f2a5cedcb3292602de4a66d88bac5f621555d4ade93414f9a12df60b3dce7c73

Sharing

Copy URL Twitter E-mail

General

Target

f2a5cedcb3292602de4a66d88bac5f621555d4ade93414f9a12df60b3dce7c73
Size

920KB
MD5

2a199af78e9c76bbecba7c9c2fb84ec0
SHA1

cf8d1ad3fdb895bfe77371a0d8380b9080b2b62f
SHA256

f2a5cedcb3292602de4a66d88bac5f621555d4ade93414f9a12df60b3dce7c73
SHA512

96dbe02ec3815307984acb76f13c61be80838adaee6e913ba61f44f2d83edc502baeb37ee90dd842181ab7ebb3ed95ccdf42a75395bbb0e984c97959f9e09535
SSDEEP

12288:P+y3E4OSM1va1noiiSVhw9Wd9cepj5uY9Tzcf26v9K9UMLWpHV/qqJ:WKpxASjw9qc4uY4qWBV/q

Score

N/A

Malware Config

Signatures

Files

f2a5cedcb3292602de4a66d88bac5f621555d4ade93414f9a12df60b3dce7c73
.exe windows x86

504e2ab4202ba6ec24fbf503ce4c2899

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

skinplusplusdll

?InitializeSkin@@YGHPAD@Z

winmm

waveOutUnprepareHeader
PlaySoundA
waveOutGetNumDevs
waveOutOpen
waveOutPrepareHeader
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInAddBuffer
waveInStart
waveOutWrite
waveInStop
waveInReset
waveInUnprepareHeader
waveOutClose
waveInClose
waveOutReset

kernel32

GetCurrentDirectoryA
LCMapStringW
LCMapStringA
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
HeapReAlloc
ExitThread
TerminateProcess
GetACP
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapFree
HeapAlloc
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetProfileStringA
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
SystemTimeToFileTime
LocalFileTimeToFileTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
IsBadCodePtr
IsBadReadPtr
GetDriveTypeA
GetStringTypeW
GetStringTypeA
CreateEventA
CloseHandle
TerminateThread
WaitForSingleObject
SetEvent
ResumeThread
CreateThread
Sleep
VirtualFree
VirtualAlloc
CopyFileA
GetModuleFileNameA
GetTickCount
GetFileAttributesA
GetDiskFreeSpaceExA
GetVolumeInformationA
lstrlenA
GetLogicalDriveStringsA
LocalFree
LocalAlloc
lstrcpynA
FindClose
FindNextFileA
FindFirstFileA
GetFileSize
CreateFileA
WriteFile
SetFilePointer
DeleteFileA
ReadFile
RemoveDirectoryA
MoveFileA
GetLastError
CreateDirectoryA
lstrcpyA
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
SizeofResource
GlobalFlags
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetProcAddress
LoadLibraryA
SetUnhandledExceptionFilter
GetPrivateProfileStringA
GetPrivateProfileIntA
WritePrivateProfileStringA
InitializeCriticalSection
LeaveCriticalSection
SetErrorMode
PostQueuedCompletionStatus
GetCurrentThread
FileTimeToLocalFileTime
FileTimeToSystemTime
lstrcmpA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
MulDiv
SetLastError
FormatMessageA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
LockResource
FindResourceA
LoadResource
GetVersion
GetVersionExA
FreeLibrary
LocalSize
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
GetSystemDirectoryA
lstrcatA
DeleteCriticalSection
CancelIo
InterlockedExchange
InterlockedIncrement
InterlockedDecrement
GetQueuedCompletionStatus
CreateIoCompletionPort
GetSystemInfo
EnterCriticalSection

