de62715f2ef3f7f22e8eaea2720f05351a473c1d8dc5954e4193e400d2ed7580

Sharing

Copy URL Twitter E-mail

General

Target

de62715f2ef3f7f22e8eaea2720f05351a473c1d8dc5954e4193e400d2ed7580
Size

5.3MB
MD5

47fe6391834ee24ff0dfc6a4f3254e37
SHA1

a8a3d09e72581f07a49a92873a8bedf1ca9259c6
SHA256

de62715f2ef3f7f22e8eaea2720f05351a473c1d8dc5954e4193e400d2ed7580
SHA512

5efaa7cc9f82f4b4a2b17ee6f4a60dd4028b8937e32966813bbf817b42dc480bf4b6cc07a1170f49685198a21a9cced55667ebee9cd19590e6dbe51f1dcbb713
SSDEEP

49152:Ycm4TWw+K3UVgx9iXouogrDhp9rgkR+NE7O14es5mURFr+LtSEd1M+3xmWUbYlM2:YqywJUVY9iXXtaxl0usO1x3xmWUUK2

Score

N/A

Malware Config

Signatures

Files

de62715f2ef3f7f22e8eaea2720f05351a473c1d8dc5954e4193e400d2ed7580
.exe windows x86

a3e714ac5fe2073cdeaec3f615a1dfb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

raptra30u

RTGetLanguageFileBitmap
RTEnd
RTGetLanguageFileParams
RTGetLanguageParams
RTAddThread
RTStart
RTSwitchLanguage
RTTranslateString

odbc32

ord141
ord145
ord15
ord150
ord3
ord4
ord5
ord12
ord13
ord16
ord43
ord18
ord48
ord49
ord20
ord51
ord72
ord108
ord111
ord119
ord110
ord1
ord2
ord9
ord14
ord23

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

avifil32

AVIFileInfoW
AVIStreamRelease
AVIFileGetStream
AVIFileOpenW
AVIFileRelease
AVIFileExit
AVIFileInit

