5f03274a117be197e9ce0c052ee648403d5fbc5303aa82cbcfa984db1a52a1e4

Sharing

Copy URL Twitter E-mail

General

Target

5f03274a117be197e9ce0c052ee648403d5fbc5303aa82cbcfa984db1a52a1e4
Size

13.1MB
MD5

187e929fa62ad2534c3ac60d8cc045f6
SHA1

c7615d09ef058f9c39eb249110975e664cf9fd20
SHA256

5f03274a117be197e9ce0c052ee648403d5fbc5303aa82cbcfa984db1a52a1e4
SHA512

fd36845cc9402382d15bf3f7d2a83fe51889f025054188b84fc4457966535fdf3e8895e33bf129a95411d18d79283d52029326aafe9f3dabcde0f1843663c884
SSDEEP

196608:dkvcoTKdgjxTZyeksqvRvNEA9h9SIeSDLb:dkUOF1GsQPEhIeqP

Score

1^/10

Malware Config

Signatures

Files

5f03274a117be197e9ce0c052ee648403d5fbc5303aa82cbcfa984db1a52a1e4
.exe windows:6 windows x86 arch:x86

2dffc0c1fc78c55ba9d72426f36831e6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

Issuer

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Not Before

15/06/2007, 00:00

Not After

14/06/2012, 23:59

Subject

CN=VeriSign Time Stamping Services Signer - G2,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageDigitalSignature
KeyUsageContentCommitment

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

Issuer

CN=Thawte Timestamping CA,OU=Thawte Certification,O=Thawte,L=Durbanville,ST=Western Cape,C=ZA

Not Before

04/12/2003, 00:00

Not After

03/12/2013, 23:59

Subject

CN=VeriSign Time Stamping Services CA,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageTimeStamping

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

Issuer

OU=Class 3 Public Primary Certification Authority,O=VeriSign\, Inc.,C=US

Not Before

21/05/2009, 00:00

Not After

20/05/2019, 23:59

Subject

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Extended Key Usages

ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning

Key Usages

KeyUsageCertSign
KeyUsageCRLSign

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

Issuer

CN=VeriSign Class 3 Code Signing 2009-2 CA,OU=VeriSign Trust Network+OU=Terms of use at https://www.verisign.com/rpa (c)09,O=VeriSign\, Inc.,C=US

Not Before

05/11/2009, 00:00

Not After

10/12/2010, 23:59

Subject

CN=Adobe Systems Incorporated,OU=Digital ID Class 3 - Microsoft Software Validation v2+OU=Information Systems,O=Adobe Systems Incorporated,L=San Jose,ST=California,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

