7b272a333976b37bc6a2e3323b9b6448645feae5645c96704d0029eb139a26fe

Sharing

Copy URL Twitter E-mail

General

Target

7b272a333976b37bc6a2e3323b9b6448645feae5645c96704d0029eb139a26fe
Size

2.2MB
MD5

b52506d7b37a92700daa5e5bb5c2bec0
SHA1

dbb712ae055933304f0dc4ae111a33922c017bd3
SHA256

7b272a333976b37bc6a2e3323b9b6448645feae5645c96704d0029eb139a26fe
SHA512

c0dc7ab75534be59d4a645070d9a14e29f8cb0fb630258fca2c6204d0b66697317e09c1801b8a04e814cb8bd4d9e1c77d10f5a31365465c70e12186a98b7dde2
SSDEEP

49152:UELRDfgy8F5BVn4etUM4Yp+jArihW6k2x1IyLtXsaEbQT3kFuW0mk+m:5FDgUjhhW6kW1dtcRnF8

Score

N/A

Malware Config

Signatures

Files

7b272a333976b37bc6a2e3323b9b6448645feae5645c96704d0029eb139a26fe
.exe windows x86

d093fb171d15e12b6e976d42dfd09180

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeKillEvent
timeSetEvent
waveOutSetVolume
mciSendCommandA
mciGetErrorStringA
joyGetNumDevs
joyGetPosEx
joyGetDevCapsA
waveOutGetErrorTextA
timeEndPeriod
timeBeginPeriod
timeGetTime
waveOutOpen
waveOutGetNumDevs
waveOutGetDevCapsA
waveOutGetPosition
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
waveOutPause
waveOutRestart
waveOutReset
waveOutMessage

avcodec-52

ord921
ord925
ord958
ord867
ord919
ord841
ord840
ord839
ord908
ord858
ord923
ord868
ord959
ord946
ord937
ord911
ord860
ord862
ord960
ord903
ord906
ord940
ord931
ord914
ord935
ord956
ord905
ord932
ord912
ord927
ord910
ord950
ord857
ord865
ord896
ord852
ord957
ord847
ord863
ord845
ord859
ord881
ord883
ord920
ord889
ord875
ord926
ord924
ord873
ord933
ord848
ord902
ord945
ord874
ord936
ord944
ord854
ord843
ord882
ord842
ord844

avdevice-52

ord1

avformat-52

ord77
ord62
ord264
ord344
ord43
ord478
ord476
ord80
ord26
ord25
ord36
ord44
ord30
ord47
ord28
ord45
ord68
ord35
ord60
ord491
ord467
ord61
ord466
ord82
ord81
ord46
ord71
ord63
ord23
ord31
ord51
ord58
ord49
ord464
ord79
ord78
ord473
ord110
ord70
ord21

avutil-50

ord25
ord24
ord27
ord57
ord12
ord72
ord43
ord29
ord67
ord42
ord71
ord40
ord38
ord46
ord59
ord58
ord60
ord45
ord32
ord31
ord20
ord23
ord22

