9b1d45ed2683cd79fde5b4120f20a9e47a5476c07188e7154355922c3bfe718f

Sharing

Copy URL Twitter E-mail

General

Target

9b1d45ed2683cd79fde5b4120f20a9e47a5476c07188e7154355922c3bfe718f
Size

2.8MB
MD5

4ef4c3ec84442f65c49c68bc28614cab
SHA1

36953e781c386a6e3cc3f38fd12759bd8a2659a1
SHA256

9b1d45ed2683cd79fde5b4120f20a9e47a5476c07188e7154355922c3bfe718f
SHA512

c56b543da8df74407bf10ef3c4e1dd1b9b2c11babc541418535729e3a6c1e0f9291fe774d4da56a9ceb537ea97e23b546e19fb28d720570250fc463b5e61458e
SSDEEP

49152:myqD3JMVdLoaGHCvNkkEmBa6fKWdq0cWsq89/Is/BbPNjTWtljM0U:myqD3uXLo9HCFkkEmxfKWwIs/BbPItlw

Score

1^/10

Malware Config

Signatures

Files

9b1d45ed2683cd79fde5b4120f20a9e47a5476c07188e7154355922c3bfe718f
.exe windows x86

0d95350769faf6d86f9840da14b7adb8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

avutil

ord76
ord12
ord33
ord30
ord71
ord24
ord21
ord63
ord40
ord28
ord61
ord27
ord25
ord45
ord48
ord64
ord32
ord47
ord23
ord75

avcodec

ord594
ord639
ord607
ord634
ord678
ord640
ord601
ord667
ord643
ord657
ord674
ord684
ord644
ord591
ord590
ord671
ord646
ord602
ord653
ord586
ord628
ord592
ord620
ord687
ord688
ord690
ord654
ord655
ord622
ord621
ord666
ord605
ord615
ord587
ord659
ord686
ord613
ord614
ord675
ord679
ord670
ord658
ord660
ord665
ord595
ord600
ord661
ord641
ord645
ord589
ord604

avformat

ord64
ord482
ord67
ord66
ord121
ord74
ord35
ord57
ord506
ord34
ord87
ord68
ord494
ord25
ord51
ord39
ord31
ord46
ord362
ord23
ord32
ord479
ord489
ord76
ord55
ord40
ord249
ord271
ord52
ord27
ord28
ord49
ord84
ord60
ord85
ord86
ord492
ord250
ord29
ord48
ord480
ord50
ord483

swscale

ord66
ord63
ord74
ord60

kernel32

GetStartupInfoW
GetModuleFileNameA
SetHandleCount
GetStartupInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCurrentProcessId
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
ExitProcess
HeapReAlloc
HeapCreate
MultiByteToWideChar
GetModuleHandleW
lstrlenW
InterlockedDecrement
FreeLibrary
LoadLibraryW
InterlockedIncrement
DebugBreak
OutputDebugStringW
lstrlenA
RaiseException
GetTickCount
GlobalUnlock
GlobalLock
GlobalAlloc
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
FlushInstructionCache
GetCurrentProcess
SetLastError
GetLocaleInfoW
GetDateFormatW
GetTimeFormatW
DeleteCriticalSection
GlobalFree
GetModuleFileNameW
GetLastError
InitializeCriticalSection
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
WideCharToMultiByte
GlobalReAlloc
GetProcAddress
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetCurrentDirectoryW
GetTempPathW
ExpandEnvironmentStringsW
GetLogicalDriveStringsW
GetFileAttributesW
GetFileType
CreateFileW
CloseHandle
GetFileAttributesExW
SetFileTime
SetEndOfFile
SetFilePointer
SetFileAttributesW
CopyFileW
MoveFileW
DeleteFileW
RemoveDirectoryW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
ReadFile
WriteFile
ReadDirectoryChangesW
ExitThread
CreateEventW
SetEvent
WaitForSingleObject
ResetEvent
InitializeCriticalSectionAndSpinCount
Sleep
TryEnterCriticalSection
CreateEventA
CreateMutexA
ReleaseMutex
CreateMutexW
WaitForMultipleObjects
CreateSemaphoreW
ReleaseSemaphore
CreateThread
GetExitCodeThread
TerminateThread
LocalFileTimeToFileTime
DosDateTimeToFileTime
GetFileTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
MulDiv
IsDebuggerPresent
lstrcpynW
GetLongPathNameW
GetDriveTypeW
GetVersionExW
GetProcessTimes
SetCurrentDirectoryW
HeapSize
IsValidCodePage
GetOEMCP
TlsFree
TlsSetValue
SetUnhandledExceptionFilter
GetStdHandle
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
InterlockedExchange
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapAlloc
GetProcessHeap
TlsAlloc
HeapFree
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
InterlockedCompareExchange
SetErrorMode
CreateFileA
GetDriveTypeA
GetCurrentThread
SetThreadPriority
CreateSemaphoreA
GetEnvironmentVariableA
SetEnvironmentVariableA
GetACP
GetLocaleInfoA
GetVersionExA
GetModuleHandleA
LoadLibraryA
QueryPerformanceCounter
ResumeThread

