47e952cde0ba950a61538c0db910262da17f7e228f0111976b2b54be56237423

Sharing

Copy URL Twitter E-mail

General

Target

47e952cde0ba950a61538c0db910262da17f7e228f0111976b2b54be56237423
Size

1.1MB
MD5

e9e143a86a49556d4ec0f8eb744c17d5
SHA1

473f592f9778b3d2632493cf5abe530ad45b3133
SHA256

47e952cde0ba950a61538c0db910262da17f7e228f0111976b2b54be56237423
SHA512

75e06506fad4292deb77e3bfc42c9f5d42e4d7f8da686b9473e44e8e11b3853c0acd9dec7f41ea649f9f5ff71e983277b245f610146964745b7814ebb7beaec3
SSDEEP

24576:GZHnEuQkaPdBodzFU66soT2tZy82wS7AWh7ojftNApzYdjo:DjzodUsy/wm7Ifbni

Score

N/A

Malware Config

Signatures

Files

47e952cde0ba950a61538c0db910262da17f7e228f0111976b2b54be56237423
.exe windows x86

f6918f15eb5b1c670637d22ed7dbbd32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

skinmagic

ord7
ord1
ord8
ord9
ord3

winmm

PlaySoundA

avcodec

ord709
ord255
ord200
ord210
ord186
ord191
ord199
ord257
ord707
ord275
ord273
ord272
ord704
ord221
ord183
ord601
ord271
ord185
ord206
ord708
ord184
ord195
ord228
ord190
ord215
ord266

avformat

ord124
ord227
ord93
ord50
ord24
ord36
ord123
ord254
ord228
ord155
ord23
ord255
ord125
ord52
ord302
ord292
ord120
ord20
ord117
ord118
ord115
ord33
ord28
ord114
ord55
ord306
ord41
ord38
ord29
ord35
ord285
ord18
ord19
ord293
ord46
ord113
ord57
ord229

mfc42

ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord324
ord2302
ord4234
ord537
ord6199
ord4710
ord860
ord4202
ord3701
ord2575
ord4396
ord3574
ord3698
ord3716
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord3610
ord3402
ord3721
ord2582
ord6055
ord1776
ord4402
ord5290
ord3370
ord3640
ord3619
ord1146
ord823
ord567
ord500
ord384
ord2289
ord2370
ord4284
ord6111
ord4160
ord2863
ord6215
ord2379
ord2859
ord755
ord470
ord3301
ord5875
ord2754
ord3293
ord3092
ord2818
ord2614
ord3873
ord6334
ord3452
ord2515
ord355
ord5606
ord6905
ord6907
ord2915
ord6142
ord924
ord922
ord2096
ord3998
ord5860
ord941
ord939
ord3571
ord3996
ord2862
ord1641
ord3874
ord2642
ord535
ord4224
ord1175
ord640
ord5065
ord1640
ord283
ord323
ord2086
ord4123
ord3744
ord1768
ord6930
ord6928
ord6874
ord4275
ord809
ord556
ord1088
ord2122
ord2860
ord3797
ord6358
ord6197
ord6880
ord2864
ord6605
ord5572
ord926
ord2740
ord2801
ord1871
ord6571
ord4133
ord4297
ord5787
ord6119
ord282
ord3706
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord4200
ord3573
ord5440
ord6383
ord4277
ord5782
ord1081
ord3499
ord5597
ord4083
ord4317
ord2685
ord2591
ord6247
ord2732
ord6251
ord5486
ord5306
ord2972
ord5757
ord6187
ord4331
ord6190
ord5580
ord6062
ord5865
ord3655
ord406
ord705
ord879
ord882
ord4243
ord2408
ord6453
ord3286
ord5981
ord1099
ord1574
ord1862
ord4220
ord2584
ord3654
ord2438
ord3693
ord2763
ord2567
ord5788
ord6194
ord5785
ord807
ord2920
ord2012
ord2120
ord554
ord4163
ord1644
ord2919
ord940
ord1621
ord2764
ord5856
ord536
ord2452
ord2753
ord1195
ord472
ord5450
ord1576
ord5053
ord4774
ord6270
ord613
ord289
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord4998
ord4853
ord4376
ord5265
ord4129
ord858
ord5683
ord4278
ord1200
ord540
ord1247
ord1199
ord1134
ord1168
ord2621
ord2514
ord2414
ord800
ord693
ord795
ord609
ord616
ord656
ord790
ord765
ord772
ord686
ord641
ord3663
ord3626
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord2725
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord2405
ord6394

msvcrt

__dllonexit
_onexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strlen
memcmp
memcpy
memset
__CxxLongjmpUnwind
_setjmp3
longjmp
_CIpow
getc
fputc
floor
srand
rand
calloc
_strupr
_CxxThrowException
vsprintf
vfprintf
_HUGE
time
localtime
fseek
ftell
perror
setvbuf
fflush
toupper
atof
atan2
strtod
isspace
strtol
_snprintf
ceil
_vsnprintf
strrchr
getenv
strncmp
abort
_assert
printf
_purecall
fwrite
realloc
fopen
_errno
strerror
fread
fclose
tolower
isdigit
exit
memmove
wcslen
wcscpy
malloc
free
sscanf
__p___argv
_open
_close
_iob
fprintf
_stat
_getdiskfree
atoi
_strlwr
strstr
strncpy
_ftol
clock
sprintf
_setmbcp
_fileno
_fstat
_lseek
_fdopen
_write
_strdup
_mkdir
fabs
sqrt
log
exp
qsort
pow
strchr
strcpy
_except_handler3
__CxxFrameHandler
_chdir

