f30159e4748a52b1f3743912781b9b50e62cd40c09fa99ee3edb03dbb6904ef9

Sharing

Copy URL Twitter E-mail

General

Target

f30159e4748a52b1f3743912781b9b50e62cd40c09fa99ee3edb03dbb6904ef9
Size

284KB
MD5

f09cfc858065b530acf1bdc2b53da620
SHA1

d2f6c68cf72251979f2c049b5de686a9742f18ae
SHA256

f30159e4748a52b1f3743912781b9b50e62cd40c09fa99ee3edb03dbb6904ef9
SHA512

15f6c6bc3992ac671b9a6eab3bcfe3f73fc80c16ec71e56455a7864db0c749cc8bab791b7deb99ae0da5c716f778dc78e0ab05a51b31cbc8eebf9eba209780b0
SSDEEP

6144:LPn+dvv/Sx0Mh5gPV+ccT3qAgRlbQelHdcSGWLaZ:LPn+dvij0+ccT35gRvNdt3a

Score

N/A

Malware Config

Signatures

Files

f30159e4748a52b1f3743912781b9b50e62cd40c09fa99ee3edb03dbb6904ef9
.dll windows x86

417bc030e88bbbe16800c8e0fff689ae

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

StrToIntA

d3dx9_33

D3DXCreateTextureFromFileA
D3DXCreateFontA

kernel32

GetModuleFileNameA
FlushFileBuffers
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
CloseHandle
CreateFileA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoA
MultiByteToWideChar
LoadLibraryA
HeapSize
RtlUnwind
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
GetLastError
HeapFree
GetCurrentThreadId
GetCommandLineA
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
RaiseException
WriteFile
GetStdHandle
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
ExitProcess
Sleep
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer

user32

SetCapture
ReleaseCapture
SetDlgItemTextA
ClientToScreen
DestroyWindow
SetWindowLongA
MessageBoxA
SetTimer
GetWindowLongA
ScreenToClient
EndDialog
SendDlgItemMessageA
ShowWindow
CreateDialogParamA
KillTimer
LoadBitmapA
wsprintfA
SetWindowTextA
DialogBoxParamA
SendMessageA
GetWindowTextA
GetDlgItem

comdlg32

ChooseFontA
GetOpenFileNameA

shell32

DragQueryFileA
DragFinish
DragAcceptFiles

Exports

Exports

_DllGetClassObject@12

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

417bc030e88bbbe16800c8e0fff689ae

Headers

File Characteristics

Imports

shlwapi

d3dx9_33

kernel32

user32

comdlg32

shell32

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 61KB

.rdata Size: 16KB - Virtual size: 12KB

.data Size: 8KB - Virtual size: 12KB

.rsrc Size: 16KB - Virtual size: 14KB

.reloc Size: 8KB - Virtual size: 6KB

.text Size: 168KB - Virtual size: 168KB

.text
Size: 64KB - Virtual size: 61KB

.rdata
Size: 16KB - Virtual size: 12KB

.data
Size: 8KB - Virtual size: 12KB

.rsrc
Size: 16KB - Virtual size: 14KB

.reloc
Size: 8KB - Virtual size: 6KB

.text
Size: 168KB - Virtual size: 168KB