ca1efd2ab733476e2f8bd99985273b49f7a9c785ac81c153c723480f4012244a

Sharing

Copy URL Twitter E-mail

General

Target

ca1efd2ab733476e2f8bd99985273b49f7a9c785ac81c153c723480f4012244a
Size

1.0MB
MD5

0aef667e011cf26accbf51462c1874bf
SHA1

47b7aa085f2b58943f7e65457d4d35f4f71a3f66
SHA256

ca1efd2ab733476e2f8bd99985273b49f7a9c785ac81c153c723480f4012244a
SHA512

5e6134362f47a1fd8a267296297e89c003a16b608b61cd78ccc824d7073b7975889207df6cfddf9bf6a8356208f0adfcdfd73d7076fb8b7944d50b14cb958a4a
SSDEEP

12288:qhnT7WuXljihjLG698KX+lszsssyFBb4prAZs7yylWP89LtBJ:qhnvX6GbKX+lszbBEprXyYWPULDJ

Score

1^/10

Malware Config

Signatures

Files

ca1efd2ab733476e2f8bd99985273b49f7a9c785ac81c153c723480f4012244a
.exe windows x86

dced48cb8dffb1e77e76cabdbdb53d40

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

skinscrollbar

SkinSB_LoadSkin
SkinSB_ParentWndProc
SkinSB_UnInitializeScrollBar
SkinSB_InitializeScrollBar
SkinSB_UninitializeApp
SkinSB_InitializeApp

kernel32

FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
TlsGetValue
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetFileTime
SetErrorMode
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
RtlUnwind
ExitProcess
SetStdHandle
GetFileType
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetOEMCP
LCMapStringA
LCMapStringW
GetConsoleCP
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
GetCurrentDirectoryA
GetDriveTypeA
CreateFileA
SetEnvironmentVariableA
lstrlenW
GetModuleFileNameW
lstrcmpiW
FindResourceW
LoadResource
SizeofResource
FreeLibrary
GetModuleHandleW
GetProcAddress
LoadLibraryW
IsBadStringPtrW
lstrcpynW
LockResource
CreateDirectoryW
GetVolumeInformationW
GetLocaleInfoW
FindFirstFileW
DeleteFileW
FindNextFileW
FindClose
SetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalReAlloc
GlobalFree
lstrcpyW
GetDriveTypeW
GetCurrentProcess
GetLastError
lstrlenA
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
Sleep
InitializeCriticalSection
DeleteCriticalSection
CreateThread
WaitForSingleObject
GetExitCodeThread
TerminateThread
CloseHandle
GetTempPathW
CreateMutexW
ReleaseMutex
WideCharToMultiByte
GetPrivateProfileStringW
GetTickCount
OutputDebugStringW
WritePrivateProfileStringW
GetVersion
GetVersionExW
GetCPInfo
FreeResource
lstrcmpW
MulDiv
InterlockedExchange
GetPrivateProfileIntW
CreatePipe
CreateProcessW
TerminateProcess
PeekNamedPipe
ReadFile
lstrcpynA
WriteFile
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
GetModuleHandleA
GetThreadLocale
InterlockedIncrement
GetShortPathNameW
GetACP
FormatMessageW
CreateFileW
GetFullPathNameW
SetEvent
HeapFree
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
GlobalAddAtomW
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
CompareStringA
GlobalDeleteAtom
GetCurrentProcessId
lstrcmpA
InterlockedDecrement
HeapAlloc
GetProcessHeap
SetEndOfFile
SetFilePointer
WriteConsoleW
GetStdHandle
GetConsoleMode
RaiseException
GetLocaleInfoA
LocalFree
IsBadWritePtr
GetFileAttributesW
GetFileSize