user32

UnhookWindowsHookEx
SetWindowsHookExW
CallNextHookEx
RegisterClassW
IsWindowEnabled
UpdateWindow
GetWindowDC
MapDialogRect
GetDialogBaseUnits
IsIconic
GetWindowThreadProcessId
MapVirtualKeyExA
AttachThreadInput
SetForegroundWindow
DialogBoxIndirectParamW
PostQuitMessage
MoveWindow
IsDialogMessageW
IsWindowVisible
EnableWindow
EndDialog
MonitorFromWindow
GetMonitorInfoW
LoadImageW
CreateDialogParamW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
FindWindowW
GetDlgItem
IntersectRect
SetParent
GetWindowLongA
IsZoomed
SetWindowLongA
GetMenu
AdjustWindowRectEx
SetWindowTextA
EnumDisplaySettingsA
GetActiveWindow
GetSysColorBrush
RegisterClassExW
GetClassInfoExW
GetWindow
GetComboBoxInfo
RedrawWindow
IsRectEmpty
SetTimer
GetSystemMetrics
CallWindowProcW
SetScrollPos
GetKeyState
KillTimer
SetCapture
SetCursor
GetScrollInfo
GetScrollPos
GetKeyboardLayoutNameA
LoadKeyboardLayoutA
DestroyCursor
SetScrollInfo
ReleaseDC
GetDC
SetWindowRgn
GetSysColor
RegisterClipboardFormatW
SystemParametersInfoW
LoadCursorW
EndPaint
BeginPaint
CreateWindowExW
SetWindowLongW
SetWindowPos
DefWindowProcW
FillRect
DrawFrameControl
DrawTextW
FrameRect
GetFocus
MapWindowPoints
GetWindowLongW
EqualRect
GetMessagePos
GetAsyncKeyState
IsWindow
GetDlgCtrlID
GetParent
SetFocus
ShowWindow
ScreenToClient
ClientToScreen
GetClientRect
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
PostMessageW
DestroyWindow
wvsprintfW
CharNextW
SendMessageW
OffsetRect
InflateRect
GetCapture
ReleaseCapture
PtInRect
CopyRect
InvalidateRect
RegisterWindowMessageW
LoadStringW
LoadStringA
ChangeDisplaySettingsA
DestroyIcon
DispatchMessageA
PeekMessageA
DefWindowProcA
ClipCursor
AdjustWindowRect
SetCursorPos
GetKeyboardState
ToUnicode
RegisterClassA
LoadImageA
PostMessageA
WindowFromPoint
GetCursorPos
UnregisterClassA
GetClassInfoA
GetKeyboardLayout
ToAsciiEx
GetDesktopWindow
CallWindowProcA
MsgWaitForMultipleObjects
GetMessageA
MapVirtualKeyA
CreateWindowExA
GetCursor
CreateCursor
SetClassLongA
CreateIconFromResourceEx
GetForegroundWindow

