6b9ef290c669f40e2c3c146db2c0afe95fce4bac3bc2a572e7cb791e0a026a2e

Sharing

Copy URL Twitter E-mail

General

Target

6b9ef290c669f40e2c3c146db2c0afe95fce4bac3bc2a572e7cb791e0a026a2e
Size

580KB
MD5

02bb44cbc689ad2e3c77b5abd5315150
SHA1

ed01226e2952a4b8e802c95e61133714f96988f5
SHA256

6b9ef290c669f40e2c3c146db2c0afe95fce4bac3bc2a572e7cb791e0a026a2e
SHA512

4b30873dd471a8906d6caa93a18b07790362aa72cea45f3b2240aa71215076121078f1191fd09049009cae49e14b227cdacb69ab268024e95b3eab5f9667e510
SSDEEP

12288:v1wBTXA94kN0QZLBLh2UOtkMHtwbDgIkSsPdG:twBsQQZLloHW4fSoQ

Score

N/A

Malware Config

Signatures

Files

6b9ef290c669f40e2c3c146db2c0afe95fce4bac3bc2a572e7cb791e0a026a2e
.exe windows x86

a2d187cb5a02a7c79e0fd664e8c20ccd

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveInGetNumDevs
mmioDescend
mmioClose
mmioAscend
mmioWrite
mmioRead
mmioCreateChunk
mmioOpenA
waveInStop
timeGetTime
waveInGetErrorTextA
waveInStart
waveInOpen
waveInAddBuffer
waveInPrepareHeader
waveInClose
waveInReset
waveInUnprepareHeader
waveInGetDevCapsA

msvfw32

ICGetInfo
ord2
ICSendMessage
ICOpen
ICClose
ICInfo

avifil32

AVIStreamInfoA
AVIStreamRelease
AVIFileGetStream
CreateEditableStream
AVIStreamOpenFromFileA
AVIStreamStart
AVIStreamReadFormat
AVIFileExit
AVISaveVA
AVIFileRelease
AVISaveOptionsFree
AVIStreamWrite
AVIStreamSetFormat
AVIMakeCompressedStream
AVIFileCreateStreamA
AVIFileOpenA
AVIFileInit

msacm32

acmFormatChooseA
acmFormatTagDetailsA
acmFormatSuggest
acmMetrics

hook

InstallMyHook
UninstallMyHook

hookkey

UninstallMyKeyHook
InstallMyKeyHook

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
GetTickCount
RtlUnwind
HeapFree
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
TerminateProcess
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetFileSize
LocalFileTimeToFileTime
ExitThread
HeapReAlloc
HeapSize
GetACP
HeapDestroy
HeapCreate
VirtualFree
CreateThread
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
RaiseException
GetCPInfo
GetTempFileNameA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetModuleHandleA
GetProcAddress
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
FindFirstFileA
FindClose
Sleep
GetCurrentThreadId
DeleteFileA
CreateFileA
CloseHandle
CopyFileA
SetThreadPriority
GetWindowsDirectoryA
OpenFile
WinExec
GlobalAlloc
GlobalLock
lstrcpyA
GlobalHandle
GlobalUnlock
GlobalFree
GetCurrentDirectoryA
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
DeleteCriticalSection
LeaveCriticalSection
TlsFree
LocalAlloc
TlsAlloc
InitializeCriticalSection
GetShortPathNameA
SizeofResource
GlobalFlags
GetVolumeInformationA
GetThreadLocale
GetStringTypeExA
UnlockFile
MoveFileA
SetEndOfFile
SetFilePointer
LockFile
FlushFileBuffers
GetCurrentProcess
WriteFile
ReadFile
GetDiskFreeSpaceA
DuplicateHandle
GetLastError
GetFullPathNameA
GetFileTime
SetFileTime
LCMapStringA
GetFileAttributesA
WritePrivateProfileStringA
GetProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
CreateEventA
SuspendThread
ResumeThread
SetEvent
WaitForSingleObject
GetCurrentThread
lstrcmpA
MulDiv
SetLastError
lstrcpynA
FormatMessageA
LocalFree
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
LCMapStringW
GetStringTypeA
SetErrorMode

