971fb97f7574a51456b31a55ac1a84a3de35aaeebd2ea4d15c29b8f671b99997

Sharing

Copy URL Twitter E-mail

General

Target

971fb97f7574a51456b31a55ac1a84a3de35aaeebd2ea4d15c29b8f671b99997
Size

5.3MB
MD5

de0bccdfbf2b5a1157c1ebc1ca8dd62d
SHA1

4349af2e700b07cf99fcd96cbb0d1708f08632d0
SHA256

971fb97f7574a51456b31a55ac1a84a3de35aaeebd2ea4d15c29b8f671b99997
SHA512

254b6dd165d47a943219e2e39031da57f5f62d2872bf378c9f315d9a6e4e8b11ba3859ab730d9a84dc57290f9d75f9e93b9bdbf6dc35b0b850cef31126e712dc
SSDEEP

98304:hxn3AKkn5AWrVYY1PaVfFmbr/vmoJc8UW00Mf95tptvolu+oWO8yXSx8rUuS4iha:hxn3AKkn5AWrVYY1PaVfFmbr/vtJvbML

Score

N/A

Malware Config

Signatures

Files

971fb97f7574a51456b31a55ac1a84a3de35aaeebd2ea4d15c29b8f671b99997
.exe windows x86

db4f115cfa6aa2ca1a6ff94e9d55cea1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetDefaultIMEWnd
ImmGetCompositionStringA
ImmGetCompositionWindow
ImmSetCompositionWindow
ImmGetIMEFileNameA
ImmGetOpenStatus
ImmSetOpenStatus
ImmGetConversionStatus
ImmSetConversionStatus
ImmReleaseContext
ImmGetDescriptionA
ImmGetContext

dsound

ord2
ord1

opengl32

glFogi
glColor3ub
glGetIntegerv
glTexEnvi
glClearColor
wglCreateContext
glGetString
wglMakeCurrent
wglDeleteContext
glFogf
glFogfv
glViewport
glBlendFunc
glReadPixels
glGetFloatv
glScalef
glStencilOp
glColorMask
glColor4f
glEnable
glDisable
glEnd
glVertex2f
glTexCoord2f
glColor4ub
glBegin
glColor3f
glTexImage2D
glBindTexture
glFlush
glClear
glPopMatrix
glAlphaFunc
glDepthFunc
glTranslatef
glRotatef
glLoadIdentity
glPushMatrix
glMatrixMode
glVertex3f
glNormal3f
glVertex3fv
glColor3fv
glDeleteTextures
glTexParameteri
glGenTextures
glTexEnvf
glDepthMask
glStencilFunc
glFrontFace
glPolygonMode

glu32

gluPerspective
gluOrtho2D

winmm

mmioDescend
timeSetEvent
timeKillEvent
timeEndPeriod
timeGetDevCaps
timeBeginPeriod
mmioWrite
mmioRead
mmioAscend
timeGetTime
mmioOpenA
mmioClose

kernel32

HeapDestroy
GetEnvironmentVariableA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
GetACP
HeapCreate
IsBadWritePtr
IsValidLocale
GetCPInfo
FatalAppExitA
HeapSize
HeapReAlloc
TlsFree
TlsAlloc
ExitThread
TlsGetValue
TlsSetValue
GetVersion
GetStartupInfoA
GetTickCount
IsBadReadPtr
lstrlenA
GlobalUnlock
GlobalLock
OutputDebugStringA
GetCurrentThreadId
Sleep
Process32Next
Process32First
CreateToolhelp32Snapshot
GetLastError
MoveFileA
GetFileAttributesA
CreateFileA
GetCommandLineA
CloseHandle
ReadFile
GetFileSize
GetPrivateProfileStringA
GetCurrentDirectoryA
DeleteFileA
CopyFileA
SetFileAttributesA
TerminateProcess
OpenProcess
WinExec
FindClose
FindFirstFileA
GetLocalTime
GetModuleFileNameA
SetFilePointer
WriteFile
IsValidCodePage
lstrcmpiA
GetVersionExA
QueryPerformanceCounter
SetProcessAffinityMask
SetThreadPriority
SetPriorityClass
GetProcessAffinityMask
GetThreadPriority
GetPriorityClass
GetCurrentThread
GetCurrentProcess
QueryPerformanceFrequency
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalMemoryStatus
ExitProcess
SetConsoleMode
GetStdHandle
AllocConsole
FreeConsole
SetConsoleTitleA
GetConsoleTitleA
SetLastError
SetConsoleCursorPosition
FillConsoleOutputAttribute
FillConsoleOutputCharacterA
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
ReadConsoleOutputA
GetCurrentProcessId
GetSystemTime
GetTimeZoneInformation
RaiseException
InterlockedIncrement
InterlockedDecrement
RtlUnwind
GetThreadContext
lstrcpynA
Module32First
Module32Next
lstrcpyA
PeekNamedPipe
CreatePipe
SetStdHandle
DuplicateHandle
GetFileInformationByHandle
HeapAlloc
FindNextFileA
GetProcessHeap
HeapFree
GetTempPathA
GetTempFileNameA
LoadLibraryExA
VirtualFree
VirtualAlloc
VirtualQuery
OpenFileMappingA
MapViewOfFile
UnmapViewOfFile
VirtualProtect
GetModuleFileNameW
lstrcmpA
GetComputerNameA
ReleaseMutex
TerminateThread
CreateThread
EnterCriticalSection
LeaveCriticalSection
CreateDirectoryA
lstrcatA
MoveFileExA
OpenMutexA
OpenEventA
WaitForSingleObject
CreateEventA
CreateProcessA
WaitForMultipleObjects
GetExitCodeProcess
ResetEvent
ResumeThread
CreateMutexA
GetModuleHandleA
SetEndOfFile
DeleteCriticalSection
WideCharToMultiByte
SetUnhandledExceptionFilter
InitializeCriticalSection
SetEvent
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetSystemTimeAsFileTime
GetEnvironmentStrings
GetEnvironmentStringsW
FlushFileBuffers
IsBadCodePtr
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetConsoleCtrlHandler
GetLocaleInfoW
CreateFileMappingA
RemoveDirectoryA
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetSystemDirectoryA

