dd50e82bd44bdd1d3940ad4a8b9ba3d0f5f157614fc9f9e5420541e79100783f

Sharing

Copy URL Twitter E-mail

General

Target

dd50e82bd44bdd1d3940ad4a8b9ba3d0f5f157614fc9f9e5420541e79100783f
Size

2.3MB
MD5

919ba881ae1207ade6c39891bf026ec1
SHA1

2c023b41e19e417849c2d6f3c1d97a6efc5bdf23
SHA256

dd50e82bd44bdd1d3940ad4a8b9ba3d0f5f157614fc9f9e5420541e79100783f
SHA512

ba5b0cb860b11ce57bc00c212c77b40edecccba3396d1d5046982fb91d070cbd6826796c9a79b25e61060a9653cb2b4f76afa5bda37002d005003e773f5fe55e
SSDEEP

49152:9eOC0ISJ8xCbr9rVLsoA4zRb8u1pWee4ncjBYmr+vd3:pvmir9hLsoA4zauTWetncWv

Score

N/A

Malware Config

Signatures

Files

dd50e82bd44bdd1d3940ad4a8b9ba3d0f5f157614fc9f9e5420541e79100783f
.exe windows x86

f43311eeda2afcec77a0d59d5652d660

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleW
SetEnvironmentVariableA
GetProcessHeap
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringA
GetConsoleMode
GetConsoleCP
LCMapStringW
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
QueryPerformanceCounter
VirtualFree
HeapCreate
GetStartupInfoA
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetStdHandle
HeapSize
GetFileType
SetStdHandle
CreateThread
ExitThread
RaiseException
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapReAlloc
GetSystemTimeAsFileTime
HeapFree
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
GetStartupInfoW
FindResourceExW
VirtualProtect
GetProfileIntW
GetTickCount
SearchPathW
GetTempPathW
GetTempFileNameW
SetErrorMode
GlobalFlags
GetCurrentDirectoryW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GlobalGetAtomNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
LocalAlloc
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetModuleHandleA
GlobalFindAtomW
GetVersionExW
CompareStringW
LoadLibraryA
GetVersionExA
GetCurrentProcessId
GlobalAddAtomW
FreeResource
WritePrivateProfileStringW
GetPrivateProfileIntW
GlobalDeleteAtom
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
lstrcmpW
lstrlenA
lstrcmpA
FindFirstFileW
FindNextFileW
FindClose
CreateEventW
SuspendThread
SetEvent
WaitForSingleObject
GetCurrentThreadId
SetThreadPriority
GlobalFree
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
SystemTimeToFileTime
DeleteCriticalSection
InitializeCriticalSection
lstrcmpiW
MulDiv
LoadLibraryExW
WinExec
lstrcatW
lstrcpyW
FreeLibrary
GetWindowsDirectoryW
FileTimeToLocalFileTime
FileTimeToSystemTime
GetUserDefaultLangID
GetModuleFileNameW
WriteFile
CreateFileW
InterlockedDecrement
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
lstrlenW
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
SetLastError
FindResourceW
LoadResource
LockResource
CopyFileW
SizeofResource
Sleep
ResumeThread
CreateProcessW
TerminateProcess
CloseHandle
OpenProcess
CreateFileA

user32

CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
UpdateWindow
CreateWindowExW
GetClassInfoExW
RegisterClassW
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetWindowThreadProcessId
GetLastActivePopup
ShowOwnedPopups
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
CheckMenuItem
MapVirtualKeyW
GetKeyNameTextW
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetDlgItem
EndDialog
WinHelpW
IsZoomed
PostQuitMessage
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
CreateMenu
PeekMessageW
ValidateRect
IsDialogMessageW
InsertMenuW
RemoveMenu
UnionRect
GetMenuState
GetMenuItemID
GetMenuItemCount
IsRectEmpty
GetWindowTextW
IsWindowEnabled
ChildWindowFromPoint
SetWindowRgn
SetRect
EqualRect
DefWindowProcW
GetClassInfoW
SetRectEmpty
GetClassNameW
SystemParametersInfoW
CopyIcon
LoadCursorW
IsWindow
PtInRect
ScreenToClient
GetMessagePos
MessageBeep
SetWindowLongW
FrameRect
LoadImageW
CreateIconIndirect
GetIconInfo
ReleaseDC
GetDC
GetSysColor
GetDoubleClickTime
SubtractRect
FillRect
DrawStateW
CharUpperBuffW
GetUpdateRect
PostMessageW
MessageBoxW
EnableWindow
OffsetRect
DrawFocusRect
InflateRect
CopyRect
TrackPopupMenuEx
GetWindowRect
GetActiveWindow
WindowFromPoint
ClientToScreen
SetCursor
GetParent
GetNextDlgTabItem
GetWindowLongW
DestroyIcon
DestroyMenu
DestroyCursor
SetWindowTextW
MoveWindow
ShowWindow
GetMenuItemInfoW
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
GetWindowDC
BeginPaint
EndPaint
CharUpperW
SetCapture
ReleaseCapture
RedrawWindow
KillTimer
SetTimer
InvalidateRect
GetSubMenu
EnableMenuItem
LoadMenuW
GetCursorPos
SetForegroundWindow
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
GetSysColorBrush
WaitMessage
DeleteMenu
PostThreadMessageW
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
LoadIconW
SendMessageW
GetNextDlgGroupItem
GetWindowRgn
GetSystemMenu
AppendMenuW
GetMenuStringW
MapDialogRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
IsClipboardFormatAvailable
MapVirtualKeyExW
IsCharLowerW
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
SetCursorPos
DrawFrameControl
DrawEdge
DrawIconEx
UnpackDDElParam
ReuseDDElParam
InsertMenuItemW
TranslateAcceleratorW
UnregisterClassW
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
OpenClipboard
RegisterClipboardFormatW
EnumChildWindows
LockWindowUpdate
BringWindowToTop
IsMenu
SetClassLongW
SetParent
CreatePopupMenu
NotifyWinEvent
CreateAcceleratorTableW
LoadAcceleratorsW
DestroyAcceleratorTable
GetKeyState
GetAsyncKeyState

