1f1a30d3e6630179e68ef0def446b91447ec4ce8e03ddc272fd4975a9eefa16f

Sharing

Copy URL Twitter E-mail

General

Target

1f1a30d3e6630179e68ef0def446b91447ec4ce8e03ddc272fd4975a9eefa16f
Size

3.1MB
MD5

dd229bcba29e3e576fe7b513932521c6
SHA1

d0d6b41190d5f7ef73d7bee730a541e08b7d2ae5
SHA256

1f1a30d3e6630179e68ef0def446b91447ec4ce8e03ddc272fd4975a9eefa16f
SHA512

e88ea7267e92bceff9636ecdfd78566aeaeddc02f55742f1bf0770b78e9f9104aa3e3a2acd345a7867ad412691e31fbe81fac1e7e22208f19d7cf2ff043871ae
SSDEEP

98304:djf2oMTwlow9anwEvyDCvXuDKMCHbe3baKBv3xKHw4kQeRgOGAsnHzQdWTmhTf/0:IMow9anwEvyDCvXuDKMCHbe3baKBv3xw

Score

N/A

Malware Config

Signatures

Files

1f1a30d3e6630179e68ef0def446b91447ec4ce8e03ddc272fd4975a9eefa16f
.exe windows x86

b2526854016b1d9cfcd3efd4d139b41e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

waveOutUnprepareHeader
waveOutPrepareHeader
waveOutWrite
waveOutPause
waveOutReset
waveOutGetNumDevs
waveOutOpen
midiOutUnprepareHeader
midiStreamOpen
midiStreamProperty
waveOutClose
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
midiStreamOut
midiOutPrepareHeader

ws2_32

inet_ntoa
WSACleanup
closesocket
WSAAsyncSelect
recvfrom
ioctlsocket
recv
accept
getpeername

kernel32

IsBadWritePtr
VirtualAlloc
LCMapStringW
LCMapStringA
SetEnvironmentVariableA
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
GetLocalTime
GetSystemTime
GetSystemTimeAsFileTime
RaiseException
RtlUnwind
GetStartupInfoA
GetOEMCP
GetProcessVersion
SetErrorMode
GetACP
GetCurrentThread
GetFileTime
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetThreadLocale
GetStringTypeExA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
SetLastError
GlobalFlags
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
GetTempFileNameA
GetVersion
lstrcmpiA
IsDBCSLeadByteEx
IsValidCodePage
GetCPInfo
MultiByteToWideChar
GetLocaleInfoA
WideCharToMultiByte
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
ReadFile
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
lstrlenW
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
WritePrivateProfileStringA
CreateThread
CreateEventA
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
GetFileAttributesA
DeleteFileA
CopyFileA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
MulDiv
GetCommandLineA
GetTickCount
WaitForSingleObject
CloseHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
InterlockedExchange
VirtualProtect
VirtualQuery
GetSystemInfo
InterlockedCompareExchange
GetFileType