swscale-0

ord77
ord66
ord63
ord69

zlib1

ord67

kernel32

SetHandleCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
InterlockedCompareExchange
IsProcessorFeaturePresent
GetThreadContext
SetThreadContext
GetTimeZoneInformation
GetCurrentProcess
GetProcAddress
LoadLibraryA
GetCommandLineA
SetUnhandledExceptionFilter
TerminateProcess
TerminateThread
GetCurrentThread
SuspendThread
VirtualProtect
WriteProcessMemory
MultiByteToWideChar
lstrcmpiA
WideCharToMultiByte
GetVersion
lstrlenW
GetLastError
lstrlenA
CompareStringA
GetEnvironmentVariableA
CompareStringW
InterlockedExchange
SizeofResource
LockResource
LoadResource
FindResourceA
FreeLibrary
GetModuleHandleA
SetLastError
RaiseException
lstrcpynA
GetModuleFileNameA
GetTickCount
GetVersionExA
FreeResource
GetWindowsDirectoryA
WinExec
GetCurrentThreadId
GlobalDeleteAtom
GlobalFindAtomA
MulDiv
GlobalAddAtomA
CloseHandle
Sleep
DeleteFileA
GetTempFileNameA
CreateThread
WaitForSingleObject
ReadFile
DuplicateHandle
GetCurrentProcessId
WriteFile
GetTempPathA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetSystemDirectoryA
CopyFileA
CreateSemaphoreA
FindFirstFileA
FindClose
CreateFileA
GetFileTime
FileTimeToSystemTime
GetFileAttributesA
SetFilePointer
CreateFileW
ReadFileEx
GetFileSize
GetFileSizeEx
SetFilePointerEx
GetFileInformationByHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GlobalLock
GlobalUnlock
FlushInstructionCache
lstrcmpA
GlobalAlloc
LoadLibraryExA
GlobalFree
IsDBCSLeadByte
InterlockedIncrement
InterlockedDecrement
OutputDebugStringA
SetEvent
CreateEventA
DeviceIoControl
ResetEvent
CreateMutexA
ReleaseMutex
QueryPerformanceCounter
ReleaseSemaphore
SetEnvironmentVariableA
SetThreadPriority
ResumeThread
GetLocaleInfoA
GetACP
SetErrorMode
GetDriveTypeA
GetSystemDefaultLCID
FindResourceExA
FindNextFileW
FindFirstFileW
GetLocaleInfoW
GlobalGetAtomNameA
EnumResourceLanguagesA
ConvertDefaultLocale
GetModuleFileNameW
lstrcmpW
LocalFree
FormatMessageA
WritePrivateProfileStringA
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
FileTimeToLocalFileTime
HeapAlloc
HeapReAlloc
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapFree
UnhandledExceptionFilter
IsDebuggerPresent
ExitThread
ExitProcess
GetSystemTimeAsFileTime
GetProcessHeap
GetStartupInfoA
GetFileType
GetConsoleCP
GetConsoleMode
SetConsoleCtrlHandler
RtlUnwind
HeapSize
VirtualFree
HeapDestroy
HeapCreate
GetStdHandle
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

GetCursor
TranslateMessage
DispatchMessageA
GetKeyState
GetClassInfoA
DefWindowProcA
DestroyCursor
SetRectEmpty
GetMessageA
SystemParametersInfoA
GetDesktopWindow
GetWindowLongA
SetForegroundWindow
MapVirtualKeyA
GetMessagePos
LoadIconA
LoadMenuA
GetSubMenu
SetMenuDefaultItem
TrackPopupMenu
GetMenuItemID
GetCaretPos
SetWindowLongA
MessageBeep
GetMenuState
GetMenuItemInfoA
SetWindowsHookExA
DrawStateA
GetMenuInfo
SetWindowPos
UnhookWindowsHookEx
GetMenuItemCount
DestroyIcon
IsMenu
GetPropA
RemovePropA
ValidateRect
CreatePopupMenu
BeginPaint
CallWindowProcA
EndPaint
CreateWindowExA
WindowFromDC
GetMenuDefaultItem
AppendMenuA
CopyAcceleratorTableA
IntersectRect
GetKeyNameTextA
GetClassNameA
SetPropA
ModifyMenuA
SetLayeredWindowAttributes
SetMenu
GetWindowDC
CallNextHookEx
IsIconic
DrawIcon
EnableMenuItem
SetWindowRgn
MessageBoxA
EqualRect
ExitWindowsEx
EnumWindows
ShowWindow
IsWindowVisible
SetActiveWindow
GetLastActivePopup
LoadImageA
CharNextA
LockWindowUpdate
InvalidateRgn
RegisterClassExA
DestroyWindow
GetWindow
SetFocus
GetDlgItem
SetWindowTextA
GetWindowTextA
CreateAcceleratorTableA
GetWindowTextLengthA
DestroyAcceleratorTable
MoveWindow
PeekMessageA
EnumDisplaySettingsA
ChangeDisplaySettingsA
GetForegroundWindow
AdjustWindowRectEx
IsZoomed
DrawTextW
WindowFromPoint
MapWindowPoints
GetKeyboardState
UnregisterClassA
GetKeyboardLayout
ToAsciiEx
SetCursorPos
PostQuitMessage
ClipCursor
UpdateWindow
ToUnicode
RegisterClassA
MsgWaitForMultipleObjects
SetClassLongA
CreateIconFromResourceEx
CreateCursor
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
MapVirtualKeyExA
CheckMenuItem
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
TranslateAcceleratorA
InsertMenuItemA
LoadAcceleratorsA
GetCapture
GetDlgCtrlID
IsWindowEnabled
GetActiveWindow
GetWindowThreadProcessId
WinHelpA
ReuseDDElParam
UnpackDDElParam
GetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
GetMessageTime
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetClassLongA
SendDlgItemMessageA
GetMenuStringA
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
IsDialogMessageA
GetNextDlgGroupItem
RegisterClipboardFormatA
PostThreadMessageA
IsRectEmpty
GrayStringA
TabbedTextOutA
ScreenToClient
SetTimer
BringWindowToTop
RegisterWindowMessageA
ShowScrollBar
ReleaseDC
GetDC
InflateRect
PostMessageA
ReleaseCapture
SetCapture
LoadBitmapA
GetParent
GetSystemMetrics
GetWindowRect
DrawTextExA
DrawFrameControl
OffsetRect
SetCursor
FrameRect
LoadCursorA
IsWindow
PtInRect
SetRect
ClientToScreen
DrawFocusRect
GetSysColorBrush
FillRect
GetSysColor
DrawEdge
DrawTextA
InvalidateRect
GetClientRect
CopyRect
EnableWindow
CharUpperA
SendMessageA
GetCursorPos
GetMenu
KillTimer
GetSystemMenu
DestroyMenu
GetFocus
IsChild
AdjustWindowRect
RedrawWindow
GetClassInfoExA

