d97f533295ac2b8529ba68a51c67a383dd1ac7a3ed2bbe65af8c651c8257becd

Sharing

Copy URL Twitter E-mail

General

Target

d97f533295ac2b8529ba68a51c67a383dd1ac7a3ed2bbe65af8c651c8257becd
Size

290KB
MD5

371af8bff01df1be47b7f40c0e417d93
SHA1

a09ebe0b318a42fc16f07b1accd3d44b709e3dd9
SHA256

d97f533295ac2b8529ba68a51c67a383dd1ac7a3ed2bbe65af8c651c8257becd
SHA512

873b2aaf8f8d3ece08aa2107cc06956d7c2c93b25b1ff904d774c4ab5d3a5ce8d83c0234a14ab1ac343cc0b3a03982a90d14308e7d314d476bce20fcdd11f234
SSDEEP

6144:y2VWTfqv0NF27eFVEizEOO9jlPKQY/S2HtgYd/zyuc96Ck2HFVRoeAEOlBE:TWDXNF2uDzEXlPKY2z9PE

Score

N/A

Malware Config

Signatures

Files

d97f533295ac2b8529ba68a51c67a383dd1ac7a3ed2bbe65af8c651c8257becd
.exe windows x86

8eaf95ce2e49250354b006c88c853692

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
SetTextColor
TextOutW
SetMapMode
SetBkMode
BitBlt
SetBkColor
SelectObject
SaveDC
RestoreDC
Rectangle
Polyline
Polygon
PatBlt
MoveToEx
LineTo
LPtoDP
GetTextMetricsA
GetTextExtentPointW
GetTextExtentPointA
GetTextExtentPoint32W
GetObjectW
GetObjectA
GetDeviceCaps
GetClipBox
ExtTextOutW
ExtTextOutA
EnumFontFamiliesExA
Ellipse
DeleteObject
DeleteMetaFile
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePen
CreateMetaFileA
CreateFontIndirectW
CreateFontIndirectA
CreateFontA
CreateDIBSection
CreateCompatibleDC
CreateCompatibleBitmap
CloseMetaFile
ChoosePixelFormat
StretchBlt

winspool.drv

AddPrinterW
DeviceCapabilitiesW
DeviceMode
EXTDEVICEMODE
ord201
GetJobW
GetPrinterDriverA
SetPrinterDataExA
WritePrinter

advapi32

RegQueryValueA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegOpenKeyExW
RegOpenKeyA
RegEnumValueW
RegEnumKeyExW
RegEnumKeyExA
RegEnumKeyA
RegDeleteValueW
RegDeleteKeyW
RegDeleteKeyA
RegCreateKeyExW
RegCreateKeyExA
RegConnectRegistryW
RegCloseKey
OpenThreadToken
OpenSCManagerA
OpenProcessToken
LsaQueryInfoTrustedDomain
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
GetTokenInformation
FreeSid
EnumServicesStatusA
ElfDeregisterEventSource
ElfCloseEventLog
CreateProcessWithLogonW
CloseServiceHandle
AllocateAndInitializeSid
RegSetValueExA
RegSetValueExW
RegisterTraceGuidsA
SystemFunction001
SystemFunction025
SystemFunction026
TraceEvent
TrusteeAccessToObjectW
UnregisterTraceGuids
RegQueryValueExA

opengl32

GlmfCloseMetaFile
glColor3fv
glCopyTexImage1D
glGetPixelMapusv
glGetTexLevelParameterfv
glGetTexLevelParameteriv
glLighti
glLoadIdentity
glMapGrid1d
glNormal3dv
wglGetCurrentContext
glVertex4iv
glTexCoord4sv
glTexCoord4i
glTexCoord4dv
glStencilOp
glRasterPos4fv
glRasterPos4dv

dbghelp

SearchTreeForFile
UnDecorateSymbolName
lmi
vc7fpo

ws2_32

WSAAddressToStringA
WSACreateEvent
WSADuplicateSocketW
WSAEventSelect
WSCInstallProvider
closesocket
ntohs
socket