user32

GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
WindowFromPoint
EnableMenuItem
DrawFocusRect
DrawEdge
DrawFrameControl
LoadIconA
TranslateMessage
GetKeyboardLayout
EndPaint
BeginPaint
MsgWaitForMultipleObjects
GetMessageTime
ScrollWindow
SetCaretPos
SetScrollInfo
GetScrollInfo
CreateWindowExA
RegisterClassExA
UnregisterClassA
ShowCaret
CreateCaret
DestroyCaret
HideCaret
DestroyWindow
SetWindowTextA
MapWindowPoints
DrawTextA
DrawTextW
AdjustWindowRectEx
CallWindowProcA
GetDoubleClickTime
SetWindowsHookExA
UnhookWindowsHookEx
EnumThreadWindows
GetWindowTextLengthA
GetClassNameA
EnumChildWindows
CallNextHookEx
GetWindowDC
GetSysColorBrush
FrameRect
GetWindowTextA
GetDesktopWindow
ClientToScreen
EnumDisplaySettingsA
LoadImageA
SystemParametersInfoA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetClassInfoA
DefWindowProcA
GetSystemMenu
DeleteMenu
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetSubMenu
GetDlgItem
FindWindowExA
GetDlgCtrlID
PostThreadMessageA
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
SetRect
InflateRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
EnableWindow
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
IsRectEmpty
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBeep
MessageBoxA
GetCursorPos
GetSystemMetrics
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
GetNextDlgGroupItem
LoadStringA
MapDialogRect
SetWindowContextHelpId
CharNextA
GetMenuCheckMarkDimensions
GetMenuState
SetMenuItemBitmaps
CheckMenuItem
MoveWindow
IsDialogMessageA
ScrollWindowEx
CharUpperA
TabbedTextOutA
GrayStringA
CreateDialogIndirectParamA
EndDialog
GetNextDlgTabItem
GetWindowPlacement
RegisterWindowMessageA
GetForegroundWindow
GetLastActivePopup
RemovePropA
GetPropA
SetPropA
GetClassLongA
GetMenuItemID
GetMenuItemCount
RegisterClassA
GetScrollPos
SendDlgItemMessageA

gdi32

RestoreDC
SaveDC
CreateEllipticRgn
CreateRoundRectRgn
GetTextColor
GetBkMode
GetBkColor
GetROP2
GetStretchBltMode
GetPolyFillMode
CreateCompatibleBitmap
CreateDCA
CreateBitmap
CreatePatternBrush
SelectObject
CreatePen
PatBlt
CombineRgn
CreateRectRgn
FillRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetPixel
CreateCompatibleDC
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
SetPolyFillMode
Arc
Polygon
GetTextExtentPoint32A
GetDeviceCaps
GetDIBits
RealizePalette
SelectPalette
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreatePolygonRgn
GetClipRgn
SetStretchBltMode
SetPixel
CreateRectRgnIndirect
SetBkColor
TranslateCharsetInfo
SetTextAlign
GetNearestColor
MoveToEx
LineTo
ExtTextOutA
ExtTextOutW
SetTextColor
SetBkMode
GetTextExtentPoint32W
GetTextExtentExPointA
GetTextExtentExPointW
GetTextMetricsA
IntersectClipRect
CreateEllipticRgnIndirect
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
ExcludeClipRect
ExtSelectClipRgn
GetViewportExtEx
PtVisible
RectVisible
TextOutA
Escape
GetMapMode
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
StretchBlt
GetWindowExtEx

msimg32

GradientFill

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegOpenKeyExA
RegSetValueExA
RegQueryValueA
RegCreateKeyExA
RegCloseKey

shell32

ShellExecuteA
DragQueryFileA
Shell_NotifyIconA

ole32

CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
ReleaseStgMedium
RegisterDragDrop
RevokeDragDrop
OleInitialize
OleUninitialize
CLSIDFromString
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CLSIDFromProgID
DoDragDrop

oleaut32

SysFreeString
UnRegisterTypeLi
OleCreateFontIndirect
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SysAllocString
VariantCopyInd
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
VariantClear
VariantCopy
SafeArrayGetElemsize
SysAllocStringByteLen
VariantInit
VariantTimeToSystemTime
SysStringLen
SysAllocStringLen

comctl32

_TrackMouseEvent
ord17
ImageList_Destroy

oledlg

ord8

imm32

ImmReleaseContext
ImmGetCompositionStringW
ImmGetContext
ImmNotifyIME
ImmSetCompositionFontA
ImmSetCompositionWindow

wldap32

ord29

comdlg32

ChooseColorA
ChooseFontA
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA

Exports

Exports

_Scintilla_DirectFunction@16

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 326KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b2526854016b1d9cfcd3efd4d139b41e

Headers

File Characteristics

Imports

winmm

ws2_32

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

ole32

oleaut32

comctl32

oledlg

imm32

wldap32

comdlg32

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 96KB - Virtual size: 326KB

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 96KB - Virtual size: 326KB

.rsrc
Size: 28KB - Virtual size: 24KB