gdi32

SetBkColor
GetPixel
FillRgn
CreatePolygonRgn
PlgBlt
PtInRegion
CreateRectRgn
GetCurrentObject
GetBkColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
Rectangle
GetTextExtentPoint32A
DeleteObject
SelectObject
RealizePalette
SelectPalette
GetDeviceCaps
CreateCompatibleBitmap
SetTextColor
GetStockObject
LineTo
MoveToEx
DeleteDC
CreateSolidBrush
CreateDIBSection
Ellipse
StretchBlt
GetObjectA
BitBlt
CreateCompatibleDC
GetSystemPaletteEntries
CreatePalette
RoundRect
CreatePatternBrush
UnrealizeObject
GetTextAlign
SetDIBColorTable
SetPaletteEntries
GetSystemPaletteUse
GetDeviceGammaRamp
SetDeviceGammaRamp
SetSystemPaletteUse
GetBitmapBits
SetBkMode
CreateFontW
SetPixelFormat
ChoosePixelFormat
SwapBuffers
SetPixel
SetBrushOrgEx
CombineRgn
SetTextAlign
GetTextExtentPointA
SetWindowOrgEx
GetCurrentPositionEx
CreateRectRgnIndirect
GetTextColor
CreatePen
GetTextMetricsA
GetLayout
CreateFontIndirectA
CreateDCA
GetDIBits
SetMapMode
CreateRoundRectRgn
SelectClipRgn
GetNearestColor
CreateBitmap
GetRgnBox
DPtoLP
GetMapMode
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
IntersectClipRect
SetROP2
RestoreDC
SaveDC
GetClipBox
DescribePixelFormat
SetDIBitsToDevice

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegQueryValueA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyExA
RegQueryInfoKeyA
IsTextUnicode
RegEnumKeyA
RegOpenKeyExA

shell32

DragFinish
DragQueryFileA
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
Shell_NotifyIconA

comctl32

_TrackMouseEvent
ImageList_GetIconSize
InitCommonControlsEx

shlwapi

PathFindFileNameA
PathIsUNCA
PathStripToRootA
PathFindExtensionA
PathRenameExtensionA
PathCombineA
PathFileExistsA
PathRemoveFileSpecA

oledlg

ord8

ole32

CreateStreamOnHGlobal
StringFromGUID2
CoTaskMemAlloc
CLSIDFromString
CoTaskMemRealloc
CoCreateInstance
OleUninitialize
OleInitialize
CoGetClassObject
CoTaskMemFree
CLSIDFromProgID
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
OleLockRunning
CoRegisterMessageFilter

oleaut32

SysFreeString
VariantTimeToSystemTime
SystemTimeToVariantTime
LoadTypeLi
SysAllocString
SysAllocStringLen
OleCreateFontIndirect
SysStringLen
SysStringByteLen
VarUI4FromStr
LoadRegTypeLi
GetErrorInfo
VariantCopy
SafeArrayDestroy
SysAllocStringByteLen
VariantChangeType
VariantClear
VariantInit
OleLoadPicture

ddraw

DirectDrawCreate

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 332KB - Virtual size: 330KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 412KB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d093fb171d15e12b6e976d42dfd09180

Headers

File Characteristics

Imports

winmm

avcodec-52

avdevice-52

avformat-52

avutil-50

swscale-0

zlib1

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ddraw

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 332KB - Virtual size: 330KB

.data Size: 412KB - Virtual size: 5.5MB

.rsrc Size: 116KB - Virtual size: 112KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 332KB - Virtual size: 330KB

.data
Size: 412KB - Virtual size: 5.5MB

.rsrc
Size: 116KB - Virtual size: 112KB