winmm

mmioOpenW
mmioClose
mmioDescend
mmioWrite
mmioRead
mmioStringToFOURCCW

quartz

AMGetErrorTextW

mfc140u

ord7071
ord5039
ord13235
ord7432
ord4108
ord1105
ord7992
ord6598
ord12601
ord14327
ord14508
ord5027
ord5026
ord5029
ord5025
ord5024
ord8304
ord9509
ord9524
ord9514
ord9986
ord9991
ord9526
ord11746
ord11122
ord9011
ord11146
ord10047
ord10048
ord6876
ord9226
ord12123
ord12088
ord9467
ord13940
ord5397
ord2680
ord11117
ord7787
ord11275
ord11278
ord10827
ord3939
ord984
ord3367
ord5127
ord1460
ord7137
ord511
ord1149
ord10504
ord9528
ord3173
ord12176
ord8920
ord8912
ord13754
ord6219
ord7504
ord7165
ord5837
ord14239
ord8476
ord14507
ord3695
ord6526
ord3162
ord13922
ord6226
ord6196
ord6547
ord13961
ord13125
ord2778
ord6842
ord3260
ord3366
ord8070
ord4239
ord1454
ord9138
ord6117
ord555
ord8509
ord1659
ord1186
ord6801
ord3237
ord3359
ord1405
ord3693
ord13719
ord11235
ord11021
ord9042
ord11169
ord11934
ord6309
ord11000
ord3238
ord5036
ord1928
ord2594
ord9253
ord3054
ord9225
ord6531
ord6225
ord6380
ord13646
ord7963
ord3954
ord12953
ord12867
ord13084
ord4648
ord3869
ord364
ord4143
ord2865
ord6882
ord11392
ord13654
ord5850
ord13656
ord5669
ord7891
ord3326
ord7509
ord6570
ord3175
ord3342
ord4223
ord1162
ord9130
ord6849
ord3262
ord1461
ord7645
ord6120
ord5176
ord7487
ord7130
ord5582
ord13412
ord14530
ord11468
ord10142
ord10595
ord10499
ord10141
ord10264
ord11735
ord10531
ord9017
ord9120
ord9292
ord10994
ord5771
ord5583
ord5875
ord5173
ord13337
ord8067
ord3806
ord3183
ord14416
ord4133
ord908
ord1403
ord3957
ord7686
ord7810
ord14128
ord10380
ord460
ord7378
ord914
ord8977
ord11333
ord10570
ord1408
ord12216
ord7626
ord6248
ord1411
ord12217
ord5852
ord3804
ord3684
ord6825
ord3246
ord3362
ord1433
ord6956
ord14409
ord971
ord12429
ord1449
ord2899
ord2473
ord14261
ord5110
ord5590
ord2470
ord12744
ord12611
ord2471
ord6501
ord8520
ord13944
ord12679
ord6593
ord8506
ord12692
ord7961
ord937
ord7697
ord14380
ord1420
ord6555
ord5514
ord500
ord11962
ord14606
ord2885
ord2172
ord6395
ord976
ord1452
ord492
ord954
ord8482
ord14451
ord12251
ord4113
ord4179
ord4209
ord4251
ord4285
ord4255
ord3842
ord8339
ord12457
ord8172
ord12171
ord12098
ord12078
ord14578
ord13981
ord6848
ord3261
ord13576
ord2945
ord5841
ord5130
ord13319
ord13321
ord2650
ord2626
ord11716
ord11776
ord8992
ord4973
ord7644
ord8177
ord13471
ord12598
ord997
ord1474
ord847
ord7410
ord2457
ord7441
ord2350
ord3696
ord5425
ord6572
ord3176
ord3343
ord1163
ord5695
ord2178
ord6750
ord823
ord13962
ord13255
ord12639
ord1354
ord13148
ord2384
ord346
ord1060
ord2874
ord4155
ord841
ord12552
ord2535
ord5579
ord8157
ord842
ord2614
ord13359
ord951
ord3968
ord1430
ord9416
ord10436
ord7888
ord3961
ord10383
ord12145
ord1788
ord4383
ord4019
ord8387
ord12948
ord14181
ord5955
ord9270
ord8988
ord14512
ord9302
ord10512
ord8894
ord10376
ord7178
ord561
ord3278
ord7808
ord12108
ord8401
ord9353
ord12182
ord11804
ord9216
ord11798
ord3845
ord5035
ord13710
ord13708
ord3835
ord9239
ord9428
ord11545
ord7514
ord13282
ord2624
ord4381
ord968
ord3258
ord3364
ord4237
ord1447
ord2649
ord12121
ord2653
ord8991
ord11775
ord9136
ord6115
ord14600
ord14598
ord7642
ord14056
ord11633
ord7066
ord7395
ord11100
ord7379
ord922
ord10498
ord7627
ord6840
ord5954
ord11581
ord2469
ord10426
ord822
ord1353
ord13985
ord13602
ord12596
ord13224
ord4453
ord12711
ord13885
ord508
ord4094
ord5170
ord14371
ord7906
ord8848
ord4287
ord2105
ord9080
ord5666
ord5668
ord6815
ord2732
ord6894
ord6287
ord5800
ord1424
ord975
ord12680
ord1891
ord2010
ord12644
ord4672
ord1451
ord6901
ord2534
ord3970
ord2224
ord324
ord1052
ord14127
ord8100
ord7406
ord5664
ord4171
ord13469
ord7408
ord966
ord3256
ord3644
ord6469
ord13924
ord5221
ord13379
ord6263
ord7926
ord9919
ord9581
ord3621
ord3903
ord14265
ord14263
ord3888
ord3856
ord5038
ord13226
ord2692
ord1794
ord4089
ord4140
ord4141
ord1444
ord3285
ord7907
ord5756
ord5688
ord4173
ord13973
ord6932
ord14276
ord14289
ord9254
ord11001
ord10623
ord11582
ord7638
ord2356
ord4797
ord1704
ord14675
ord14042
ord5322
ord6881
ord10912
ord11905
ord8884
ord4571
ord6884
ord13042
ord13936
ord13937
ord13935
ord6880
ord13458
ord483
ord1642
ord1643
ord1632
ord1633
ord13694
ord14115
ord13946
ord13062
ord5968
ord6554
ord11080
ord12246
ord3580
ord8386
ord14112
ord14123
ord4466
ord12541