kernel32

VirtualQuery
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStructW
_hwrite
lstrcmpW
lstrcmpiA
lstrcmpA
VirtualProtect
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SystemTimeToFileTime
Sleep
SizeofResource
SetUnhandledExceptionFilter
SetThreadPriority
SetSystemTime
SetLastError
SetHandleInformation
SetFileTime
SetFilePointer
SetFileAttributesW
SetEvent
SetErrorMode
SetEndOfFile
SearchPathA
RtlMoveMemory
ResumeThread
ReplaceFileA
RemoveDirectoryW
RemoveDirectoryA
ReleaseMutex
lstrlenW
lstrlenA
CloseHandle
CompareFileTime
CompareStringA
CompareStringW
ConnectNamedPipe
CopyFileW
CreateDirectoryW
CreateEventA
CreateEventW
CreateFileW
CreateMutexA
CreateMutexW
CreateProcessW
CreateThread
CreateTimerQueueTimer
DeleteCriticalSection
DeleteFileA
DeleteFileW
DeleteTimerQueueTimer
DeviceIoControl
DuplicateHandle
EndUpdateResourceW
EnterCriticalSection
EnumCalendarInfoW
EnumSystemCodePagesW
EnumTimeFormatsA
ExitProcess
ExpandEnvironmentStringsA
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FindResourceA
FlushFileBuffers
FlushInstructionCache
FormatMessageA
FormatMessageW
FreeLibrary
FreeLibraryAndExitThread
FreeResource
GetACP
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDateFormatW
GetDriveTypeW
GetEnvironmentVariableW
GetExitCodeProcess
GetExitCodeThread
GetFileAttributesW
GetFileSize
GetFileTime
GetFileType
GetLastError
GetLocalTime
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetProcAddress
GetProcessHeap
GetProfileIntA
GetShortPathNameW
GetStdHandle
GetStringTypeExA
GetSystemDefaultUILanguage
GetSystemDirectoryA
GetSystemDirectoryW
GetSystemInfo
GetSystemPowerStatus
GetSystemTime
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryA
GetTempFileNameA
GetTempFileNameW
GetTempPathA
GetTempPathW
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetUserDefaultUILanguage
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsBadReadPtr
IsDBCSLeadByte
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
LoadLibraryExA
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockResource
MapUserPhysicalPages
MoveFileExW
MoveFileW
MulDiv
MultiByteToWideChar
OpenFile
OpenMutexA
OpenThread
QueryPerformanceCounter
RaiseException
ReadConsoleOutputA
ReadFile
lstrcmpiW

rpcrt4

IUnknown_QueryInterface_Proxy
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_CountRefs
CStdStubBuffer_Connect
IUnknown_Release_Proxy
NdrCStdStubBuffer_Release
NdrClientCall2
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrOleAllocate
NdrOleFree
RpcImpersonateClient
RpcStringBindingComposeW
CStdStubBuffer_AddRef

user32

EnumThreadWindows
EnumWindows
EqualRect
FillRect
FindWindowExA
FindWindowExW
GetActiveWindow
GetCapture
GetClassInfoA
GetClassInfoExA
GetClassInfoExW
GetClassInfoW
GetClassNameA
GetClassNameW
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDlgItemInt
GetDlgItemTextA
GetDlgItemTextW
GetFocus
GetForegroundWindow
GetGUIThreadInfo
GetKeyState
GetKeyboardLayoutList
GetLastActivePopup
GetMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuItemInfoW
GetMenuState
GetMenuStringW
GetMessageExtraInfo
GetMessagePos
GetMessageW
GetMonitorInfoA
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPropA
GetPropW
GetScrollBarInfo
GetSubMenu
GetSysColor
GetSysColorBrush
GetSystemMetrics
GetWindow
GetWindowDC
GetWindowInfo
GetWindowLongA
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowTextA
GetWindowTextLengthA
GetWindowTextLengthW
GetWindowTextW
GetWindowThreadProcessId
InflateRect
InsertMenuA
InsertMenuItemA
InsertMenuItemW
InsertMenuW
IntersectRect
InvalidateRect
IsChild
IsDialogMessageA
IsDialogMessageW
IsDlgButtonChecked
EnumChildWindows
IsMenu
IsWindow
IsWindowEnabled
IsWindowUnicode
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadCursorA
LoadIconA
LoadImageA
LoadImageW
EndPaint
LoadMenuW
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxA
MessageBoxW
ModifyMenuW
MonitorFromPoint
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PeekMessageW
PostMessageA
PostMessageW
PostQuitMessage
PostThreadMessageA
PtInRect
RedrawWindow
RegisterClassA
RegisterClassExA
RegisterClassExW
RegisterClassW
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
RemovePropW
ScreenToClient
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageA
SendMessageCallbackW
SendMessageTimeoutA
SendMessageTimeoutW
SendMessageW
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetDlgItemInt
SetDlgItemTextA
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetMenu
SetMenuDefaultItem
SetMenuItemBitmaps
SetMenuItemInfoA
SetMenuItemInfoW
SetParent
SetPropA
SetPropW
SetRect
SetRectEmpty
SetTimer
SetWindowLongA
SetWindowLongW
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowTextA
SetWindowTextW
SetWindowsHookExA
ShowWindow
SystemParametersInfoA
TrackMouseEvent
TrackPopupMenu
TrackPopupMenuEx
TranslateAcceleratorA
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
EndDialog
EndDeferWindowPos
EnableWindow
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawTextA
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DialogBoxParamA
DialogBoxIndirectParamA
DestroyWindow
DestroyMenu
DestroyIcon
DeleteMenu
DeferWindowPos
DefWindowProcW
DefWindowProcA
DdeAbandonTransaction
CreateWindowExW
CreateWindowExA
CreatePopupMenu
CreateDialogParamW
CopyRect
CloseClipboard
ClientToScreen
CheckRadioButton
CheckMenuRadioItem
CheckMenuItem
CheckDlgButton
CharUpperW
CharUpperA
CharPrevW
CharPrevA
CharNextW
CharNextExA
CharNextA
CharLowerW
CharLowerA
CallWindowProcW
CallWindowProcA
CallNextHookEx
BeginPaint
BeginDeferWindowPos
AppendMenuW
AppendMenuA
AdjustWindowRectEx
AdjustWindowRect
ActivateKeyboardLayout
IsIconic
LoadMenuA

