cdea9121a4e5f3578ce1b4839f984c2a57e6c585b62d7c5b170a9dceadcd05ec

Sharing

Copy URL Twitter E-mail

General

Target

cdea9121a4e5f3578ce1b4839f984c2a57e6c585b62d7c5b170a9dceadcd05ec
Size

1.8MB
MD5

04f75f5080744bfe07b65a7dc9b04fa5
SHA1

d4630faad8a57d753f79055a63d681f0eaff76f8
SHA256

cdea9121a4e5f3578ce1b4839f984c2a57e6c585b62d7c5b170a9dceadcd05ec
SHA512

5e679caeede029ea526b69082696502a64d04e8fb91b8de6f7b2eafea8dd16899aeea9f84f41dd835d87d0625d50f778e98a6feb85cd93ad8b83d847a34edbe1
SSDEEP

24576:nFherLm7FFFJRVhiFre+hZJbFYmtsjJgGUS0s2Vp/h5YPyWmGnxG3GZTD:nL7F3VhikcZJFptGJqR3syTKHTD

Score

N/A

Malware Config

Signatures

Files

cdea9121a4e5f3578ce1b4839f984c2a57e6c585b62d7c5b170a9dceadcd05ec
.exe windows x86

f5df842e84f1859bb3b95be93478cd74

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

RegisterClassA
ReleaseDC
GetForegroundWindow
GetDlgItem
FindWindowA
GetDC
SetCursorPos
GetAncestor
EnumWindows
GetMenu
GetSubMenu
GetMenuItemID
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
IsIconic
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
SetForegroundWindow
RegisterWindowMessageA
GetSystemMetrics
GetSysColorBrush
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
DestroyMenu
PostThreadMessageA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
IsWindow
GetMenuItemCount
GetSysColor
MapWindowPoints
UpdateWindow
LoadIconA
PostQuitMessage
PostMessageA
SendMessageA
SetCursor
EnableWindow
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
GetCursorPos
PeekMessageA
IsWindowVisible
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
RegisterClipboardFormatA
UnhookWindowsHookEx
UnregisterClassA
GetClassNameA
PtInRect
GetWindowRect
GetDlgCtrlID
GetWindow
ClientToScreen
SetWindowTextA
GetWindowTextA
LoadCursorA
TabbedTextOutA
DrawTextA
GrayStringA
SendDlgItemMessageA
IsDialogMessageA
SetWindowLongA
SetWindowPos
ShowWindow
SetFocus
SystemParametersInfoA
GetPropA
wsprintfA
SetActiveWindow
LoadStringA
MessageBoxA
CallWindowProcA
RemovePropA
AdjustWindowRectEx
MapWindowPoints
SendDlgItemMessageA
GetMessageTime
ScrollWindowEx
GetPropA
SetWindowTextA
UnhookWindowsHookEx
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
GetMenuCheckMarkDimensions
wvsprintfA
LoadStringA
GetSysColorBrush
GetMenuItemID
GetScrollInfo
SetScrollInfo
MoveWindow
ShowScrollBar
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
CreateWindowExA
GetScrollPos
RegisterClassA
GetMenuItemCount
IsDialogMessageA
GetLastActivePopup
RegisterWindowMessageA
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
DestroyWindow
EndPaint
BeginPaint
GetWindowDC
CharUpperA
GetWindowTextLengthA
GetForegroundWindow
UnregisterClassA
GetWindowTextA
GetDlgItem
GetClassNameA
GetDesktopWindow
GetDoubleClickTime
GetCursor
ClipCursor
GrayStringA
DrawTextA
TabbedTextOutA
DrawStateA
FrameRect
GetNextDlgTabItem
LoadIconA
TranslateMessage
ScrollWindow
wsprintfA
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
IsClipboardFormatAvailable
GetSystemMetrics
GetCursorPos
MessageBoxA
MessageBeep
SetWindowPos
SendMessageA
DestroyCursor
SetParent
IsWindow
PostMessageA
GetTopWindow
GetParent
GetFocus
GetClientRect
InvalidateRect
ValidateRect
UpdateWindow
EqualRect
GetWindowRect
SetForegroundWindow
DestroyMenu
IsChild
ReleaseDC
IsRectEmpty
InvertRect
FillRect
GetDC
SetCursor
LoadCursorA
SetCursorPos
SetActiveWindow
GetSysColor
SetWindowLongA
GetWindowLongA
RedrawWindow
EnableWindow
IsWindowVisible
OffsetRect
PtInRect
DestroyIcon
IntersectRect
InflateRect
SetRect
SetScrollPos
SetScrollRange
GetScrollRange
SetCapture
GetCapture
ReleaseCapture
SetTimer
KillTimer
WinHelpA
LoadBitmapA
CopyRect
ChildWindowFromPointEx
ScreenToClient
GetMessagePos
SetWindowRgn
DestroyAcceleratorTable
GetWindow
GetActiveWindow
SetFocus
IsIconic
PeekMessageA
SetMenu
GetMenu
DeleteMenu
GetSystemMenu
DefWindowProcA
GetClassInfoA
IsZoomed
PostQuitMessage
CopyAcceleratorTableA
GetKeyState
TranslateAcceleratorA
IsWindowEnabled
ShowWindow
SystemParametersInfoA
LoadImageA
EnumDisplaySettingsA
ClientToScreen
EnableMenuItem
GetSubMenu
GetDlgCtrlID
CreateAcceleratorTableA
CreateMenu
ModifyMenuA
AppendMenuA
CreatePopupMenu
DrawIconEx
CreateIconFromResource
CreateIconFromResourceEx
RegisterClipboardFormatA
SetRectEmpty
DispatchMessageA
GetMessageA
WindowFromPoint
DrawFocusRect
DrawEdge
DrawFrameControl