kernel32

VirtualQuery
GetModuleHandleW
VirtualProtect
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
OutputDebugStringW
WaitForSingleObjectEx
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetSystemInfo
ExpandEnvironmentStringsA
GetFileAttributesW
LoadLibraryExA
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
GetFileInformationByHandle
CreateMutexW
ReleaseMutex
GetCurrentProcessId
CreateThread
GetLocalTime
lstrlenA
SystemTimeToFileTime
SetFileTime
SetFilePointer
LocalFileTimeToFileTime
GetTempFileNameW
Beep
MultiByteToWideChar
InitializeCriticalSectionEx
RaiseException
DecodePointer
CreateEventW
GetVersion
GetUserDefaultLCID
GetWindowsDirectoryW
GetTempPathW
GetVolumeInformationW
GetFileTime
GetDiskFreeSpaceExW
ExpandEnvironmentStringsW
GetCurrentDirectoryW
WaitForMultipleObjects
WaitForSingleObject
ResetEvent
SetEvent
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetFileAttributesExW
GetSystemDirectoryW
GetLogicalDriveStringsW
RemoveDirectoryW
GetUserDefaultLangID
lstrcmpW
SetThreadLocale
LocalAlloc
lstrlenW
LoadLibraryExW
SetLastError
GetTickCount
Sleep
FileTimeToSystemTime
GetVersionExW
FileTimeToLocalFileTime
lstrcmpiW
ConvertDefaultLocale
GetLocaleInfoW
GetCurrentThreadId
SearchPathW
GetLastError
CloseHandle
WriteFile
ReadFile
CreateFileW
lstrcpynW
MoveFileW
GetDriveTypeW
DeleteFileW
CreateDirectoryW
FormatMessageW
LocalFree
GetThreadLocale
WideCharToMultiByte
FindResourceW
LoadLibraryW
lstrcpyW
MulDiv
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
GetProcAddress
GetModuleFileNameW
FreeResource
FreeLibrary
UnhandledExceptionFilter

user32

IsWindowEnabled
GetFocus
CharLowerW
IsClipboardFormatAvailable
IsChild
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
TranslateAcceleratorW
LoadAcceleratorsW
IsIconic
RemoveMenu
GetAsyncKeyState
GetMessagePos
DrawFocusRect
CopyIcon
DestroyCursor
LoadCursorW
GetCursor
SetCursor
ReleaseDC
GetDC
ReleaseCapture
SetCapture
GetClassInfoW
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW
DrawFrameControl
GetDlgCtrlID
IsWindowVisible
IsWindow
SystemParametersInfoW
PtInRect
IsRectEmpty
OffsetRect
InflateRect
SetRectEmpty
FrameRect
GetSysColorBrush
GetSysColor
GetCursorPos
WindowFromDC
SetMenuItemInfoW
GetMenuItemInfoW
EndMenu
GetMenuItemCount
GetMenuItemID
EnableMenuItem
GetKeyState
DrawEdge
CreateIconIndirect
IsZoomed
SetRect
FillRect
PeekMessageW
GetClassNameW
wsprintfW
ScreenToClient
ClientToScreen
GetSubMenu
LoadMenuW
InvalidateRect
GetIconInfo
DrawIconEx
LoadImageW
DestroyIcon
GetWindow
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
CopyRect
MapWindowPoints
GetWindowRect
GetClientRect
UpdateWindow
GetSystemMetrics
EnableWindow
KillTimer
SetTimer
GetDlgItem
MoveWindow
DestroyWindow
CreateWindowExW
CallWindowProcW
PostMessageW
SendMessageW
RedrawWindow
GetMenuState
ModifyMenuW
SetMenuDefaultItem
GetCapture
DrawStateW
WindowFromPoint
DrawTextW
UnionRect
GetNextDlgGroupItem
GetNextDlgTabItem
AdjustWindowRectEx
GetCaretBlinkTime
RegisterClassW
DrawIcon
BeginDeferWindowPos
EndDeferWindowPos
SetParent
IntersectRect
LoadBitmapW
ShowScrollBar
IsWindowUnicode
GetForegroundWindow
MonitorFromWindow
GetMonitorInfoW
GetAncestor
SetWindowRgn
GetMenu
LoadIconW
EqualRect
GetDoubleClickTime
DeleteMenu
CreatePopupMenu
CheckMenuItem
AppendMenuW
GetLastActivePopup
MessageBeep
SetActiveWindow
InsertMenuItemW
SetWindowPos
GetKeyNameTextW
MapVirtualKeyW
RegisterClipboardFormatW
DrawMenuBar
ShowWindow
BringWindowToTop
GetSystemMenu
TrackPopupMenu
GetWindowDC
GetClassLongW
GetTopWindow
GetWindowTextW
TrackMouseEvent
RegisterWindowMessageW