kernel32

OutputDebugStringA
DeleteFileA
lstrcpyA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcess
GetVersionExA
GetLastError
GetFileAttributesA
WideCharToMultiByte
CloseHandle
GetFileSize
CreateFileA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
WinExec
lstrlenA
lstrcatA
FindClose
FindNextFileA
FindFirstFileA
SetEvent
ResetEvent
WaitForSingleObject
CreateThread
CreateEventA
GetVersion
lstrlenW
GetCPInfo
LockResource
LoadResource
FindResourceA
lstrcmpiA
GetTempPathA
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
GetProcAddress
InterlockedIncrement
GetModuleFileNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
ReadFile
SetFilePointer
GetTimeZoneInformation
GetSystemTime
SystemTimeToFileTime
GetFileTime
GlobalAlloc
GlobalFree
GetStartupInfoA
Sleep
MultiByteToWideChar
MulDiv
GetVolumeInformationA

user32

InflateRect
GetParent
GetWindowRect
CopyIcon
OffsetRect
SetRect
FillRect
TabbedTextOutA
GrayStringA
GetCursorPos
SetCapture
GetAsyncKeyState
ReleaseCapture
IsWindow
LoadImageA
GetMenuItemInfoA
DrawEdge
CopyRect
DestroyIcon
DrawIconEx
GetDesktopWindow
GetMenuItemCount
ModifyMenuA
GetMenuState
GetMenuItemID
CreatePopupMenu
CreateMenu
GetMenuStringA
GetSysColorBrush
LoadBitmapA
GetSubMenu
PostMessageA
IsMenu
GetNextDlgTabItem
GetActiveWindow
WindowFromPoint
ClientToScreen
DrawStateA
CreateIconIndirect
GetIconInfo
MessageBoxA
GetMessagePos
ScreenToClient
PtInRect
ReleaseDC
GetDC
LoadIconA
AppendMenuA
GetSystemMenu
SendMessageA
GetWindowDC
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
DrawFocusRect
GetSysColor
GetFocus
InvalidateRect
SetCursor
LoadCursorA
ExitWindowsEx
SetTimer
KillTimer
wsprintfA
EnableWindow
TranslateMessage
DispatchMessageA
PeekMessageA
DrawTextA
FrameRect
SystemParametersInfoA
UpdateWindow
SetWindowLongA
MessageBeep
DestroyCursor

gdi32

CreateDIBSection
GetEnhMetaFileHeader
GetEnhMetaFilePaletteEntries
CreatePalette
SelectPalette
RealizePalette
SetStretchBltMode
StretchDIBits
CreateBitmap
SetBkColor
SetTextColor
GetBkColor
PatBlt
GetPixel
Ellipse
GetTextExtentPoint32W
CreatePen
GetBkMode
GetEnhMetaFileBits
SetEnhMetaFileBits
PlayEnhMetaFile
SetWinMetaFileBits
DeleteEnhMetaFile
UnrealizeObject
CreateRectRgnIndirect
PtInRegion
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetMapMode
StretchBlt
GetDeviceCaps
CreateRectRgn
RectInRegion
LineDDA
SetPixel
GetTextExtentPoint32A
GetStockObject
GetObjectA
CreateSolidBrush
GetDIBits
SetDIBitsToDevice
CreateFontIndirectA
DeleteObject
CreateCompatibleBitmap
BitBlt
CreateCompatibleDC
DeleteDC
SelectObject

advapi32

AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
LookupPrivilegeValueA

shell32

SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteExA
ShellExecuteA

comctl32

ImageList_AddMasked
ImageList_GetImageCount
ImageList_GetIcon
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Draw

ole32

CoUninitialize
CoInitialize
StringFromIID
CoTaskMemFree
CoCreateInstance

oleaut32

OleLoadPicturePath
SysFreeString
SysAllocStringLen

msvcp60

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB

Sections

.text
Size: 576KB - Virtual size: 575KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 252KB - Virtual size: 248KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 88KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f6918f15eb5b1c670637d22ed7dbbd32

Headers

File Characteristics

Imports

skinmagic

winmm

avcodec

avformat

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

oleaut32

msvcp60

Sections

.text Size: 576KB - Virtual size: 575KB

.rdata Size: 252KB - Virtual size: 248KB

.data Size: 88KB - Virtual size: 3.3MB

.sxdata Size: 4KB - Virtual size: 856B

.rsrc Size: 192KB - Virtual size: 189KB

.text
Size: 576KB - Virtual size: 575KB

.rdata
Size: 252KB - Virtual size: 248KB

.data
Size: 88KB - Virtual size: 3.3MB

.sxdata
Size: 4KB - Virtual size: 856B

.rsrc
Size: 192KB - Virtual size: 189KB