kernel32

GetUserDefaultLCID
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
DeleteFileA
ReadFile
SetFilePointer
GetFileSize
ResumeThread
GetWindowsDirectoryA
GetModuleHandleA
DeviceIoControl
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcpyn
GlobalDeleteAtom
lstrlenA
LocalAlloc
LocalFree
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
LeaveCriticalSection
GlobalReAlloc
EnterCriticalSection
TlsSetValue
LocalReAlloc
TlsGetValue
InterlockedDecrement
SetErrorMode
lstrcatA
lstrcpyA
WriteProcessMemory
lstrcpynA
GetVersion
MulDiv
GlobalFlags
InterlockedIncrement
SetLastError
GetLastError
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
LockResource
LoadResource
FindResourceA
GetProcessVersion
GetCurrentProcess
FlushFileBuffers
GetCPInfo
LCMapStringA
GetCommandLineA
RtlUnwind
TerminateProcess
RaiseException
HeapSize
GetACP
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
LocalSize
ReadProcessMemory
CreateToolhelp32Snapshot
Process32First
CloseHandle
Process32Next
OpenProcess
VirtualQueryEx
CreateFileA
RtlMoveMemory
RtlFillMemory
MultiByteToWideChar
WideCharToMultiByte
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetTickCount
GetModuleFileNameA
GetLocalTime
WritePrivateProfileStringA
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
GetOEMCP
WriteFile
lstrcmpA
TlsSetValue
LocalReAlloc
TlsGetValue
GetFileTime
GetCurrentThread
GlobalFlags
GetProfileIntA
SetErrorMode
GetProcessVersion
GetCPInfo
GetOEMCP
GetStartupInfoA
RtlUnwind
GetSystemTime
GetLocalTime
RaiseException
HeapSize
GetACP
SetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpiA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
DuplicateHandle
lstrcpynA
FileTimeToLocalFileTime
FileTimeToSystemTime
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
SuspendThread
ReleaseMutex
CreateMutexA
GetVersion
GetTimeZoneInformation
SetLastError
InterlockedExchange
FreeEnvironmentStringsA
TerminateProcess
GetCurrentProcess
GetFileSize
SetFilePointer
TerminateThread
CreateSemaphoreA
ResumeThread
ReleaseSemaphore
EnterCriticalSection
LeaveCriticalSection
GetProfileStringA
WriteFile
WaitForMultipleObjects
CreateFileA
SetEvent
FindResourceA
LoadResource
LockResource
ReadFile
lstrlenW
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
lstrlenA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
MultiByteToWideChar
WideCharToMultiByte
GetFullPathNameA
FreeLibrary
LoadLibraryA
GetLastError
GetVersionExA
CloseHandle
WaitForSingleObject
GetTickCount
GetCommandLineA
MulDiv
GetDiskFreeSpaceA
GetProcAddress
GetModuleHandleA
GetVolumeInformationA
SetCurrentDirectoryA
GetCurrentDirectoryA
CopyFileA
DeleteFileA
GetFileAttributesA
FindClose
FindFirstFileA
GlobalUnlock
GlobalLock
GlobalAlloc
Sleep
CreateEventA
CreateThread
WritePrivateProfileStringA

