e71fffd3adff1a0bc91bc6bdd045e01378a569a864754185a915a1b454aaf12c

Sharing

Copy URL Twitter E-mail

General

Target

e71fffd3adff1a0bc91bc6bdd045e01378a569a864754185a915a1b454aaf12c
Size

1.7MB
MD5

681beb80d9f47322296c7e44332d494c
SHA1

a09094a80a1561f2fea898cfb7be54294c14b36f
SHA256

e71fffd3adff1a0bc91bc6bdd045e01378a569a864754185a915a1b454aaf12c
SHA512

f8eed8b66d447d887384d307c6170f8cbe0967f42336fa1e75f4dd046fe785ee68fec25ae93fff2ae941aba2c9f74e751fc996a36e0da8d011568f2172ed019b
SSDEEP

24576:i/uzMTqWSpOsUm0rCkRVQh9xNCM8ugWz20+VOVALMcjpyQjSii1hwAG:RSJvsNz8ugm25WALjbeJ1hwAG

Score

N/A

Malware Config

Signatures

Files

e71fffd3adff1a0bc91bc6bdd045e01378a569a864754185a915a1b454aaf12c
.exe windows x86

777205179b304c4a590ce914df1153b6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeSetEvent
waveOutSetVolume
timeKillEvent
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
mciSendCommandA
mciGetErrorStringA
waveOutGetErrorTextA
timeEndPeriod
timeBeginPeriod
timeGetTime
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetPosition
waveOutMessage
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutPause
waveOutRestart
waveOutReset

avcodec-52

ord906
ord903
ord960
ord958
ord919
ord841
ord840
ord839
ord944
ord935
ord956
ord905
ord932
ord858
ord959
ord946
ord911
ord860
ord937
ord862
ord931
ord923
ord867
ord940
ord925
ord921
ord914
ord868
ord912
ord842
ord927
ord950
ord857
ord865
ord896
ord852
ord957
ord847
ord882
ord863
ord845
ord859
ord881
ord883
ord889
ord920
ord875
ord924
ord873
ord933
ord848
ord902
ord945
ord874
ord936
ord926
ord910
ord908
ord854
ord843
ord844

avdevice-52

ord1

avformat-52

ord77
ord62
ord264
ord21
ord344
ord70
ord478
ord476
ord80
ord26
ord25
ord43
ord36
ord44
ord30
ord47
ord28
ord35
ord60
ord491
ord467
ord61
ord466
ord82
ord45
ord68
ord63
ord71
ord51
ord46
ord23
ord81
ord58
ord31
ord49
ord464
ord79
ord78
ord473
ord110

avutil-50

ord22
ord25
ord24
ord27
ord23
ord72
ord43
ord29
ord67
ord57
ord12
ord71
ord58
ord38
ord46
ord59
ord42
ord40
ord32
ord31
ord60
ord45
ord20

