d1cfba37ec19c00c9eb96108d18b19403c700964618ba6cf0657c84d79818f04

Sharing

Copy URL Twitter E-mail

General

Target

d1cfba37ec19c00c9eb96108d18b19403c700964618ba6cf0657c84d79818f04
Size

3.6MB
MD5

30c627c687d0a1508d835faf7d58bcae
SHA1

28f6699ff05e93e89cfdcb8c85676b8c207d0495
SHA256

d1cfba37ec19c00c9eb96108d18b19403c700964618ba6cf0657c84d79818f04
SHA512

84669ed60935bed92763ec2e5c101e402e12a1ac1c599d093469149b8a8cc1a8f796ff8725729bd65608d84088a19287e488e39fcf6eaa02c6200d008de84292
SSDEEP

98304:uU/qiYP++5fobqkMnVsIVVNWs+38Lom4GTY26rD1FeToj9ghi1RebMIg9Cbk/V8:gxEqkuVVNWZuoD1FeTojDIg9Cbk/V8

Score

N/A

Malware Config

Signatures

Files

d1cfba37ec19c00c9eb96108d18b19403c700964618ba6cf0657c84d79818f04
.exe windows x86

b547b5ad351cdcd0158dac86795662a8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ddraw

DirectDrawCreateEx

kernel32

CreateFileW
SetEnvironmentVariableA
lstrlenA
GlobalFree
GlobalAlloc
FindResourceA
LoadResource
LockResource
SizeofResource
VirtualProtect
CreateFileA
DeviceIoControl
CloseHandle
GetLastError
SetPriorityClass
GetCurrentProcess
GetVersionExA
WideCharToMultiByte
FindResourceW
GetSystemTime
CreateMutexA
WriteConsoleW
ReleaseMutex
InterlockedIncrement
CompareStringW
InterlockedDecrement
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
GetModuleHandleA
GetModuleHandleW
DeactivateActCtx
CreateActCtxW
ReleaseActCtx
ActivateActCtx
SetLastError
FreeLibrary
MultiByteToWideChar
GlobalAddAtomA
GlobalGetAtomNameA
LoadLibraryA
GetCurrentProcessId
WaitForSingleObject
GlobalUnlock
GlobalLock
lstrcmpW
GetStringTypeW
IsProcessorFeaturePresent
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
HeapCreate
GetStdHandle
IsValidCodePage
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetFileType
SetStdHandle
HeapSize
HeapQueryInformation
ExitProcess
CreateThread
ExitThread
GetSystemTimeAsFileTime
VirtualQuery
GetSystemInfo
LoadLibraryW
GetConsoleMode
GetConsoleCP
GetModuleFileNameW
GetTimeZoneInformation
VirtualAlloc
HeapReAlloc
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
RaiseException
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
DecodePointer
EncodePointer
FindResourceExW
SearchPathA
GetProfileIntA
GetNumberFormatA
GetWindowsDirectoryA
GetTempPathA
Sleep
GetFileSizeEx
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetFileAttributesExA
SetErrorMode
FileTimeToSystemTime
GetACP
GetOEMCP
GetCPInfo
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
GetDiskFreeSpaceA
GetTempFileNameA
GetFileTime
SetFileTime
ReplaceFileA
SystemTimeToFileTime
GetPrivateProfileStringA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoA
lstrcpyA
CreateEventA
SuspendThread
SetEvent
ResumeThread
SetThreadPriority
GetCurrentDirectoryA
GetTickCount
GetFileAttributesA
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GlobalReAlloc
GetShortPathNameA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentThreadId
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
MoveFileA
DeleteFileA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
CopyFileA
GlobalSize
FormatMessageA
LocalFree
lstrlenW
GetModuleFileNameA
lstrcmpA
MulDiv
FreeResource