gdi32

ExcludeClipRect
LineTo
GetBkColor
EnumFontFamiliesExW
CreateSolidBrush
GetTextColor
DPtoLP
AbortDoc
EndPage
StartPage
EndDoc
StartDocW
SetPixel
GetMapMode
Polyline
GetMiterLimit
SetMiterLimit
CreateEllipticRgn
CombineRgn
CreateDIBitmap
UnrealizeObject
SetBrushOrgEx
CreateHatchBrush
StretchDIBits
Ellipse
CreatePatternBrush
PlayEnhMetaFile
GetEnhMetaFileHeader
GetEnhMetaFileW
DeleteEnhMetaFile
Polygon
SetBkMode
DeleteObject
GetTextMetricsW
CreateRectRgnIndirect
CreatePenIndirect
GetDeviceCaps
Escape
ExtTextOutW
CreatePolygonRgn
StretchBlt
PtInRegion
PlgBlt
GetPixel
FillRgn
CreateBitmap
BitBlt
LPtoDP
CreateCompatibleDC
CreateCompatibleBitmap
PatBlt
GetDIBits
SelectObject
GetObjectW
Rectangle
GetTextExtentPoint32W
GetStockObject
CreatePen
CreateFontIndirectW
MoveToEx

msimg32

GradientFill
AlphaBlend

advapi32

RegDeleteKeyW
RegOverridePredefKey
RegEnumKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegOpenKeyExA
RegCreateKeyExW
RegCloseKey
GetUserNameW
RegQueryValueExA

shell32

ShellExecuteW
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
SHFileOperationW
ExtractIconW
ExtractIconExW
SHGetSpecialFolderPathW
SHGetMalloc

comctl32

ImageList_DragMove
ImageList_DragShowNolock
ImageList_GetIcon
ImageList_Draw
ImageList_DragLeave
ImageList_Replace
ImageList_GetImageInfo
ImageList_ReplaceIcon
ImageList_DragEnter
ImageList_EndDrag
ImageList_BeginDrag
_TrackMouseEvent
ImageList_AddMasked
ImageList_LoadImageW
ImageList_Destroy
ImageList_SetImageCount
ImageList_SetBkColor
ImageList_GetIconSize
ImageList_GetDragImage
ImageList_SetOverlayImage

shlwapi

PathAppendW
PathAddExtensionW
PathAddBackslashW
StrFormatByteSizeW
PathRemoveExtensionW
PathIsSameRootW
PathCanonicalizeW
PathFindFileNameW
PathIsDirectoryW
PathFindExtensionW
PathFileExistsW
SHCreateStreamOnFileW
PathIsRelativeW
PathCombineW
PathIsURLW
PathMatchSpecW
PathRelativePathToW
PathRemoveBackslashW
PathRenameExtensionW
PathSkipRootW
PathStripToRootW
PathFindNextComponentW
StrFromTimeIntervalW