gdi32

CreateRectRgnIndirect
ExtSelectClipRgn
SetStretchBltMode
RealizePalette
GetDIBits
CreateDIBSection
SetWinMetaFileBits
GetDeviceCaps
DeleteEnhMetaFile
GetEnhMetaFileHeader
SetEnhMetaFileBits
PlayEnhMetaFile
SelectPalette
CreatePalette
GetEnhMetaFilePaletteEntries
GetSystemPaletteEntries
SetDIBColorTable
SetPaletteEntries
UnrealizeObject
GetSystemPaletteUse
GetDeviceGammaRamp
SetDeviceGammaRamp
SetSystemPaletteUse
DescribePixelFormat
SetPixelFormat
ChoosePixelFormat
SwapBuffers
SetDIBitsToDevice
Rectangle
Polygon
GetTextMetricsW
LineTo
MoveToEx
GetObjectW
CreateFontIndirectW
CreateCompatibleBitmap
SetViewportOrgEx
CreateCompatibleDC
GetTextExtentPoint32W
CombineRgn
CreatePolygonRgn
CreateRectRgn
BitBlt
SetWindowOrgEx
CreatePen
DeleteDC
CreateSolidBrush
DeleteObject
ExtTextOutW
RoundRect
GetClipBox
OffsetWindowOrgEx
SetTextColor
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC

comdlg32

GetOpenFileNameW
GetSaveFileNameW

advapi32

RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyExW
RegSetValueExW
RegQueryInfoKeyW
CryptReleaseContext
CryptGenRandom
CryptAcquireContextW

shell32

SHGetFolderPathW
SHCreateDirectoryExW
DragQueryFileW
DragFinish
DragAcceptFiles
SHBrowseForFolderW
SHGetPathFromIDListW
ShellExecuteW

ole32

CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
DoDragDrop
RevokeDragDrop
CoCreateInstance
ReleaseStgMedium
OleDuplicateData
RegisterDragDrop

oleaut32

SysAllocString
VarUI4FromStr

winmm

joyGetNumDevs
timeGetTime
timeBeginPeriod
timeSetEvent
timeEndPeriod
timeKillEvent
waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutPrepareHeader
waveOutOpen
waveOutGetErrorTextA
joyGetDevCapsA
mciGetErrorStringA
mciSendCommandA
joyGetPosEx

shlwapi

PathIsSystemFolderW
PathIsURLW
PathIsRootW
PathIsNetworkPathW
PathAddBackslashW
PathStripToRootW
PathIsDirectoryW
PathIsRelativeW
PathFileExistsW
PathFindExtensionW

comctl32

ImageList_GetIconSize
ord17
_TrackMouseEvent
ImageList_LoadImageW
ImageList_DrawEx
InitCommonControlsEx

msimg32

AlphaBlend
GradientFill

uxtheme

OpenThemeData
DrawThemeText
CloseThemeData
DrawThemeBackground

wmvcore

WMCreateEditor

imagehlp

MapFileAndCheckSumW

msvcr90

fread
fclose
_wcsnicmp
malloc
free
_wcslwr
fwrite
_read
_write
_lseek
_close
_open
fseek
ftell
fflush
_setmode
feof
ferror
_unlink
fputc
getc
fgets
fscanf
_wfopen
calloc
ldiv
sprintf
strncpy
_swab
longjmp
strncmp
realloc
qsort
rand
ceil
isprint
printf
_stricmp
atof
strstr
atoi
_endthreadex
_beginthreadex
signal
sscanf
_strrev
isdigit
_strlwr
_ltoa
_ultoa
strchr
raise
fprintf
__iob_func
_gmtime64
_mktime64
putc
fopen
memmove
_getcwd
_errno
isspace
fgetc
perror
tmpfile
isupper
strrchr
_strnicmp
abort
tmpnam
vsprintf
isalpha
vfprintf
strtok
exit
_snprintf
strtod
getenv
floor

ws2_32

ntohl
htonl
ntohs
htons

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 445KB - Virtual size: 445KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 49KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d95350769faf6d86f9840da14b7adb8

Headers

DLL Characteristics

File Characteristics

Imports

avutil

avcodec

avformat

swscale

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

winmm

shlwapi

comctl32

msimg32

uxtheme

wmvcore

imagehlp

msvcr90

ws2_32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 445KB - Virtual size: 445KB

.data Size: 49KB - Virtual size: 149KB

.rsrc Size: 107KB - Virtual size: 107KB

.reloc Size: 91KB - Virtual size: 90KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 445KB - Virtual size: 445KB

.data
Size: 49KB - Virtual size: 149KB

.rsrc
Size: 107KB - Virtual size: 107KB

.reloc
Size: 91KB - Virtual size: 90KB