user32

IsIconic
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
UpdateWindow
KillTimer
GetKeyboardLayoutNameA
AdjustWindowRect
GetSystemMetrics
SetForegroundWindow
LoadIconA
LoadCursorA
RegisterClassA
BeginPaint
EndPaint
PostQuitMessage
DefWindowProcA
SetCapture
ReleaseCapture
SystemParametersInfoA
ReleaseDC
ChangeDisplaySettingsA
ShowCursor
FindWindowA
SetCursorPos
UnregisterHotKey
RegisterHotKey
GetWindowRect
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetDesktopWindow
IntersectRect
wsprintfA
SetTimer
SetScrollPos
GetScrollPos
IsWindowVisible
GetFocus
SetFocus
CreateWindowExA
ShowWindow
GetDC
SetWindowPos
SetWindowTextA
GetWindowTextA
GetCaretPos
GetWindowLongA
GetAsyncKeyState
SendMessageA
CallWindowProcA
OpenClipboard
GetClipboardData
CloseClipboard
SetWindowLongA
DestroyWindow
SetRect
GetActiveWindow
GetCursorPos
ScreenToClient
GetDoubleClickTime
PtInRect
OffsetRect
MessageBoxA
PostMessageA
GetKeyboardLayout
wvsprintfA
EnumChildWindows
RemoveMenu
DrawMenuBar
GetSystemMenu
GetClassNameA
GetWindowThreadProcessId
EnumDisplaySettingsA

gdi32

SelectObject
CreateCompatibleDC
GetTextExtentPointA
DeleteObject
GetTextExtentPoint32A
SwapBuffers
GetStockObject
SetPixelFormat
ChoosePixelFormat
CreateFontA
CreateDIBSection
DeleteDC
SetTextColor
SetBkColor
TextOutA

advapi32

RegDeleteValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
InitializeSecurityDescriptor
CryptReleaseContext
CryptDestroyKey
CryptEncrypt
CryptImportKey
CryptAcquireContextA
GetUserNameA
RegEnumValueA
CryptDestroyHash
CryptVerifySignatureA
CryptHashData
SetSecurityDescriptorDacl
CryptCreateHash
CryptGetHashParam
CryptDeriveKey
CryptDecrypt

shell32

ShellExecuteA

ole32

CoUninitialize
CoCreateInstance
CoInitialize

ws2_32

recv
WSAGetLastError
WSASend
sendto
send
WSACleanup
htons
inet_addr
gethostbyname
connect
WSAAsyncSelect
setsockopt
socket
shutdown
WSAStartup
closesocket

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

wzaudio

wzAudioStop
wzAudioOption
wzAudioCreate
wzAudioGetStreamOffsetRange
wzAudioDestroy
wzAudioPlay

setupapi

SetupDiCreateDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA

wininet

InternetQueryDataAvailable
InternetCloseHandle
InternetOpenA
InternetConnectA
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetReadFile
FtpFindFirstFileA
FtpOpenFileA

urlmon

URLDownloadToFileA

Sections

.text
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 208KB - Virtual size: 136.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

db4f115cfa6aa2ca1a6ff94e9d55cea1

Headers

File Characteristics

Imports

imm32

dsound

opengl32

glu32

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

ws2_32

version

wzaudio

setupapi

wininet

urlmon

Sections

.text Size: 4.9MB - Virtual size: 4.9MB

.rdata Size: 204KB - Virtual size: 203KB

.data Size: 208KB - Virtual size: 136.9MB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 4.9MB - Virtual size: 4.9MB

.rdata
Size: 204KB - Virtual size: 203KB

.data
Size: 208KB - Virtual size: 136.9MB

.rsrc
Size: 12KB - Virtual size: 8KB