user32

GetKeyboardState
GetKeyboardLayout
ToAsciiEx
GetMenuDefaultItem
CopyAcceleratorTableA
MapVirtualKeyA
GetKeyNameTextA
RealChildWindowFromPoint
UnregisterClassA
SetCursorPos
SetLayeredWindowAttributes
EnumDisplayMonitors
DrawIcon
ShowOwnedPopups
WaitMessage
PostThreadMessageA
LoadAcceleratorsW
SetWindowContextHelpId
MapDialogRect
RegisterClipboardFormatA
PostQuitMessage
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
LoadCursorW
FrameRect
GetUpdateRect
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetMessageA
TranslateMessage
SetCapture
SetRect
GetSysColorBrush
DrawFrameControl
DrawEdge
GetDoubleClickTime
MonitorFromPoint
LockWindowUpdate
ValidateRect
MessageBeep
DrawIconEx
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
DrawStateA
IsClipboardFormatAvailable
IsMenu
GetMenuItemInfoA
LoadCursorA
GetSystemMenu
SetMenuDefaultItem
DeleteMenu
InflateRect
DestroyAcceleratorTable
SetClassLongA
GetAsyncKeyState
SystemParametersInfoA
NotifyWinEvent
CharUpperA
GetMenuStringA
AppendMenuA
InsertMenuA
RemoveMenu
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
FillRect
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
CreateAcceleratorTableA
CheckDlgButton
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
IsChild
SetWindowsHookExA
CallNextHookEx
SetPropA
GetPropA
RemovePropA
GetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
ScreenToClient
DeferWindowPos
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetClassNameA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
SetWindowPos
LoadImageA
DestroyIcon
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetKeyState
LoadIconW
SetCursor
PeekMessageA
ReleaseCapture
GetIconInfo
EnumChildWindows
SubtractRect
CopyIcon
CharUpperBuffA
GetNextDlgGroupItem
GetTabbedTextExtentW
MapVirtualKeyExA
IsCharLowerA
GetWindowRgn
CreateMenu
LoadAcceleratorsA
SetActiveWindow
InsertMenuItemA
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
GetClassInfoA
IntersectRect
GetMenu
GetLastActivePopup
BringWindowToTop
HideCaret
InvertRect
DestroyCursor
InvalidateRgn
CharNextA
SetMenu
GetDesktopWindow
ShowWindow
GetWindowLongA
TranslateAcceleratorA
UnhookWindowsHookEx
IsWindow
DestroyWindow
GetSystemMetrics
GetClassLongA
SetForegroundWindow
SetParent
GetTopWindow
GetCapture
IsWindowVisible
SetWindowRgn
IsZoomed
IsIconic
GetWindow
GetScrollInfo
InvalidateRect
EqualRect
SetTimer
KillTimer
GetClientRect
UpdateWindow
ReleaseDC
OffsetRect
CopyRect
GetSysColor
DrawFocusRect
GetDC
GetWindowRect
SetRectEmpty
GetParent
GetSubMenu
LoadMenuW
EnableWindow
wsprintfA
PtInRect
GetCursorPos
RedrawWindow
IsRectEmpty
MessageBoxA
ClientToScreen
SendMessageA
PostMessageA
WindowFromPoint

gdi32

SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocA
PtVisible
RectVisible
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
GetDeviceCaps
CreatePen
CreateSolidBrush
CreateHatchBrush
CopyMetaFileA
CreateDCA
SetDIBColorTable
PatBlt
GetDIBits
RealizePalette
CombineRgn
StretchBlt
SetPixel
CreateEllipticRgn
CreatePolygonRgn
Polyline
Polygon
Rectangle
RoundRect
CreateFontIndirectA
CreateRoundRectRgn
SetRectRgn
GetMapMode
DPtoLP
LPtoDP
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetCharWidthA
OffsetRgn
GetRgnBox
CreatePalette
GetViewportOrgEx
GetWindowOrgEx
GetSystemPaletteEntries
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
GetNearestColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextAlign
GetTextFaceA
GetTextExtentPointA
GetTextExtentPoint32W
EnumFontFamiliesExA
SetPixelV
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
CreateBitmap
SetBkColor
CreateDIBSection
DeleteObject
GetObjectA
SelectObject
DeleteDC
BitBlt
GetBkColor
GetTextColor
CreateCompatibleBitmap
CreateCompatibleDC
GetTextMetricsA
GetTextExtentPoint32A
GetStockObject
GetPaletteEntries
GetNearestPaletteIndex
StretchDIBits
Ellipse
TextOutA
CreateRectRgnIndirect
SetTextColor

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
GetJobA
OpenPrinterA
DocumentPropertiesA

advapi32

GetFileSecurityA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegSetValueA
RegOpenKeyExW
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegDeleteValueA
RegEnumValueA
RegEnumKeyExA
SetFileSecurityA
RegCreateKeyA

shell32

SHBrowseForFolderA
DragFinish
ShellExecuteA
DragAcceptFiles
SHGetFileInfoA
SHAppBarMessage
SHAddToRecentDocs
ExtractIconA
DragQueryFileA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
SHGetDesktopFolder

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathRemoveFileSpecW
PathIsUNCA

ole32

StgCreateDocfileOnILockBytes
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoGetClassObject
OleLockRunning
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CreateStreamOnHGlobal
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
DoDragDrop
CoInitialize
CoTaskMemFree
CLSIDFromString

oleaut32

VariantClear
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocString
SysAllocStringByteLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType

oledlg

ord8

gdiplus

GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdipDrawImageI

iphlpapi

GetAdaptersInfo

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 347KB - Virtual size: 346KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 174KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b547b5ad351cdcd0158dac86795662a8

Headers

DLL Characteristics

File Characteristics

Imports

ddraw

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

iphlpapi

oleacc

imm32

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 347KB - Virtual size: 346KB

.data Size: 35KB - Virtual size: 70KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 174KB - Virtual size: 174KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 347KB - Virtual size: 346KB

.data
Size: 35KB - Virtual size: 70KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 174KB - Virtual size: 174KB