virtualdj8[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

virtualdj8.exe
Size

40.3MB
MD5

1fbdce58c47cd5aece36a9aa8018ac9d
SHA1

e811aeef498475d4504a3347a7a7f3c4b6e6f894
SHA256

3f43fff27850cbda0250c6c738f0235c8831b2dccb49e8e01442d9fab104fc76
SHA512

98ed0c0a92773ff35430cb7737591fdcb154e35a61b8be8e37af0160b13357879243bdb0ee67e253e53516ba646b066b45fda8058966d332dfa5675649bce477
SSDEEP

786432:C7ZXLTbGK11DiRg2CV3NlcbwVBLI7XZc6453og1b:KBLTRl2INlcEXSZc64B

Score

1^/10

Malware Config

Signatures

Files

virtualdj8.exe
.exe windows x86

b356952dec7c24b05606bc155f233079

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

secur32

FreeCredentialsHandle
InitializeSecurityContextA
DeleteSecurityContext
ApplyControlToken
QueryContextAttributesA
FreeContextBuffer
DecryptMessage
EncryptMessage
AcquireCredentialsHandleA

user32

PostMessageW
GetMonitorInfoW
DrawTextW
GetDC
ReleaseDC
GetIconInfo
SystemParametersInfoW
RegisterWindowMessageW
EnumDisplayMonitors
EnumDisplayDevicesW
GetDesktopWindow
GetKeyState
DestroyIcon
wsprintfW
SendMessageW
MessageBoxA
GetUserObjectInformationW
GetProcessWindowStation
CreateWindowExW
SetWindowLongW
DefWindowProcW
DestroyWindow
MoveWindow
ShowWindow
InvalidateRect
SetFocus
RegisterDeviceNotificationW
UnregisterDeviceNotification
RegisterClassW
PostMessageA
GetClientRect
LoadIconW
LoadCursorW
PostQuitMessage
GetWindowLongW
TrackMouseEvent
GetMessageW
CallWindowProcW
SetWindowPos
AdjustWindowRectEx
FillRect
EndPaint
BeginPaint
wsprintfA
KillTimer
SetTimer
SetWindowTextW
GetSystemMetrics
IsWindowVisible
GetKeyNameTextW
FindWindowW
IsWindow
InsertMenuItemW
MessageBoxW
DestroyMenu
TrackPopupMenu
GetCursorPos
SetMenuDefaultItem
AppendMenuW
CreatePopupMenu
ClipCursor
SetCursorPos
ReleaseCapture
SetCapture
SetCursor
GetMessageExtraInfo
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetWindowRect
SetForegroundWindow
EnableWindow
DispatchMessageW
TranslateMessage
PeekMessageW
WaitMessage
ScreenToClient
ClientToScreen

gdi32

GetCharacterPlacementW
GetCharacterPlacementA
GetGlyphOutlineA
GetTextMetricsA
GetObjectA
SetMapMode
GetDIBits
GetObjectW
ExtTextOutA
SetBkMode
BitBlt
GetDeviceCaps
SetBkColor
CreateDIBSection
CreateCompatibleDC
EnumFontFamiliesExW
DeleteObject
CreateFontW
MoveToEx
ExtTextOutW
SelectObject
GetTextMetricsW
SetTextColor
GetFontLanguageInfo
SetTextAlign
DeleteDC
CreateFontIndirectW
CreateFontIndirectA

ws2_32

shutdown
WSASetLastError
WSAIoctl
sendto
recvfrom
accept
recv
send
listen
bind
htons
connect
freeaddrinfo
socket
getaddrinfo
closesocket
ioctlsocket
__WSAFDIsSet
getsockopt
inet_addr
ntohl
setsockopt
WSAStartup
WSACleanup
WSAGetLastError
select
gethostname
getpeername
ntohs
getnameinfo
getsockname