swscale-0

ord77
ord63
ord66
ord69

zlib1

ord67

kernel32

HeapCreate
VirtualFree
GetStdHandle
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedCompareExchange
IsProcessorFeaturePresent
HeapDestroy
SuspendThread
VirtualProtect
WriteProcessMemory
GetProcAddress
GetCurrentProcess
LoadLibraryA
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
GetCurrentThread
GetModuleFileNameA
GetFileAttributesA
GetLastError
MultiByteToWideChar
FreeLibrary
GetTempPathA
GetTempFileNameA
WinExec
WideCharToMultiByte
FindFirstFileA
SizeofResource
CreateFileA
LockResource
GetFileTime
LoadResource
CloseHandle
FileTimeToSystemTime
FindResourceA
SetLastError
FindClose
GetModuleHandleA
GetVersion
lstrlenW
lstrlenA
CompareStringA
GetEnvironmentVariableA
CompareStringW
InterlockedExchange
lstrcmpiA
lstrcpynA
RaiseException
GetTickCount
GetVersionExA
FreeResource
GetWindowsDirectoryA
Sleep
DeleteFileA
CreateThread
WaitForSingleObject
DuplicateHandle
GetCurrentProcessId
ReadFile
WriteFile
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemDirectoryA
CopyFileA
CreateSemaphoreA
SetFilePointer
CreateFileW
GetFileSize
EnterCriticalSection
LeaveCriticalSection
MulDiv
InitializeCriticalSection
DeleteCriticalSection
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
GlobalFree
GetCurrentThreadId
FlushInstructionCache
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryExA
lstrcmpA
OutputDebugStringA
ResetEvent
SetEvent
CreateEventA
SetEnvironmentVariableA
CreateMutexA
ReleaseMutex
QueryPerformanceCounter
GetSystemDefaultLCID
FindResourceExA
FindNextFileW
FindFirstFileW
GetLocaleInfoW
GetACP
ReleaseSemaphore
SetThreadPriority
GetDriveTypeA
SetErrorMode
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GlobalDeleteAtom
LocalFree
FormatMessageA
WritePrivateProfileStringA
GlobalAddAtomA
GetModuleFileNameW
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
UnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
GetSystemTimeAsFileTime
ExitThread
ExitProcess
GetCommandLineA
GetProcessHeap
GetStartupInfoA
SetConsoleCtrlHandler
RtlUnwind
HeapSize
IsValidCodePage
LCMapStringA
LCMapStringW

user32

SetTimer
KillTimer
GetCursorPos
ScreenToClient
TabbedTextOutA
GrayStringA
UpdateWindow
GetFocus
IsRectEmpty
GetClassInfoA
DefWindowProcA
DestroyCursor
SetRectEmpty
GetMessageA
GetCursor
TranslateMessage
DispatchMessageA
GetKeyState
SystemParametersInfoA
GetDesktopWindow
GetWindowLongA
SetForegroundWindow
GetMenuItemID
LoadIconA
SetMenuDefaultItem
TrackPopupMenu
SetWindowLongA
MessageBeep
GetMessagePos
IsIconic
DrawIcon
SetPropA
SetWindowRgn
MessageBoxA
SetActiveWindow
GetLastActivePopup
GetPropA
EnumWindows
ShowWindow
IsWindowVisible
GetWindow
SetWindowTextA
GetWindowTextA
IsChild
GetWindowTextLengthA
SetFocus
GetDlgItem
CreateAcceleratorTableA
DestroyAcceleratorTable
MoveWindow
SetWindowPos
CallWindowProcA
CharNextA
BeginPaint
EndPaint
GetClassNameA
CreateWindowExA
InvalidateRgn
DestroyWindow
GetClassInfoExA
RegisterClassExA
DrawTextW
EnumDisplaySettingsA
DestroyIcon
ChangeDisplaySettingsA
GetForegroundWindow
AdjustWindowRectEx
GetMenu
IsZoomed
PeekMessageA
WindowFromPoint
ReleaseCapture
GetKeyboardState
UnregisterClassA
GetKeyboardLayout
ToAsciiEx
SetCursorPos
PostQuitMessage
ClipCursor
AdjustWindowRect
ToUnicode
RegisterClassA
LoadImageA
MsgWaitForMultipleObjects
MapVirtualKeyA
SetClassLongA
CreateIconFromResourceEx
CreateCursor
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
MapVirtualKeyExA
GetMenuItemCount
GetMenuState
MapDialogRect
CheckMenuItem
EnableMenuItem
ModifyMenuA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EndDialog
GetNextDlgTabItem
IsWindowEnabled
CreateDialogIndirectParamA
GetActiveWindow
ValidateRect
CallNextHookEx
SetWindowsHookExA
GetWindowThreadProcessId
DestroyMenu
UnhookWindowsHookEx
GetWindowDC
SendDlgItemMessageA
IsDialogMessageA
GetDlgCtrlID
GetWindowPlacement
IntersectRect
SetScrollInfo
GetScrollInfo
EqualRect
GetMessageTime
GetTopWindow
RemovePropA
GetClassLongA
GetCapture
WinHelpA
CopyAcceleratorTableA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
SetCapture
SetRect
ClientToScreen
GetWindowRect
DrawFocusRect
DrawTextA
GetSysColorBrush
IsWindow
FillRect
DrawEdge
GetSystemMetrics
DrawFrameControl
SetCursor
LoadCursorA
GetSysColor
DrawTextExA
OffsetRect
PtInRect
FrameRect
InvalidateRect
GetClientRect
EnableWindow
CopyRect
CharUpperA
LoadBitmapA
SendMessageA
GetParent
GetSubMenu
ExitWindowsEx
LoadMenuA
BringWindowToTop
RegisterWindowMessageA
ShowScrollBar
ReleaseDC
GetDC
InflateRect
RedrawWindow
LockWindowUpdate
SetWindowContextHelpId
PostMessageA
MapWindowPoints

