8d6765cb07fcd246d897eab816dd450c6305780a30d61b87645e74a45b1dfa7f

Sharing

Copy URL

Twitter E-mail

General

Target

8d6765cb07fcd246d897eab816dd450c6305780a30d61b87645e74a45b1dfa7f
Size

576KB
MD5

46902b17e76beaf9f32991e480c32639
SHA1

098e805612c7957b822e3459c23bef042944eca3
SHA256

8d6765cb07fcd246d897eab816dd450c6305780a30d61b87645e74a45b1dfa7f
SHA512

7770675a7b71430530b7b3c15cc8cbcc78fa95d0da73c31091f70060f6c772fd6049a695df5e559b7cecb313f647e8db35d024c1df9eb066d0c94c82d7f16b62
SSDEEP

12288:fSXYIlZRs4sp5YetNXmbna/g7J0qa9mPLt:fSXYIlZ64OtNXTk29mjt

Score

N/A

Malware Config

Signatures

Files

8d6765cb07fcd246d897eab816dd450c6305780a30d61b87645e74a45b1dfa7f
.exe windows x86

016fa828a50fd8474d1051c07e2d5385

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

skinmagic

ord9
ord8
ord7
ord1
ord3

winmm

PlaySoundA

mfc42

ord2642
ord2915
ord5860
ord922
ord941
ord2818
ord535
ord3499
ord2515
ord355
ord2614
ord2859
ord2639
ord5606
ord3301
ord924
ord3302
ord4224
ord3874
ord2379
ord6334
ord3873
ord2714
ord6880
ord755
ord470
ord2086
ord4123
ord3744
ord1175
ord1768
ord5572
ord926
ord6930
ord6928
ord6874
ord4275
ord1844
ord4400
ord682
ord3626
ord3663
ord2414
ord2567
ord4133
ord4297
ord5788
ord3089
ord2860
ord472
ord2754
ord6654
ord2862
ord640
ord5785
ord1640
ord323
ord5053
ord3571
ord2971
ord5759
ord6192
ord5756
ord6186
ord4330
ord6189
ord6021
ord6172
ord5873
ord5789
ord5794
ord5678
ord5736
ord5579
ord5571
ord6061
ord5864
ord3596
ord6194
ord1641
ord4243
ord3370
ord2582
ord4402
ord3640
ord693
ord384
ord686
ord6242
ord2863
ord3706
ord5781
ord5875
ord3797
ord3619
ord6762
ord2864
ord3286
ord3293
ord283
ord6007
ord3998
ord6907
ord6453
ord6905
ord955
ord3021
ord809
ord556
ord1088
ord2122
ord6358
ord6605
ord1099
ord1574
ord1862
ord4220
ord2584
ord3654
ord2438
ord6142
ord4083
ord3573
ord3693
ord2763
ord4277
ord2405
ord2096
ord2408
ord807
ord2920
ord2012
ord2120
ord554
ord4163
ord1644
ord1146
ord2919
ord939
ord940
ord5787
ord1621
ord2764
ord4202
ord5856
ord536
ord2452
ord2753
ord1195
ord5440
ord6383
ord5450
ord6394
ord4774
ord5981
ord6270
ord613
ord289
ord4160
ord6197
ord6111
ord4284
ord3092
ord6215
ord2370
ord2289
ord500
ord541
ord567
ord823
ord3610
ord3402
ord5290
ord1776
ord6055
ord3582
ord4398
ord2578
ord4218
ord2023
ord2411
ord3716
ord3698
ord3721
ord3574
ord4396
ord2575
ord3701
ord4129
ord858
ord5683
ord4278
ord540
ord860
ord4710
ord6199
ord537
ord4234
ord2302
ord324
ord3597
ord4425
ord4627
ord5277
ord2124
ord2446
ord5261
ord1727
ord5065
ord3749
ord6376
ord2055
ord2648
ord4441
ord4837
ord3798
ord5280
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord4998
ord4853
ord4376
ord5265
ord2725
ord1134
ord1168
ord1200
ord2621
ord2514
ord800
ord656
ord616
ord609
ord790
ord795
ord765
ord801
ord772
ord641
ord815
ord825
ord561
ord3738
ord4424
ord4622
ord4080
ord3079
ord3825
ord3831
ord3830
ord2976
ord3081
ord2985
ord3262
ord3136
ord4465
ord3259
ord3147
ord2982
ord5714
ord5289
ord5307
ord4698
ord4079
ord5302
ord5300
ord3346
ord2396
ord5199
ord1089
ord3922
ord5731
ord2512
ord2554
ord4486
ord6375
ord4274
ord4673
ord6696
ord1576

msvcrt

__getmainargs
_acmdln
_XcptFilter
_exit
?terminate@@YAXXZ
_onexit
__dllonexit
fflush
srand
rand
time
localtime
toupper
_strupr
_CxxThrowException
wcslen
wcscpy
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
??1type_info@@UAE@XZ
_vsnprintf
getenv
memmove
_assert
_purecall
_stati64
free
fwrite
realloc
fopen
_errno
strerror
fread
malloc
fclose
tolower
strstr
isdigit
exit
printf
sscanf
__p___argv
_open
_close
vsprintf
atoi
strncpy
_getdiskfree
_stat
_iob
fprintf
_chdir
_except_handler3
_ftol
clock
_snprintf
sprintf
__CxxFrameHandler
_mkdir
_strdup
_write
_fdopen
_lseek
_setmbcp
_controlfp