Key Usages

KeyUsageDigitalSignature

c9:80:ac:e9:0f:b7:da:e6:be:6b:d3:6f:c6:07:dc:9e:9d:b3:41:64
Signer

Actual PE Digest

c9:80:ac:e9:0f:b7:da:e6:be:6b:d3:6f:c6:07:dc:9e:9d:b3:41:64

Digest Algorithm

sha1

PE Digest Matches

false

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
ExitProcess
IsBadStringPtrA
Sleep
IsBadStringPtrW
GetTickCount
CreateFileW
LockFile
ReadFile
SetFilePointer
SetFilePointerEx
UnlockFile
WriteFile
HeapDestroy
GetModuleFileNameW
CreateEventW
SetLastError
IsDebuggerPresent
OutputDebugStringW
TryEnterCriticalSection
GlobalAlloc
GlobalReAlloc
GlobalSize
GlobalUnlock
GlobalLock
GlobalFree
MulDiv
DebugBreak
InitializeCriticalSection
GetCurrentThreadId
FreeResource
LoadResource
LockResource
SizeofResource
FindResourceW
FreeLibrary
GetProcAddress
GetLastError
RaiseException
CloseHandle
InterlockedPushEntrySList
LoadLibraryW
GetUserDefaultLCID
SuspendThread
OutputDebugStringA
GetModuleHandleA
LoadLibraryA
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
GlobalAddAtomW
GetCurrentThread
LoadLibraryExW
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CompareStringA
lstrcpyW
GlobalGetAtomNameW
GetAtomNameW
EncodePointer
GlobalFindAtomW
CompareStringW
GetThreadPriority
ResumeThread
GetProfileIntW
VirtualProtect
SetErrorMode
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalHandle
LocalAlloc
LocalReAlloc
FlushFileBuffers
GetFileSize
GetFullPathNameW
GetShortPathNameW
GetVolumeInformationW
SetEndOfFile
DuplicateHandle
GetHandleInformation
lstrcmpiW
MoveFileW
GetStringTypeExW
GetThreadLocale
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GetDiskFreeSpaceW
GetFileTime
GetTempFileNameW
SetFileTime
ReplaceFileW
SystemTimeToFileTime
SystemTimeToTzSpecificLocalTime
VerSetConditionMask
VerifyVersionInfoW
FindResourceExW
GetFileSizeEx
LocalFileTimeToFileTime
SetFileAttributesW
SearchPathW
GetTempPathW
PulseEvent
GetWindowsDirectoryW
ReleaseSemaphore
ReleaseMutex
CreateMutexW
WaitForMultipleObjects
CreateSemaphoreW
LocalLock
LocalUnlock
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
GetStartupInfoW
RtlUnwind
DecodePointer
InterlockedFlushSList
GetModuleHandleExW
GetStdHandle
GetFileType
WriteConsoleW
GetCommandLineA
HeapValidate
ExitThread
FreeLibraryAndExitThread
HeapQueryInformation
VirtualAlloc
QueryPerformanceFrequency
SetStdHandle
SetConsoleCtrlHandler
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
GetDateFormatW
GetTimeFormatW
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetTimeZoneInformation
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStringTypeW
GetCommandLineW
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FileTimeToSystemTime
SetLocalTime
GetLocalTime
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
SetThreadPriority
CreateThread
ResetEvent
SetEvent
GetQueuedCompletionStatus
GenerateConsoleCtrlEvent
WideCharToMultiByte
MultiByteToWideChar
SetSystemPowerState
IsBadWritePtr
IsBadReadPtr
CopyFileW
FormatMessageW
LocalFree
GlobalFlags
GetModuleHandleW
VirtualQuery
GetVersionExW
GetSystemDirectoryW
GetSystemInfo
OpenProcess
CreateProcessW
GetExitCodeProcess
TerminateProcess
GetCurrentProcessId
GetCurrentProcess
WaitForSingleObject
PeekNamedPipe
CreatePipe
RemoveDirectoryW
GetFileAttributesExW
GetFileAttributesW
FindNextFileW
FindFirstFileW
FindClose

user32

IsZoomed
GetNextDlgGroupItem
GetNextDlgTabItem
GetClipboardOwner
SetClipboardViewer
GetClipboardViewer
ChangeClipboardChain
GetOpenClipboardWindow
SetCapture
KillTimer
HiliteMenuItem
DrawMenuBar
GetSystemMenu
DragDetect
UpdateWindow
GetForegroundWindow
GetDCEx
GetUpdateRect
GetUpdateRgn
SetWindowRgn
GetWindowRgn
InvalidateRect
InvalidateRgn
ValidateRgn
RedrawWindow
LockWindowUpdate
ShowScrollBar
EnableScrollBar
GetWindowContextHelpId
CreateCaret
HideCaret
ShowCaret
SetCaretPos
GetCaretPos
WindowFromPoint
ChildWindowFromPoint
ChildWindowFromPointEx
SetParent
FindWindowW
FindWindowExW
DlgDirListW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirSelectComboBoxExW
ArrangeIconicWindows
NotifyWinEvent
ShowWindow
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextW
GetDlgItemTextW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
ScrollWindowEx
SetWindowTextW
IsDialogMessageW
CreateDialogIndirectParamW
EndDialog
SetRect
SetRectEmpty
ReleaseCapture
GetAsyncKeyState
RealChildWindowFromPoint
GetClipboardFormatNameA
GetClipboardFormatNameW
UnpackDDElParam
GetKeyNameTextW
MapVirtualKeyW
DestroyMenu
DestroyIcon
CharUpperW
LoadAcceleratorsW
TranslateAcceleratorW
IntersectRect
GetMenuBarInfo
ReuseDDElParam
CharNextW
CopyAcceleratorTableW
IsRectEmpty
SetLayeredWindowAttributes
EnumDisplayMonitors
TrackMouseEvent
WaitMessage
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
EnumChildWindows
SetClassLongW
DrawIconEx
UnionRect
GetIconInfo
SendDlgItemMessageA
GetDialogBaseUnits
IsClipboardFormatAvailable
SetCursorPos
CharUpperBuffW
UpdateLayeredWindow
CopyIcon
MonitorFromRect
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsCharLowerW
MapVirtualKeyExW
SubtractRect
GetDoubleClickTime
MsgWaitForMultipleObjectsEx
DestroyCursor
GetComboBoxInfo
GetWindowTextW
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
SendNotifyMessageW
SetWindowPlacement
GetWindowPlacement
IsChild
IsIconic
CallWindowProcW
GetMessageTime
GetMessagePos
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
InflateRect
CopyRect
GetSysColor
RegisterWindowMessageW
SystemParametersInfoW
OffsetRect
MessageBeep
InSendMessage
GetWindow
SetWindowContextHelpId
SetWindowPos
RegisterClipboardFormatW
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
CheckMenuRadioItem
InvertRect
FrameRect
FillRect
DrawFocusRect
GetSysColorBrush
GetMenuContextHelpId
SetMenuContextHelpId
ScrollDC
ExcludeUpdateRgn
WindowFromDC
GetTabbedTextExtentW
DrawStateW
GrayStringW
DrawTextExW
DrawTextW
DrawIcon
SetMenuDefaultItem
GetMenuDefaultItem
SetMenuItemInfoW
GetMenuItemInfoW
InsertMenuItemW
DeleteMenu
RemoveMenu
ModifyMenuW
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
EnableMenuItem
CheckMenuItem
CreatePopupMenu
CreateMenu
GetMenuState
GetMenuStringW
LoadMenuIndirectW
LoadMenuW
IsMenu
DrawFrameControl
DrawEdge
CallNextHookEx
SetWindowsHookExW
GetCursorPos
ValidateRect
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetFocus
MapDialogRect
TabbedTextOutW
IsWindow
PostQuitMessage
PeekMessageW
UnregisterClassW
MessageBoxW
GetSystemMetrics
GetDC
GetWindowDC
ReleaseDC
GetClientRect
GetWindowRect
LoadStringW
SendMessageW
PostMessageW
DefWindowProcW
RegisterClassW
GetClassInfoW
CreateWindowExW
DestroyWindow
GetActiveWindow
SetTimer
SetPropW
GetPropW
RemovePropW
GetWindowLongW
DrawAnimatedRects
DrawCaption
WinHelpW
GetScrollInfo
SetScrollInfo
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
PtInRect
EqualRect
GetDesktopWindow
GetParent
LoadCursorW
LoadIconW
LoadImageW
CopyImage
ExitWindowsEx
AttachThreadInput
WaitForInputIdle
MoveWindow
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
SetActiveWindow
SetForegroundWindow
EnumWindows
GetWindowThreadProcessId
BringWindowToTop
IsWindowVisible
CloseWindow
OpenIcon
ShowOwnedPopups
FlashWindow
GetClassInfoExW
PostThreadMessageW
MapWindowPoints
EnumDisplaySettingsW
MonitorFromWindow
GetMonitorInfoW
GetKeyState
wsprintfW
AdjustWindowRectEx
BeginDeferWindowPos
GetWindowTextLengthW
MonitorFromPoint