advapi32

RegCreateKeyW
RegOpenKeyExW
RegEnumKeyW
RegOpenKeyW
RegCloseKey
RegOpenKeyA
RegQueryValueExA
ReportEventA
RegisterEventSourceA
DeregisterEventSource
CryptGenRandom
OpenProcessToken
DuplicateTokenEx
AllocateAndInitializeSid
RegSetValueExW
RegQueryValueExW
SetTokenInformation
GetLengthSid
FreeSid
CreateProcessAsUserW
CryptAcquireContextA
CryptReleaseContext

crypt32

CryptUnprotectData

wldap32

ord32
ord27
ord26
ord22
ord41
ord50
ord60
ord211
ord46
ord143
ord35
ord79
ord30
ord301
ord33
ord200

winmm

midiOutOpen
midiOutReset
midiInClose
midiInUnprepareHeader
midiInReset
midiInStart
timeGetDevCaps
timeBeginPeriod
timeEndPeriod
midiInAddBuffer
midiInPrepareHeader
midiOutShortMsg
midiOutPrepareHeader
midiOutLongMsg
midiOutUnprepareHeader
midiInGetNumDevs
midiInMessage
midiInGetDevCapsW
midiOutGetNumDevs
midiOutMessage
midiOutGetDevCapsW
midiInOpen
midiOutClose

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

dsound

ord1
ord6

wininet

InternetGetCookieExW
InternetSetCookieW

iphlpapi

GetBestRoute
GetIpAddrTable

hid

HidD_GetHidGuid
HidD_SetFeature
HidP_GetCaps
HidD_GetPreparsedData
HidD_GetAttributes

setupapi

SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
SetupDiGetClassDevsW
SetupDiEnumDeviceInfo

avicap32

capCreateCaptureWindowW

kernel32

lstrcmpiA
VirtualQueryEx
CreateSemaphoreW
CreateThread
ResumeThread
GetProcessId
RtlCaptureContext
GetProcessAffinityMask
SetConsoleTextAttribute
ReleaseMutex
MoveFileExA
CreateSemaphoreA
GetModuleHandleA
CreateEventA
ReleaseSemaphore
InitializeSListHead
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
RtlUnwind
VirtualQuery
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
TlsFree
TlsSetValue
TlsGetValue
ExitThread
TlsAlloc
InitializeCriticalSectionAndSpinCount
FreeLibraryAndExitThread
SetLastError
GetCPInfo
DecodePointer
EncodePointer
ExitProcess
GetCurrentThread
LoadLibraryExW
GetExitCodeProcess
GlobalUnlock
GlobalLock
GlobalAlloc
GetOverlappedResult
WaitForMultipleObjects
CancelIo
GetLogicalDriveStringsW
GetVolumeInformationW
GetDriveTypeW
GetUserDefaultUILanguage
GetLongPathNameW
GetCurrentProcess
TerminateProcess
GetModuleHandleExW
GetACP
SetConsoleCtrlHandler
GetConsoleMode
SleepEx
SetConsoleMode
HeapQueryInformation
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
GetTimeZoneInformation
GetConsoleCP
FreeResource
ReadConsoleW
FindResourceA
GlobalMemoryStatusEx
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetCommandLineA
VerifyVersionInfoW
VerSetConditionMask
lstrcmpW
GetCommandLineW
SetEvent
ResetEvent
TerminateThread
SetThreadPriority
FormatMessageA
GetSystemTime
GetSystemTimeAsFileTime
SystemTimeToFileTime
GetProcessHeap
DeleteCriticalSection
GetFileSize
LockFileEx
LocalFree
CreateFileMappingA
UnlockFile
GetEnvironmentStringsW
HeapDestroy
HeapCompact
HeapAlloc
GetSystemInfo
HeapReAlloc
DeleteFileA
GetVersionExA
WaitForSingleObjectEx
CreateFileA
FlushViewOfFile
OutputDebugStringW
GetFileAttributesExW
GetFileAttributesA
GetDiskFreeSpaceA
FormatMessageW
GetTempPathA
HeapSize
HeapValidate
GetCurrentThreadId
CreateMutexW
UnlockFileEx
GetFullPathNameA
InitializeCriticalSection
LeaveCriticalSection
LockFile
OutputDebugStringA
GetDiskFreeSpaceW
InterlockedCompareExchange
EnterCriticalSection
FreeEnvironmentStringsW
SetEnvironmentVariableA
HeapFree
HeapCreate
TryEnterCriticalSection
VerifyVersionInfoA
ExpandEnvironmentStringsA
PeekNamedPipe
GlobalMemoryStatus
FlushConsoleInputBuffer
ReadConsoleInputA
AreFileApisANSI
WaitForSingleObject
CreateEventW
ExpandEnvironmentStringsW
GetSystemDirectoryW
GetLogicalDrives
GetVersionExW
GetThreadPriority
GetStdHandle
InterlockedDecrement
GetTickCount
CreateFileW
DeviceIoControl
CloseHandle
Sleep
ReadFile
WriteFile
GetFileSizeEx
SetFilePointerEx
GetConsoleScreenBufferInfo
GetNativeSystemInfo
MultiByteToWideChar
LoadLibraryA
WriteConsoleW
GetProcAddress
FreeLibrary
WideCharToMultiByte
GetFileType
InterlockedIncrement
GetSystemPowerStatus
VirtualAlloc
VirtualFree
LoadLibraryW
GetModuleFileNameW
GetTempPathW
GetFileAttributesW
CreateFileMappingW
MapViewOfFile
GetCurrentProcessId
UnmapViewOfFile
CreateProcessW
OpenFileMappingW
QueryPerformanceFrequency
QueryPerformanceCounter
GetFullPathNameW
GetCurrentDirectoryW
SetFilePointer
SetEndOfFile
FlushFileBuffers
FindFirstFileExW
FindClose
MoveFileExW
GetLastError
CopyFileW
CreateDirectoryW
DeleteFileW
SetFileTime
FindFirstFileW
FindNextFileW
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedExchange
SetThreadExecutionState
GetModuleFileNameA
SetErrorMode

