534ff81ac1fb17637c618e5b0670ddbf3c060100a35cd248116c8ce6e682a45a

Sharing

Copy URL Twitter E-mail

General

Target

534ff81ac1fb17637c618e5b0670ddbf3c060100a35cd248116c8ce6e682a45a
Size

2.1MB
MD5

f87a3ff069b57cc1bb6823d2ff7237c9
SHA1

02583fd94bed3cdf6fe5160a29067bea46bf14ad
SHA256

534ff81ac1fb17637c618e5b0670ddbf3c060100a35cd248116c8ce6e682a45a
SHA512

0c5bbf9f5b01d8f057d21c79a99f924e64e4a32a86b0d084c5991a187d251e37020de4e8044cd399ce87aa9777ed6ef5abb0b8f534846b5d75f249f4fb271cea
SSDEEP

49152:K+2oTY4hn0uBJeFqCdDKfr5/QsI4zwAnxi865pTYBLSaa:K+2KY4h0uB4MCcr1QsIKxi/5pTYH

Score

1^/10

Malware Config

Signatures

Files

534ff81ac1fb17637c618e5b0670ddbf3c060100a35cd248116c8ce6e682a45a
.dll windows x86

a00b938f0615aaa185c9a663789897ee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

MD5Init
MD5Update
MD5Final
ReportEventA
DeregisterEventSource
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
RegisterEventSourceA

kernel32

IsProcessorFeaturePresent
GetCommandLineA
GetSystemInfo
VirtualQuery
ExitThread
GetModuleHandleExW
AreFileApisANSI
HeapQueryInformation
SetStdHandle
GetFileType
GetSystemTimeAsFileTime
GetStdHandle
FindFirstFileExW
GetDriveTypeW
SystemTimeToTzSpecificLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsValidCodePage
GetStringTypeW
GetConsoleMode
ReadConsoleW
DeleteFileW
GetTimeZoneInformation
GetFileAttributesExW
CreateDirectoryW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetConsoleCP
LCMapStringW
OutputDebugStringW
GetFileInformationByHandle
PeekNamedPipe
GetFullPathNameW
IsDebuggerPresent
GetCurrentDirectoryW
WriteConsoleW
SetEnvironmentVariableA
SearchPathA
GetProfileIntA
GetTempFileNameA
GetTempPathA
VerifyVersionInfoA
VerSetConditionMask
GetWindowsDirectoryA
CloseHandle
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
GetVolumeInformationA
DuplicateHandle
WriteFile
UnlockFile
SetEndOfFile
LockFile
GetFullPathNameA
FlushFileBuffers
FindFirstFileA
FindClose
GetCPInfo
GetOEMCP
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
RtlUnwind
FindResourceExW
GetACP
SetErrorMode
DecodePointer
RaiseException
GetLastError
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
InitializeCriticalSectionEx
DeleteCriticalSection
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
CreateFileA
GetFileSize
ReadFile
SetFilePointer
LocalReAlloc
GlobalHandle
GetVersion
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
LocalAlloc
FileTimeToLocalFileTime
lstrcmpA
GetVersionExA
GetCurrentThread
SetThreadPriority
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalSize
GlobalUnlock
GlobalLock
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleW
GetModuleFileNameW
FreeResource
GetSystemDirectoryW
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
SetLastError
EncodePointer
DeleteFileA
OpenFileMappingA
CreateFileMappingA
UnmapViewOfFile
MapViewOfFile
Module32Next
Module32First
Process32Next
Process32First
CreateToolhelp32Snapshot
WideCharToMultiByte
MultiByteToWideChar
FindResourceW
LoadLibraryW
lstrlenW
lstrlenA
lstrcatW
lstrcpyW
lstrcpyA
lstrcmpiA
GlobalFree
GlobalAlloc
SizeofResource
LockResource
LoadResource
FreeLibrary
ReadProcessMemory
VirtualProtect
VirtualFree
GetTickCount
OpenProcess
TerminateThread
GetCurrentProcess
CreateMutexA
DeviceIoControl
CreateFileW
GetCurrentDirectoryA
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
VirtualAlloc
ResumeThread
CreateThread
TerminateProcess
ExitProcess
GetCurrentProcessId
WaitForSingleObject
OutputDebugStringA
SetFilePointerEx
Sleep