user32

ShowOwnedPopups
SetWindowContextHelpId
MapDialogRect
DestroyCursor
FillRect
CharUpperA
GetClassNameA
GetSysColorBrush
InflateRect
SetCapture
InvertRect
GetDCEx
LockWindowUpdate
InsertMenuA
GetMenuStringA
DestroyIcon
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
FindWindowA
GetTabbedTextExtentA
RegisterClipboardFormatA
PostThreadMessageA
AppendMenuA
SetParent
IsZoomed
PtInRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
DestroyMenu
GetDesktopWindow
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
SetRectEmpty
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
LoadStringA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
ValidateRect
GetMessageA
GetTopWindow
IsChild
GetCapture
DeleteMenu
wsprintfA
GetClassInfoA
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetWindow
SetWindowPos
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
GetWindowLongA
GetDlgItem
IsWindowEnabled
ClientToScreen
GetSubMenu
TrackPopupMenu
LoadMenuA
DispatchMessageA
PeekMessageA
TranslateMessage
SetWindowTextA
GetIconInfo
DrawIcon
SetRect
DestroyWindow
RegisterClassA
CreateWindowExA
GetCursorPos
DefWindowProcA
CopyRect
IsWindow
OffsetRect
IsRectEmpty
GetParent
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
PostMessageA
LoadBitmapA
RegisterWindowMessageA
SetCursor
MessageBeep
SetWindowLongA
InvalidateRect
GetSysColor
IsWindowVisible
GetMenu
GetWindowRect
GetClientRect
GetSystemMetrics
SetMenu
GetDC
SetWindowRgn
LoadCursorA
ShowWindow
PostQuitMessage
WindowFromPoint
KillTimer
SetTimer
GetSystemMenu
SetScrollPos
GetScrollPos
WinHelpA
UpdateWindow
GetWindowDC
ReleaseDC
LoadCursorFromFileA
GetCursor
LoadIconA
EnableWindow
MessageBoxA
SendMessageA
SystemParametersInfoA
IntersectRect
AdjustWindowRectEx
DefDlgProcA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
IsWindowUnicode

gdi32

GetDeviceCaps
GetDIBits
GetTextExtentPointA
GetObjectA
CreateFontIndirectA
GetClipBox
CreateBitmap
CreateRectRgnIndirect
StartDocA
CreateHatchBrush
SaveDC
ExtTextOutA
CreateRectRgn
CombineRgn
OffsetRgn
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetStockObject
CreatePen
CreateSolidBrush
Rectangle
Ellipse
DeleteObject
BitBlt
RoundRect
CreateDIBitmap
SetBkMode
SetTextColor
SetBkColor
RestoreDC
TextOutA
PatBlt
GetTextExtentPoint32A
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
PtVisible
RectVisible
Escape
StretchDIBits
SelectClipRgn
CreateFontA
GetTextMetricsA
GetCharWidthA
GetViewportOrgEx
AbortDoc
DPtoLP
EndPage
StartPage
EndDoc
CreateDCA
GetMapMode
SetAbortProc
GetTextColor
GetBkColor
SetRectRgn
GetNearestColor
GetStretchBltMode
LPtoDP
GetTextAlign
GetBkMode
GetPolyFillMode
GetTextFaceA
GetWindowOrgEx
GetROP2
ScaleWindowExtEx
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
OffsetViewportOrgEx
ScaleViewportExtEx
SetMapMode
SetStretchBltMode
SetViewportOrgEx
SetROP2
SetPolyFillMode
ExcludeClipRect
DeleteDC

comdlg32

PrintDlgA
GetFileTitleA
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
CommDlgExtendedError

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegDeleteKeyA
RegSetValueA
GetFileSecurityA
SetFileSecurityA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyA
RegSetValueExA

shell32

ExtractIconA
SHGetFileInfoA
DragQueryFileA
DragFinish
Shell_NotifyIconA
ShellExecuteA

comctl32

ImageList_Destroy
ord17

oledlg

ord8

ole32

CoRevokeClassObject
OleFlushClipboard
CLSIDFromProgID
OleIsCurrentClipboard
CoRegisterMessageFilter
CoGetClassObject
CLSIDFromString
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes

olepro32

ord253

oleaut32

VariantCopy
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
SysFreeString
SysAllocString
SysAllocStringByteLen
VariantChangeType
SysStringLen

Sections

.text
Size: 300KB - Virtual size: 298KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 188KB - Virtual size: 185KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a2d187cb5a02a7c79e0fd664e8c20ccd

Headers

File Characteristics

Imports

winmm

msvfw32

avifil32

msacm32

hook

hookkey

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 300KB - Virtual size: 298KB

.rdata Size: 72KB - Virtual size: 70KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 188KB - Virtual size: 185KB

.text
Size: 300KB - Virtual size: 298KB

.rdata
Size: 72KB - Virtual size: 70KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 188KB - Virtual size: 185KB