gdi32

OffsetRgn
CreateRoundRectRgn
CreatePolygonRgn
CopyMetaFileW
CreateRectRgnIndirect
PatBlt
GetDCOrgEx
GetClipBox
ExtTextOutW
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
SetTextAlign
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
CombineRgn
CreateHatchBrush
SetRectRgn
DPtoLP
CreateEllipticRgn
LPtoDP
Ellipse
GetBkColor
GetRgnBox
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetTextColor
GetDIBits
RealizePalette
Polyline
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
GetBoundsRect
GetViewportOrgEx
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
GetTextFaceW
SetPixelV
SelectClipRgn
CreateRectRgn
FillRgn
FrameRgn
GetDeviceCaps
TextOutW
SetTextJustification
GetTextMetricsW
SetBkMode
LineTo
MoveToEx
CreatePen
CreateSolidBrush
StretchBlt
GetTextExtentPoint32W
CreateFontIndirectW
SetPixel
GetPixel
SetTextColor
SetBkColor
CreateBitmap
BitBlt
GetStockObject
CreateDIBSection
GetObjectW
CreateCompatibleDC
SetDIBColorTable
SelectObject
DeleteDC
GetObjectType
CreateCompatibleBitmap
DeleteObject

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegOpenKeyExW
RegEnumKeyExW
RegQueryValueExW
RegQueryValueW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegOpenKeyW
RegCloseKey

shell32

Shell_NotifyIconW
ShellExecuteW
ShellExecuteExW
SHGetFileInfoW
SHAppBarMessage
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
DragQueryFileW
DragFinish

comctl32

InitCommonControlsEx
_TrackMouseEvent
ord17
ImageList_GetImageCount
ImageList_GetIcon
ImageList_GetIconSize

shlwapi

StrStrIW
StrStrIA
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW

ole32

ReleaseStgMedium
CoTaskMemFree
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
OleDuplicateData
CoInitializeEx
CreateStreamOnHGlobal
OleLockRunning
DoDragDrop
OleGetClipboard
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop

oleaut32

VariantClear
VariantChangeType
SysAllocString
SysStringLen
SysAllocStringLen
VariantInit
GetErrorInfo
VariantCopy
SysFreeString

gdiplus

GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdiplusShutdown
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipFree
GdipAlloc
GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromFile

skinhu

SkinH_Attach

libcurl

curl_easy_perform
curl_easy_getinfo
curl_multi_cleanup
curl_multi_info_read
curl_multi_fdset
curl_multi_timeout
curl_multi_perform
curl_global_init
curl_easy_init
curl_global_cleanup
curl_easy_setopt
curl_easy_cleanup
curl_multi_init
curl_multi_add_handle

iphlpapi

GetAdaptersInfo

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

winmm

PlaySoundW

ws2_32

inet_addr
gethostbyname
htonl
inet_ntoa
select
ntohl
gethostname

wininet

HttpOpenRequestW
InternetConnectW
HttpSendRequestW
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetCloseHandle
HttpQueryInfoW
InternetGetConnectedStateExW
InternetQueryDataAvailable
InternetGetConnectedState
InternetSetOptionW

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 155KB - Virtual size: 155KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f43311eeda2afcec77a0d59d5652d660

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

gdiplus

skinhu

libcurl

iphlpapi

psapi

version

winmm

ws2_32

wininet

imm32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 316KB - Virtual size: 316KB

.data Size: 24KB - Virtual size: 54KB

.rsrc Size: 524KB - Virtual size: 524KB

.reloc Size: 155KB - Virtual size: 155KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 316KB - Virtual size: 316KB

.data
Size: 24KB - Virtual size: 54KB

.rsrc
Size: 524KB - Virtual size: 524KB

.reloc
Size: 155KB - Virtual size: 155KB