user32

MessageBeep
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableW
UnregisterClassW
CharUpperW
DestroyMenu
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
EndPaint
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollPos
GetScrollPos
GetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetScrollInfo
SetScrollInfo
GetDlgCtrlID
IntersectRect
SystemParametersInfoA
GetWindowPlacement
SetWindowsHookExW
CallNextHookEx
GetMessageW
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetRect
UnregisterClassA
SendMessageW
LoadImageW
DefWindowProcW
RegisterWindowMessageW
EnableWindow
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
RegisterClipboardFormatW
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
UnhookWindowsHookEx
GetMenuStringW
MessageBoxW
GetWindowLongW
WindowFromPoint
GetActiveWindow
CharNextW
GetFocus
LoadCursorFromFileW
GetCapture
GetWindowDC
LoadCursorW
IsRectEmpty
SetWindowLongW
CallWindowProcW
SetCapture
SetRectEmpty
ReleaseCapture
GetAsyncKeyState
SetForegroundWindow
IsWindow
InflateRect
GetWindowRgn
SetWindowRgn
FrameRect
OffsetRect
LoadMenuW
ClientToScreen
SetCursor
PtInRect
DrawIcon
LoadIconW
UpdateWindow
DispatchMessageW
TranslateMessage
GetParent
ScreenToClient
GetCursorPos
CloseClipboard
GetClipboardData
OpenClipboard
IsClipboardFormatAvailable
wsprintfW
GetKeyState
GetClientRect
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
SetTimer
KillTimer
BeginPaint
InvalidateRect
PeekMessageW
PostMessageW
PostThreadMessageW
CopyRect
GetSubMenu
GetMenuItemCount
DeleteMenu
AppendMenuW
CheckMenuItem
PostQuitMessage
IsIconic
EnableMenuItem
IsWindowVisible
CreatePopupMenu
GetWindowRect
GetSysColor
DrawEdge
GetMenuItemInfoW
SystemParametersInfoW
DrawIconEx
DestroyIcon
GetSystemMetrics
GetDesktopWindow
GetDC
ReleaseDC
ModifyMenuW
GetMenuState
GetMenuItemID
CreateMenu
FillRect
GetSysColorBrush
LoadBitmapW

gdi32

CreatePen
GetBkMode
CreateFontIndirectW
GetTextExtentPoint32W
Ellipse
CreateSolidBrush
SetPixel
PatBlt
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
GetStockObject
SetDIBColorTable
LPtoDP
GetWindowExtEx
GetViewportExtEx
GetBkColor
CreateRectRgnIndirect
FrameRgn
BeginPath
Polyline
EndPath
FillPath
GetRegionData
OffsetRgn
GetRgnBox
SetTextColor
RestoreDC
SetStretchBltMode
SaveDC
GetClipBox
GetTextColor
SetBkMode
SelectObject
LineTo
MoveToEx
GetDeviceCaps
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
BitBlt
ExtCreateRegion
CombineRgn
DeleteObject
DeleteDC
GetPixel
DPtoLP
CreateBitmap
CreateCompatibleBitmap
SetMapMode
GetMapMode
SetBkColor
StretchBlt
CreateRectRgn
CreatePolygonRgn
CreateEllipticRgn
SelectClipRgn
SetDIBits
GetDIBits
CreateCompatibleDC
GetObjectW
CreateDIBSection
ExtSelectClipRgn

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderPathW
ShellExecuteW
DragQueryFileW
DragFinish
SHGetPathFromIDListW

comctl32

InitCommonControlsEx
ImageList_Remove

shlwapi

StrStrA
StrStrIA
StrToIntW
StrToIntA
PathRemoveExtensionW
PathIsURLW
PathFindExtensionW
PathAddBackslashW
PathStripToRootW
PathIsDirectoryW
PathFileExistsW
PathAppendW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrTrimW
PathIsRootW
PathRemoveBackslashW
UrlUnescapeW
StrStrIW

oledlg

OleUIBusyW

ole32

CoTaskMemFree
CoTaskMemAlloc
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString
SysAllocString

gdiplus

GdipCreateBitmapFromScan0
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipCreateBitmapFromFile
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipGetImageThumbnail
GdipFree
GdipCreateHBITMAPFromBitmap
GdipCreateSolidFill
GdiplusShutdown
GdipCloneBrush
GdipFillPolygonI
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreatePen1
GdipDeletePen
GdipDrawRectangleI
GdipFillRectangleI
GdipAlloc
GdiplusStartup
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipLoadImageFromFile
GdipDeleteBrush
GdipCloneImage
GdipImageRotateFlip

wininet

InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallbackW
InternetOpenW
InternetGetLastResponseInfoW
InternetQueryOptionW
InternetCanonicalizeUrlW
InternetCrackUrlW
InternetOpenUrlW
InternetCloseHandle
InternetQueryDataAvailable

Sections

.text
Size: 660KB - Virtual size: 659KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dced48cb8dffb1e77e76cabdbdb53d40

Headers

File Characteristics

Imports

skinscrollbar

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

wininet

Sections

.text Size: 660KB - Virtual size: 659KB

.rdata Size: 168KB - Virtual size: 164KB

.data Size: 100KB - Virtual size: 116KB

.rsrc Size: 100KB - Virtual size: 98KB

.text
Size: 660KB - Virtual size: 659KB

.rdata
Size: 168KB - Virtual size: 164KB

.data
Size: 100KB - Virtual size: 116KB

.rsrc
Size: 100KB - Virtual size: 98KB