b6bd7c695343f46df984a8de9902b76bfc7742a6141444f457afd350c07bc3ca

Sharing

Copy URL Twitter E-mail

General

Target

b6bd7c695343f46df984a8de9902b76bfc7742a6141444f457afd350c07bc3ca
Size

71KB
MD5

374d77e01bf53d033f07c071f8c2d556
SHA1

34dea70e7a8d6307387609b288da82ef3b38b185
SHA256

b6bd7c695343f46df984a8de9902b76bfc7742a6141444f457afd350c07bc3ca
SHA512

65668dbdae11bba4cf37f08afa7c8091021a811448793cbe40e7fc50a7e392fec6f5c314634481825954e3eb1ff18cd7de91328ed3bdcccc2b59c5ab69ddcc42
SSDEEP

1536:c5kr8+IqhwW6DWeG6HLH1Sf0WSioNTCenjhUy/G4RuaGjfxYyCpeg:cWjIcwDw8HE03HVUypRolbCpeg

Score

N/A

Malware Config

Signatures

Files

b6bd7c695343f46df984a8de9902b76bfc7742a6141444f457afd350c07bc3ca
.exe windows x86

af734e2764b51005fc1bd7d5ad8f2089

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreate
DirectDrawCreateEx

shell32

Shell_NotifyIconW
FindExecutableW
CommandLineToArgvW
ShellExecuteW
SHGetFolderPathW
SHAppBarMessage
ShellExecuteExW

secur32

GetUserNameExW

kernel32

UnhandledExceptionFilter
Sleep
LoadLibraryExW
GetVersionExW
MulDiv
IsDebuggerPresent
FormatMessageW
FindResourceW
FreeLibrary
SetUnhandledExceptionFilter
CreateFileW
GetCurrentThreadId
InterlockedIncrement
CloseHandle
CreateEventW
GetModuleFileNameW
GetSystemTimeAsFileTime
InterlockedDecrement
LoadResource
LockResource
InterlockedExchange
EnterCriticalSection
GetSystemInfo
InitializeCriticalSection
GetStartupInfoW
GetThreadLocale
ReleaseMutex
LocalAlloc
LoadLibraryA
GlobalLock
GetSystemDirectoryW
GetACP
OpenProcess
IsProcessorFeaturePresent
LocalFree
RaiseException
VirtualLock
VirtualAlloc
SizeofResource
HeapSetInformation
GetProcAddress
HeapSize
CreateThread
WaitForMultipleObjects
lstrcmpW
GetLocaleInfoW
lstrlenW
GetComputerNameW
SetEvent
LCMapStringW
VirtualUnlock
FindResourceExW
GlobalAlloc
ResetEvent
FlushInstructionCache
MultiByteToWideChar
TerminateProcess
GlobalHandle
GetTickCount
HeapAlloc
ProcessIdToSessionId
WideCharToMultiByte
HeapDestroy
LoadLibraryW
GetCurrentProcess
LeaveCriticalSection
GetLastError
GlobalFree
lstrlenA
VirtualFree
HeapFree
WaitForSingleObject
SetLastError
HeapReAlloc
DeleteCriticalSection
GlobalUnlock
GetProcessId
GetVersionExA
QueryPerformanceCounter
InterlockedCompareExchange
GetLocaleInfoA
CreateMutexW
GetTempPathW
GetModuleHandleW

gdi32

DeleteDC
GetStockObject
GetDeviceCaps
CreateCompatibleDC
DeleteObject
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
SelectObject
GetObjectW

msvcrt

_wcmdln
_cexit
_initterm
?terminate@@YAXXZ
__set_app_type
fabs
memset
__p__commode
_exit
__setusermatherr
memcpy
exit
_controlfp
_wtoi64
__p__fmode
__wgetmainargs
_amsg_exit
iswdigit
_initterm
_XcptFilter

ole32

OleUninitialize
CoGetClassObject
CLSIDFromString
CreateStreamOnHGlobal
CoSetProxyBlanket
StringFromGUID2
OleInitialize
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CoInitializeSecurity
CoTaskMemAlloc
CoUninitialize
CoAllowSetForegroundWindow
OleLockRunning
CoInitializeEx
CLSIDFromProgID
CoCreateGuid

shlwapi

UrlApplySchemeW
PathCombineW
UrlCanonicalizeW
UrlCombineW
UrlGetPartW
PathAppendW

crypt32

CryptUnprotectData
CryptProtectData

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

wtsapi32

WTSQuerySessionInformationW
WTSEnumerateSessionsW
WTSUnRegisterSessionNotification
WTSFreeMemory
WTSRegisterSessionNotification

gdiplus

GdipAlloc
GdiplusShutdown
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipFree
GdipCloneImage
GdiplusStartup
GdipCreateBitmapFromFileICM

Sections

.text
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af734e2764b51005fc1bd7d5ad8f2089

Headers

File Characteristics

Imports

ddraw

shell32

secur32

kernel32

gdi32

msvcrt

ole32

shlwapi

crypt32

version

wtsapi32

gdiplus

Sections

.text Size: 40KB - Virtual size: 39KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 22KB - Virtual size: 22KB

.rsrc Size: 2KB - Virtual size: 2KB

.text
Size: 40KB - Virtual size: 39KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 22KB - Virtual size: 22KB

.rsrc
Size: 2KB - Virtual size: 2KB