user32

PostThreadMessageA
SetParent
RegisterClipboardFormatA
LockWindowUpdate
GetDCEx
GetNextDlgGroupItem
CopyAcceleratorTableA
GetSysColorBrush
GetClassNameA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
TranslateAcceleratorA
LoadAcceleratorsA
MapDialogRect
SetWindowContextHelpId
ValidateRect
ShowOwnedPopups
PostQuitMessage
IsZoomed
FindWindowA
CharUpperA
LoadStringA
GrayStringA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
wvsprintfA
GetMenuCheckMarkDimensions
ModifyMenuA
SetMenuItemBitmaps
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
DispatchMessageA
TranslateMessage
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
RegisterClassA
GetMenu
GetWindowTextLengthA
GetWindowTextA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowLongA
RegisterWindowMessageA
IsIconic
GetWindowPlacement
EndDialog
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
SetMenuDefaultItem
GetMessageA
LoadIconA
SendMessageA
EnableWindow
SetRect
DestroyMenu
DestroyCursor
DestroyIcon
GetWindowLongA
GetNextDlgTabItem
GetParent
SetCursor
InvalidateRect
GetActiveWindow
WindowFromPoint
ClientToScreen
PostMessageA
TrackPopupMenuEx
GetSubMenu
GetWindowRect
DrawFocusRect
InflateRect
CopyRect
GetClientRect
OffsetRect
DrawStateA
FillRect
GetSysColor
ReleaseDC
GetDC
GetIconInfo
LoadImageA
LoadMenuA
FrameRect
wsprintfA
LoadCursorA
TrackPopupMenu
GetMenuItemID
IsWindow
LoadBitmapA
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DrawTextA
GetMenuState
ShowScrollBar
DrawIconEx
IntersectRect
CheckMenuRadioItem
SetClassLongA
SetForegroundWindow
GetSystemMenu
AppendMenuA
CheckMenuItem
MessageBeep
GetSystemMetrics
DrawEdge
RedrawWindow
GetDesktopWindow
SystemParametersInfoA
SetMenu
CharNextA
DeleteMenu
GetMenuItemCount
EnableMenuItem
GetCursorPos
GetFocus
MessageBoxA
GetDlgCtrlID
SetWindowPos
IsWindowVisible
UpdateWindow
ScreenToClient
GetWindow
CopyIcon
DefWindowProcA
GetClassInfoA
GetCursor
DrawFrameControl
SetRectEmpty
SetTimer
SetCapture
ReleaseCapture
GetKeyState
KillTimer
PtInRect

gdi32

SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
CreateRectRgn
GetDeviceCaps
GetViewportExtEx
CreatePatternBrush
PtVisible
RectVisible
Escape
GetMapMode
PatBlt
SetRectRgn
CombineRgn
CreateRectRgnIndirect
DPtoLP
LPtoDP
GetTextExtentPoint32A
GetTextMetricsA
GetCharWidthA
CreateFontA
GetTextColor
GetBkColor
GetPixel
GetObjectA
CreatePolygonRgn
FillRgn
PlgBlt
Rectangle
CreateFontIndirectA
PtInRegion
StretchBlt
CreateDIBSection
StretchDIBits
ExtTextOutA
CreateSolidBrush
TextOutA
SetBkMode
DeleteObject
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
SetTextColor
SetBkColor
SelectObject
GetWindowExtEx
CreateBitmap
RoundRect
CreatePen
GetClipBox
CreateDIBitmap
GetTextExtentPointA
SaveDC
RestoreDC

comdlg32

GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegDeleteValueA
RegCloseKey
RegOpenKeyA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
SetFileSecurityA
RegSetValueA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
GetFileSecurityA

shell32

DragQueryFileA
DragFinish
Shell_NotifyIconA
ExtractIconA
ShellExecuteA
ord71
ShellExecuteExA
SHGetFileInfoA

comctl32

ImageList_Create
ImageList_Destroy
ord17
ImageList_AddMasked
_TrackMouseEvent

oledlg

ord8

ole32

OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoUninitialize
CoInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantChangeType
SysAllocString
SysAllocStringByteLen
VariantCopy
SysStringLen

shlwapi

PathRemoveFileSpecA
SHAutoComplete

ws2_32

WSASocketA
WSACreateEvent
ioctlsocket
htons
bind
listen
WSACleanup
WSAStartup
closesocket
getpeername
inet_ntoa
connect
select
send
recv
gethostname
gethostbyname
WSACloseEvent
WSASend
WSARecv
socket
accept
WSAGetLastError
setsockopt
WSAIoctl
WSAWaitForMultipleEvents
WSAEnumNetworkEvents
WSAEventSelect

pdh

PdhCollectQueryData
PdhAddCounterA
PdhOpenQueryA
PdhCloseQuery
PdhGetFormattedCounterValue

avifil32

AVIFileExit
AVIStreamSetFormat
AVIFileCreateStreamA
AVIFileOpenA
AVIFileRelease
AVIStreamRelease
AVIStreamWrite
AVIFileInit

msvfw32

ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICDecompress
DrawDibOpen
DrawDibClose
ICCompressorFree
ICSeqCompressFrameEnd
DrawDibDraw

Sections

.text
Size: 376KB - Virtual size: 374KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 84KB - Virtual size: 82KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 428KB - Virtual size: 428KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

504e2ab4202ba6ec24fbf503ce4c2899

Headers

File Characteristics

Imports

skinplusplusdll

winmm

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

shlwapi

ws2_32

pdh

avifil32

msvfw32

Sections

.text Size: 376KB - Virtual size: 374KB

.rdata Size: 84KB - Virtual size: 82KB

.data Size: 28KB - Virtual size: 43KB

.rsrc Size: 428KB - Virtual size: 428KB

.text
Size: 376KB - Virtual size: 374KB

.rdata
Size: 84KB - Virtual size: 82KB

.data
Size: 28KB - Virtual size: 43KB

.rsrc
Size: 428KB - Virtual size: 428KB