user32

DrawIcon
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
WaitMessage
PostThreadMessageA
GetSystemMenu
IsZoomed
GetComboBoxInfo
LoadMenuW
TrackMouseEvent
ReuseDDElParam
UnpackDDElParam
InsertMenuItemA
LoadMenuA
TranslateAcceleratorA
LoadAcceleratorsA
BringWindowToTop
MonitorFromPoint
UpdateLayeredWindow
IsMenu
UnionRect
SetWindowRgn
DrawFrameControl
DrawEdge
LoadImageW
DrawStateA
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
GetMenuDefaultItem
CreatePopupMenu
NotifyWinEvent
LoadCursorW
InvertRect
HideCaret
EnableScrollBar
GetAsyncKeyState
MessageBeep
GetIconInfo
DrawIconEx
LoadImageA
IsRectEmpty
OffsetRect
SetRectEmpty
WindowFromPoint
ReleaseCapture
SetCapture
GetNextDlgGroupItem
CharUpperA
DestroyIcon
IsIconic
DeleteMenu
CopyImage
SystemParametersInfoA
GetMenuItemInfoA
DestroyMenu
LoadCursorA
GetSysColorBrush
GetSystemMetrics
RealChildWindowFromPoint
GetKeyNameTextA
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
TranslateMessage
GetMessageA
IntersectRect
FillRect
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
GetWindowRgn
GrayStringA
DrawTextExA
DrawTextA
RemoveMenu
AppendMenuA
InsertMenuA
GetMenuState
GetMenuStringA
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
IsDialogMessageA
IsWindowEnabled
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
MoveWindow
ShowWindow
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconW
LoadIconA
GetWindow
GetLastActivePopup
GetTopWindow
GetClassLongA
PtInRect
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetProcessWindowStation
GetUserObjectInformationW
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
GetClassInfoExA
GetClassInfoA
RegisterClassA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
PeekMessageA
DispatchMessageA
RegisterWindowMessageA
DestroyCursor
MapDialogRect
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
CharUpperBuffA
RegisterClipboardFormatA
ModifyMenuA
CreateAcceleratorTableA
CopyIcon
GetDoubleClickTime
SetClassLongA
LockWindowUpdate
SetParent
SetRect
SetCursorPos
LoadBitmapW
SetMenuItemInfoA
CopyAcceleratorTableA
TabbedTextOutA
DestroyAcceleratorTable
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
SendDlgItemMessageA
GetClientRect
GetDlgItem
GetClassNameA
EnumWindows
EnumChildWindows
GetParent
SetWindowLongA
GetWindowLongA
GetWindowTextA
SetWindowTextA
InvalidateRect
SetForegroundWindow
CreateWindowExA
PostMessageA
ExitWindowsEx
GetKeyboardLayout
ActivateKeyboardLayout
LoadKeyboardLayoutA
wsprintfW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
FindWindowA
GetWindowRect
IsWindowVisible
SetWindowPos
CloseWindow
IsWindow
InflateRect
CopyRect
FrameRect
DrawFocusRect
GetSysColor
MessageBoxA
EnableWindow
KillTimer
SetTimer
SendMessageA
wsprintfA
UnregisterClassA
MapVirtualKeyA
SetMenuDefaultItem

gdi32

MoveToEx
TextOutA
ExtTextOutA
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateFontIndirectA
CreateRectRgnIndirect
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExA
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
GetTextFaceA
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetDeviceCaps
CreateDCA
CopyMetaFileA
GetObjectA
SetTextColor
SetBkColor
CreateBitmap
SetTextAlign

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
OpenPrinterA
DocumentPropertiesA

shell32

SHGetFileInfoA
ShellExecuteA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
SHBrowseForFolderA
SHAppBarMessage

shlwapi

StrChrA
PathFindExtensionA
PathFindFileNameA
PathIsUNCA
PathStripToRootA
StrFormatKBSizeA
PathRemoveFileSpecW

uxtheme

DrawThemeText
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
GetThemePartSize
GetWindowTheme
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed

ole32

OleDuplicateData
IsAccelerator
CoLockObjectExternal
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
RevokeDragDrop
ReleaseStgMedium
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
OleGetClipboard
CoInitializeEx
CoUninitialize
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoTaskMemFree
CoCreateGuid
CoDisconnectObject
RegisterDragDrop

oleaut32

SysAllocStringLen
SysAllocString
VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocStringByteLen
SysFreeString
VariantChangeType
VariantClear
VariantInit

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

wininet

HttpSendRequestW
HttpOpenRequestW
InternetSetOptionA
InternetQueryOptionA
InternetConnectW
InternetCloseHandle
InternetOpenW

ws2_32

connect
inet_addr
recv
send
WSAGetLastError
htons

shell

?FourierTransformationStart@@YAXXZ
?FourierTransformationEnd@@YAXXZ

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapUnlockBits
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipGetImagePixelFormat
GdipDrawImageRectI

winmm

PlaySoundA

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 413KB - Virtual size: 413KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.init
Size: 512B - Virtual size: 409B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 133KB - Virtual size: 133KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a00b938f0615aaa185c9a663789897ee

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

user32

gdi32

msimg32

winspool.drv

shell32

shlwapi

uxtheme

ole32

oleaut32

imm32

wininet

ws2_32

shell

oleacc

gdiplus

winmm

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 413KB - Virtual size: 413KB

.data Size: 56KB - Virtual size: 1.3MB

.init Size: 512B - Virtual size: 409B

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 133KB - Virtual size: 133KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 413KB - Virtual size: 413KB

.data
Size: 56KB - Virtual size: 1.3MB

.init
Size: 512B - Virtual size: 409B

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 133KB - Virtual size: 133KB