gdi32

GetBkColor
Rectangle
GetTextExtentPoint32A
LineTo
MoveToEx
DeleteDC
CreateSolidBrush
DeleteObject
CreateDIBSection
CreatePen
CreateBitmap
SelectObject
RealizePalette
SelectPalette
GetDeviceCaps
CreateCompatibleBitmap
SetTextColor
StretchBlt
RoundRect
BitBlt
CreateFontIndirectA
GetObjectA
GetStockObject
GetSystemPaletteEntries
CreatePalette
GetCurrentObject
SetPaletteEntries
UnrealizeObject
GetSystemPaletteUse
GetDeviceGammaRamp
SetDeviceGammaRamp
SetSystemPaletteUse
SetPixelFormat
ChoosePixelFormat
SwapBuffers
DescribePixelFormat
PtVisible
RectVisible
TextOutA
SaveDC
RestoreDC
GetClipBox
SetDIBitsToDevice
CreateRoundRectRgn
ExtTextOutA
Escape
CreateRectRgn
SetMapMode
FillRgn
GetPixel
PlgBlt
PtInRegion
CreatePolygonRgn
SetBkColor
Ellipse
SetDIBColorTable
GetBitmapBits
CreateFontW
GetDIBits
CreateDCA
CreateCompatibleDC
GetRgnBox
GetTextColor
DPtoLP
GetMapMode
CreateRectRgnIndirect
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
SelectClipRgn
SetBkMode

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegEnumKeyExA
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryInfoKeyA
IsTextUnicode
RegEnumKeyA
OpenProcessToken

shell32

DragQueryFileA
ShellExecuteA
Shell_NotifyIconA
SHGetPathFromIDListA
SHBrowseForFolderA

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

PathFindFileNameA
PathFileExistsA
PathCombineA
PathRenameExtensionA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecA

oledlg

ord8

ole32

CLSIDFromProgID
CoCreateInstance
OleLockRunning
CreateStreamOnHGlobal
StringFromGUID2
CoGetClassObject
CLSIDFromString
CoTaskMemRealloc
CoTaskMemFree
OleInitialize
OleUninitialize
CoRevokeClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoTaskMemAlloc

oleaut32

VarUI4FromStr
OleCreateFontIndirect
SysStringLen
SysStringByteLen
LoadRegTypeLi
VariantInit
VariantClear
LoadTypeLi
SysAllocString
SysAllocStringLen
SysAllocStringByteLen
GetErrorInfo
OleLoadPicture
SysFreeString
VariantTimeToSystemTime
VariantCopy
SafeArrayDestroy
VariantChangeType
SystemTimeToVariantTime

Sections

.text
Size: 1.1MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 276KB - Virtual size: 274KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 280KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

777205179b304c4a590ce914df1153b6

Headers

File Characteristics

Imports

winmm

avcodec-52

avdevice-52

avformat-52

avutil-50

swscale-0

zlib1

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 1.1MB - Virtual size: 1.0MB

.rdata Size: 276KB - Virtual size: 274KB

.data Size: 280KB - Virtual size: 1.6MB

.rsrc Size: 96KB - Virtual size: 95KB

.text
Size: 1.1MB - Virtual size: 1.0MB

.rdata
Size: 276KB - Virtual size: 274KB

.data
Size: 280KB - Virtual size: 1.6MB

.rsrc
Size: 96KB - Virtual size: 95KB