kernel32

GetModuleHandleA
ResetEvent
InterlockedIncrement
GetModuleFileNameA
FileTimeToSystemTime
SetEvent
DuplicateHandle
ReadFile
SetFilePointer
GetTimeZoneInformation
GetSystemTime
FindClose
FindNextFileA
FindFirstFileA
SystemTimeToFileTime
GetFileTime
GetStartupInfoA
CreateThread
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WaitForSingleObject
CloseHandle
GetFileSize
CreateFileA
MultiByteToWideChar
DeleteFileA
Sleep
GetLastError
GetFileAttributesA
GetVolumeInformationA
OutputDebugStringA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentProcess
GetVersionExA
CreateFileMappingA
GetCurrentProcessId
lstrcpynA
FreeLibrary
LoadLibraryA
GetWindowsDirectoryA
lstrcpyA
WinExec
lstrlenA
lstrcatA
GetVersion
lstrlenW
GetCPInfo
LockResource
LoadResource
FindResourceA
lstrcmpiA
GetProcAddress
GetTickCount
CreateEventA
FileTimeToLocalFileTime
InitializeCriticalSection

user32

IsMenu
DestroyCursor
LoadImageA
PostMessageA
GetSubMenu
LoadBitmapA
GetSysColorBrush
GetMenuStringA
CreateMenu
CreatePopupMenu
GetMenuItemID
GetMenuState
ModifyMenuA
GetMenuItemCount
GetDesktopWindow
DrawIconEx
DestroyIcon
CopyRect
SetRect
GetMenuItemInfoA
LoadCursorA
CopyIcon
SetCursor
GetMessagePos
MessageBeep
SetWindowLongA
ScreenToClient
UpdateWindow
FillRect
ReleaseDC
PtInRect
GetParent
IsWindow
GetFocus
DrawEdge
RegisterWindowMessageA
GrayStringA
DrawTextA
TabbedTextOutA
InflateRect
GetSysColor
SystemParametersInfoA
MessageBoxA
ExitWindowsEx
IsIconic
GetSystemMetrics
DrawIcon
SetTimer
KillTimer
wsprintfA
GetWindowRect
GetClientRect
GetWindowDC
InvalidateRect
FrameRect
GetIconInfo
CreateIconIndirect
DrawStateA
OffsetRect
EnableWindow
TranslateMessage
DispatchMessageA
PeekMessageA
SendMessageA
AppendMenuA
GetSystemMenu
DrawFocusRect
ClientToScreen
WindowFromPoint
GetActiveWindow
GetDC
GetNextDlgTabItem

gdi32

GetTextExtentPoint32W
Ellipse
CreateDIBSection
SetPixel
GetPixel
PatBlt
CreateSolidBrush
StretchBlt
SetTextColor
SetBkColor
CreateBitmap
CreatePen
GetBkMode
GetDeviceCaps
GetStockObject
CreateFontIndirectA
CreateRectRgn
Escape
ExtTextOutA
TextOutA
RectVisible
GetTextExtentPoint32A
GetBkColor
GetObjectA
GetCurrentObject
BitBlt
DeleteObject
DeleteDC
CreateCompatibleBitmap
CreateCompatibleDC
SelectObject
PtVisible

advapi32

LookupPrivilegeValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegQueryValueA
AdjustTokenPrivileges

shell32

SHBrowseForFolderA
SHGetMalloc
ShellExecuteA
SHGetPathFromIDListA
ShellExecuteExA

comctl32

ImageList_SetBkColor
ImageList_GetBkColor
ImageList_GetImageInfo
ImageList_Draw
ImageList_GetImageCount
ImageList_GetIcon
ImageList_AddMasked
ImageList_ReplaceIcon
_TrackMouseEvent

ole32

CoUninitialize
CoInitialize
CoCreateInstance
OleInitialize

oleaut32

SysAllocStringLen
OleLoadPicturePath
SysFreeString

gdiplus

GdiplusShutdown
GdiplusStartup

Sections

.text
Size: 196KB - Virtual size: 193KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sxdata
Size: 4KB - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

016fa828a50fd8474d1051c07e2d5385

Headers

File Characteristics

Imports

skinmagic

winmm

mfc42

msvcrt

kernel32

user32

gdi32

advapi32

shell32

comctl32

ole32

oleaut32

gdiplus

Sections

.text Size: 196KB - Virtual size: 193KB

.rdata Size: 128KB - Virtual size: 127KB

.data Size: 32KB - Virtual size: 3.3MB

.sxdata Size: 4KB - Virtual size: 856B

.rsrc Size: 212KB - Virtual size: 208KB

.text
Size: 196KB - Virtual size: 193KB

.rdata
Size: 128KB - Virtual size: 127KB

.data
Size: 32KB - Virtual size: 3.3MB

.sxdata
Size: 4KB - Virtual size: 856B

.rsrc
Size: 212KB - Virtual size: 208KB