comdlg32

ChooseColorW
GetSaveFileNameW
ChooseFontW
GetOpenFileNameW

shell32

DragQueryPoint
SHGetFolderPathW
SHFileOperationW
SHGetSpecialFolderPathA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHBrowseForFolderW
CommandLineToArgvW
Shell_NotifyIconW
DragFinish
ShellExecuteW
DragQueryFileW
DragAcceptFiles
SHGetMalloc

ole32

CoTaskMemFree
CoCreateInstance
CLSIDFromString
PropVariantClear
CoInitialize
CoInitializeEx
CoTaskMemAlloc
RegisterDragDrop

comctl32

ImageList_GetIcon

oleaut32

SysFreeString
VariantClear
SysStringLen
SysAllocStringLen
VariantInit

Sections

.text
Size: 18.9MB - Virtual size: 18.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 349KB - Virtual size: 7.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 43KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 16.4MB - Virtual size: 16.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.R2R
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b356952dec7c24b05606bc155f233079

Headers

DLL Characteristics

File Characteristics

Imports

secur32

user32

gdi32

ws2_32

advapi32

crypt32

wldap32

winmm

version

dsound

wininet

iphlpapi

hid

setupapi

avicap32

kernel32

comdlg32

shell32

ole32

comctl32

oleaut32

Sections

.text Size: 18.9MB - Virtual size: 18.9MB

.rdata Size: 4.7MB - Virtual size: 4.7MB

.data Size: 349KB - Virtual size: 7.0MB

.gfids Size: 1024B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rodata Size: 43KB - Virtual size: 44KB

_RDATA Size: 7KB - Virtual size: 8KB

.rsrc Size: 16.4MB - Virtual size: 16.4MB

.R2R Size: 512B - Virtual size: 4KB

.text
Size: 18.9MB - Virtual size: 18.9MB

.rdata
Size: 4.7MB - Virtual size: 4.7MB

.data
Size: 349KB - Virtual size: 7.0MB

.gfids
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rodata
Size: 43KB - Virtual size: 44KB

_RDATA
Size: 7KB - Virtual size: 8KB

.rsrc
Size: 16.4MB - Virtual size: 16.4MB

.R2R
Size: 512B - Virtual size: 4KB