shlwapi

StrTrimA
StrToIntW
UrlCombineW
StrToIntExA
StrToIntA
StrStrW
StrToIntExW
UrlApplySchemeW
UrlCreateFromPathW
UrlUnescapeW
UrlUnescapeA
StrStrIW
StrStrIA
StrStrA
StrRChrIW
StrFormatByteSizeW
StrDupW
StrDupA
StrCmpW
StrCmpNW
StrCmpNIW
StrChrA
StrCSpnW
StrCSpnA
SHSetValueW
SHSetValueA
SHRegSetUSValueA
SHRegGetBoolUSValueA
SHQueryValueExW
SHQueryValueExA
SHQueryInfoKeyW
SHGetValueW
SHGetValueA
SHEnumKeyExW
SHDeleteValueW
SHDeleteValueA
SHDeleteKeyW
SHDeleteKeyA
ord16
SHCopyKeyA
SHAutoComplete
PathUnquoteSpacesW
PathUnquoteSpacesA
PathUnExpandEnvStringsW
PathStripPathW
PathSearchAndQualifyA
PathRenameExtensionW
PathRemoveFileSpecW
PathRemoveFileSpecA
PathRemoveExtensionW
PathRemoveBackslashW
PathRemoveArgsA
PathRelativePathToW
PathIsURLW
PathIsUNCServerW
PathIsRootW
PathIsRelativeW
PathIsFileSpecW
PathIsDirectoryW
PathIsDirectoryEmptyW
PathIsContentTypeW
PathIsContentTypeA
PathGetArgsA
PathFindOnPathW
PathFindFileNameW
PathFindFileNameA
PathFindExtensionW
PathFileExistsW
PathFileExistsA
PathCompactPathExW
PathCombineW
PathAppendW
PathAppendA
PathAddExtensionW
PathAddBackslashW
HashData
StrCmpNIA
StrCmpIW

shfolder

SHGetFolderPathA

msvcrt

_wremove
iswpunct
_strnset

Exports

Exports

VMMRegCloseKey
VMMRegCreateKey
VMMRegDeleteKey
VMMRegDeleteValue
VMMRegEnumKey
VMMRegEnumValue
VMMRegFlushKey
VMMRegLoadKey
VMMRegMapPredefKeyToFile
VMMRegMapPredefKeyToFile2
VMMRegMapPredefKeyToKey
VMMRegOpenKey
VMMRegQueryInfoKey
VMMRegQueryMultipleValues
VMMRegQueryValue
VMMRegQueryValueEx
VMMRegSaveKey
VMMRegSetValue
VMMRegSetValueEx
VMMRegUnLoadKey

Sections

.text
Size: 60KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 114KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 17KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8eaf95ce2e49250354b006c88c853692

Headers

File Characteristics

Imports

gdi32

winspool.drv

advapi32

opengl32

dbghelp

ws2_32

kernel32

rpcrt4

user32

shlwapi

shfolder

msvcrt

Exports

Exports

Sections

.text Size: 60KB - Virtual size: 64KB

.rdata Size: 29KB - Virtual size: 31KB

.data Size: 114KB - Virtual size: 115KB

.idata Size: 17KB - Virtual size: 19KB

.rsrc Size: 67KB - Virtual size: 67KB

.text
Size: 60KB - Virtual size: 64KB

.rdata
Size: 29KB - Virtual size: 31KB

.data
Size: 114KB - Virtual size: 115KB

.idata
Size: 17KB - Virtual size: 19KB

.rsrc
Size: 67KB - Virtual size: 67KB