gdi32

PtVisible
GetStockObject
DeleteDC
GetDeviceCaps
RestoreDC
CreateBitmap
SetBkColor
SetTextColor
SetBkMode
GetClipBox
SelectObject
CreateFontIndirectA
ScaleWindowExtEx
SetWindowExtEx
Rectangle
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SaveDC
RectVisible
ExtTextOutA
Escape
GetObjectA
DeleteObject
TextOutA
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetDIBits
RealizePalette
SelectPalette
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
GetTextExtentPoint32A
GetDeviceCaps
CreateBitmap
CreatePatternBrush
SelectObject
GetObjectA
CreateCompatibleDC
PatBlt
CombineRgn
CreateRectRgn
FillRgn
CreateSolidBrush
GetStockObject
CreateFontIndirectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetWindowExtEx
GetPixel
CreatePen
CopyMetaFileA
GetViewportExtEx
ExtSelectClipRgn
LineTo
MoveToEx
ExcludeClipRect
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
SetBrushOrgEx
AbortDoc
Escape
GetTextMetricsA
ExtTextOutA
RectVisible
PtVisible
CreateFontA
SetDIBitsToDevice
SetTextColor
SetBkMode
TextOutA
SetBkColor
CreateRectRgnIndirect
CreateDIBSection
SetStretchBltMode
GetClipRgn
CreatePolygonRgn
SelectClipRgn
DeleteObject
CreateDIBitmap
GetSystemPaletteEntries
CreatePalette
StretchBlt

ws2_32

recv
select
setsockopt
send
inet_addr
ntohs
inet_ntoa
ntohl
accept
WSACleanup
closesocket
WSAAsyncSelect
recvfrom
getpeername
recv
ioctlsocket

atl

ord42

winspool.drv

OpenPrinterA
ClosePrinter
DocumentPropertiesA
ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegQueryValueA

comctl32

ord17
ImageList_Read
ImageList_LoadImageA
ImageList_Create
ImageList_Destroy
ord17
ImageList_Draw
ImageList_AddMasked
ImageList_SetBkColor
ImageList_GetImageCount
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_ReplaceIcon
_TrackMouseEvent
ImageList_Duplicate

oledlg

ord8

ole32

CoRevokeClassObject
CoRegisterMessageFilter
OleUninitialize
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateInstance
OleRun
OleFlushClipboard
OleIsCurrentClipboard
CoFreeUnusedLibraries
CoTaskMemAlloc
OleDuplicateData
CoLockObjectExternal
DoDragDrop
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoTaskMemFree
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop
OleInitialize
CreateStreamOnHGlobal
CoCreateInstance
OleUninitialize
CLSIDFromString

oleaut32

VariantChangeType
VariantInit
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
VariantClear
SysAllocString
SafeArrayCreate
RegisterTypeLi
LHashValOfNameSys
LoadTypeLi
VarR8FromBool
VarR8FromCy
SafeArrayGetElemsize
SafeArrayGetUBound
VarDateFromStr
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi

msvfw32

DrawDibDraw

avifil32

AVIStreamInfoA
AVIStreamGetFrame

winmm

waveOutPause
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutClose
waveOutGetNumDevs
waveOutOpen
midiOutUnprepareHeader
midiStreamOpen
midiStreamProperty
midiOutPrepareHeader
waveOutReset
midiStreamRestart
midiStreamClose
midiOutReset
midiStreamStop
waveOutRestart
PlaySoundA
midiStreamOut

comdlg32

ChooseColorA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
GetFileTitleA

shell32

ShellExecuteA
DragQueryFileA
Shell_NotifyIconA

wldap32

ord29

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 268KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 312KB - Virtual size: 685KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f5df842e84f1859bb3b95be93478cd74

Headers

File Characteristics

Imports

user32

kernel32

gdi32

ws2_32

atl

winspool.drv

advapi32

comctl32

oledlg

ole32

oleaut32

msvfw32

avifil32

winmm

comdlg32

shell32

wldap32

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 268KB - Virtual size: 266KB

.data Size: 312KB - Virtual size: 685KB

.rsrc Size: 48KB - Virtual size: 44KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 268KB - Virtual size: 266KB

.data
Size: 312KB - Virtual size: 685KB

.rsrc
Size: 48KB - Virtual size: 44KB