ole32

CoInitializeEx
GetRunningObjectTable
CreateItemMoniker
StringFromCLSID
BindMoniker
CLSIDFromString
CoTaskMemAlloc
StgCreateDocfile
CoTaskMemFree
StringFromGUID2
CreateILockBytesOnHGlobal
OleDuplicateData
OleSetContainedObject
OleCreateStaticFromData
StgCreateDocfileOnILockBytes
CoInitialize
CoFreeUnusedLibraries
CoUninitialize
OleRun
CoLoadLibrary
CoCreateInstance
CreateStreamOnHGlobal

oleaut32

SysStringByteLen
SysAllocString
SysFreeString
VariantInit
VariantClear
VariantCopy
VariantChangeType
OleCreatePropertyFrame
OleLoadPicturePath
OleCreatePictureIndirect
VarDateFromStr
GetErrorInfo
SysAllocStringByteLen
SystemTimeToVariantTime
SysStringLen
VarUdateFromDate
VarBstrFromDate
VariantTimeToSystemTime
OleLoadPicture

urlmon

IsValidURL

vcruntime140

__vcrt_InitializeCriticalSectionEx
__CxxDetectRethrow
_except_handler4_common
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
_purecall
__CxxFrameHandler3
memcpy
memset
_CxxThrowException
__CxxUnregisterExceptionObject
__FrameUnwindFilter
wcsstr
wcsrchr
wcschr
memmove
__std_terminate

api-ms-win-crt-utility-l1-1-0

srand
rand
ldiv
qsort

api-ms-win-crt-time-l1-1-0

_mktime64
_localtime64_s
wcsftime
_time64

api-ms-win-crt-runtime-l1-1-0

terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_seh_filter_exe
_errno
_invalid_parameter_noinfo
_controlfp_s
abort

api-ms-win-crt-string-l1-1-0

_wcsicmp
wcsncmp
_wcsdup
_wcsnicmp
isdigit
iswspace
iswdigit
wcsncpy

api-ms-win-crt-stdio-l1-1-0

__p__commode
__stdio_common_vsscanf
__stdio_common_vsprintf
__stdio_common_vswprintf_s
__stdio_common_vswprintf
__stdio_common_vswscanf
_set_fmode

api-ms-win-crt-convert-l1-1-0

wcstol
_fcvt
wcstod
wcstoul
_wtol
_ultow
_wtoi
_ltow
_itow

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
_wsetlocale
localeconv

api-ms-win-crt-math-l1-1-0

_libm_sse2_pow_precise
modf
__setusermatherr
ceil
floor
_libm_sse2_sqrt_precise
_except1

api-ms-win-crt-heap-l1-1-0

malloc
free
_set_new_mode
calloc

mscoree

_CorExeMain

Sections

.text
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 58KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 876KB - Virtual size: 876KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a3e714ac5fe2073cdeaec3f615a1dfb5

Headers

DLL Characteristics

File Characteristics

Imports

raptra30u

odbc32

version

avifil32

winmm

quartz

mfc140u

kernel32

user32

gdi32

msimg32

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

urlmon

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

mscoree

Sections

.text Size: 3.3MB - Virtual size: 3.3MB

.rdata Size: 1.1MB - Virtual size: 1.1MB

.data Size: 58KB - Virtual size: 64KB

.gfids Size: 512B - Virtual size: 56B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 876KB - Virtual size: 876KB

.text
Size: 3.3MB - Virtual size: 3.3MB

.rdata
Size: 1.1MB - Virtual size: 1.1MB

.data
Size: 58KB - Virtual size: 64KB

.gfids
Size: 512B - Virtual size: 56B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 876KB - Virtual size: 876KB