GetNearestColor
OffsetViewportOrgEx
GetFontData
StartDocA
CreateHalftonePalette
PolyPolygon
AnimatePalette
GetBkColor
Polygon
GetObjectType
PolyBezierTo
ExtCreateRegion
CreateDIBitmap
GdiComment
GetKerningPairsA
PolylineTo
EndPage
CreatePolygonRgn
DPtoLP
GetTextExtentPointA
CreateFontIndirectA
PlgBlt
SetTextJustification
IntersectClipRect
SetROP2
RoundRect
CreateDiscardableBitmap
SetAbortProc
SetMiterLimit
FillRgn
PlayMetaFile
PtInRegion
GetArcDirection
AbortDoc
SetBkMode
GetBrushOrgEx
GetColorAdjustment
CreateDCA
CreateMetaFileA
GetRgnBox
BeginPath
WidenPath
MoveToEx
SetViewportOrgEx
SelectClipRgn
DeleteDC
SelectPalette
PolyBezier

advapi32

GetUserNameA
IsValidSid
RegQueryValueExA
OpenThreadToken
OpenProcessToken
RegSetValueExA
RegDeleteValueA
RegCreateKeyA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
OpenSCManagerA
RegCreateKeyExA
CopySid
DeregisterEventSource
DeleteService
RegQueryInfoKeyA
RegOpenKeyExA
CloseServiceHandle
RegEnumKeyExA
RegisterEventSourceA
OpenServiceA
GetTokenInformation
RegCloseKey
InitializeSecurityDescriptor
GetLengthSid
ReportEventA
ControlService
RegOpenKeyA
SetServiceStatus
RegDeleteKeyA
CreateServiceA

ole32

CreateGenericComposite
CoRevokeClassObject
OleDestroyMenuDescriptor
CreateDataAdviseHolder
CoCreateInstance
OleTranslateAccelerator
CoTaskMemAlloc
CoDisconnectObject
StgOpenStorageOnILockBytes
StgIsStorageFile
IsAccelerator
ReleaseStgMedium
OleInitialize
OleCreateMenuDescriptor
OleIsCurrentClipboard
OleCreateFromData
GetRunningObjectTable
CLSIDFromString
CreateFileMoniker
OleFlushClipboard
CoTaskMemFree
OleCreateStaticFromData
OleRegGetUserType

comctl32

_TrackMouseEvent
ImageList_LoadImageA
ImageList_GetImageInfo
ImageList_Create
ImageList_GetIconSize
ImageList_AddMasked
ImageList_BeginDrag
ord17
ImageList_GetIcon
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Draw
ImageList_DragMove
InitCommonControlsEx
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_DrawEx

winspool.drv

OpenPrinterA
ord204
DocumentPropertiesA

user32

RegisterClassW
LoadIconW
IsIconic
wsprintfW
RegisterClassExW
LoadStringW
KillTimer
LockWindowUpdate
MoveWindow
DefWindowProcW
GetSysColorBrush
PeekMessageW
CreateWindowExW
ScreenToClient
LoadBitmapW
MessageBoxW
DestroyWindow
ShowWindow
InvalidateRect
GetMessageTime
GetSysColor
FindWindowW
GetClassInfoExW

kernel32

VirtualFree
TlsAlloc
LCMapStringW
ExitProcess
SetEnvironmentVariableA
UnhandledExceptionFilter
IsValidCodePage
GetCommandLineW
GetModuleFileNameA
GetTimeZoneInformation
GetModuleFileNameW
SetFilePointer
SetHandleCount
GetOEMCP
HeapFree
ReadFile
GetStartupInfoW
HeapCreate
RaiseException
GetEnvironmentStringsW
GetStringTypeW
HeapSize
GetModuleHandleW
TlsFree
CompareStringW
TerminateProcess
GetProcAddress
GetConsoleCP
QueryPerformanceCounter
MultiByteToWideChar
HeapReAlloc
WideCharToMultiByte
LoadLibraryW
EnterCriticalSection
LCMapStringA
InterlockedExchange
TlsGetValue
GetTickCount
WaitForSingleObject
InterlockedIncrement
GetACP
CompareStringA
InitializeCriticalSectionAndSpinCount
FlushFileBuffers
DeleteCriticalSection
CreateMutexW
LocalFree
VirtualAlloc
LeaveCriticalSection
HeapAlloc
SetUnhandledExceptionFilter
RtlUnwind
GetDateFormatA
TlsSetValue
InterlockedDecrement
FreeEnvironmentStringsW
SetStdHandle
GetStdHandle
LoadLibraryA
CloseHandle
VirtualQuery
WriteConsoleA
GetStartupInfoA
GetCPInfo
WriteConsoleW
CreateFileA
GetTimeFormatA
GetCurrentProcess
SetLastError
GetStringTypeA
WriteFile
IsDebuggerPresent
GetConsoleMode
GetConsoleOutputCP
GetCurrentProcessId
GetCurrentThreadId
GetModuleHandleA
GetFileType
GetSystemTimeAsFileTime
Sleep
GetLocaleInfoA
GetLastError

Sections

.text
Size: 104KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b117bb165365a5d1f0d8afe1801f19aa

Headers

File Characteristics

Imports

winmm

gdi32

advapi32

ole32

comctl32

winspool.drv

user32

kernel32

Sections

.text Size: 104KB - Virtual size: 100KB

.rdata Size: 88KB - Virtual size: 86KB

.data Size: 64KB - Virtual size: 68KB

.rsrc Size: 32KB - Virtual size: 30KB

.text
Size: 104KB - Virtual size: 100KB

.rdata
Size: 88KB - Virtual size: 86KB

.data
Size: 64KB - Virtual size: 68KB

.rsrc
Size: 32KB - Virtual size: 30KB