gdi32

CreatePatternBrush
CreateRectRgn
CreateRectRgnIndirect
CreateRoundRectRgn
CreateSolidBrush
DrawEscape
Ellipse
EnumObjects
EqualRgn
Escape
ExtEscape
ExtCreateRegion
ExtFloodFill
FillRgn
FloodFill
FrameRgn
GetROP2
GetAspectRatioFilterEx
GetBkColor
GetBkMode
GetBitmapBits
GetBitmapDimensionEx
GetBoundsRect
GetBrushOrgEx
GetCharWidthW
GetCharWidthFloatW
GetCharABCWidthsW
GetCharABCWidthsFloatW
GetCurrentObject
GetCurrentPositionEx
GetFontData
GetGlyphOutlineW
GetGraphicsMode
GetMapMode
GetNearestColor
GetNearestPaletteIndex
GetObjectType
GetOutlineTextMetricsW
GetPaletteEntries
GetPixel
GetPolyFillMode
GetRegionData
GetRgnBox
GetStretchBltMode
GetTextCharacterExtra
GetTextAlign
GetTextColor
GetFontLanguageInfo
GetCharacterPlacementW
GetViewportExtEx
GetViewportOrgEx
GetWindowExtEx
GetWindowOrgEx
InvertRgn
MaskBlt
PlgBlt
OffsetRgn
PatBlt
Pie
PaintRgn
PolyPolygon
PtInRegion
PtVisible
RectInRegion
RectVisible
Rectangle
ResetDCW
RoundRect
ResizePalette
SetBitmapBits
SetBoundsRect
SetPaletteEntries
SetPixel
SetPixelV
SetRectRgn
UpdateColors
PlayEnhMetaFile
GdiComment
GetTextMetricsW
AngleArc
PolyPolyline
GetWorldTransform
GetColorAdjustment
CreateHalftonePalette
StartDocW
EndDoc
CreatePolyPolygonRgn
EndPage
AbortDoc
SetAbortProc
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
CreatePenIndirect
CreatePen
CreateICW
CreateHatchBrush
CreateFontW
CreateEllipticRgnIndirect
CreateEllipticRgn
CreateDIBPatternBrushPt
GetTextExtentPointW
DeleteMetaFile
EnumFontFamiliesExW
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
StretchDIBits
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
PolylineTo
PolyBezierTo
DeleteDC
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreatePalette
DeleteObject
GetDeviceCaps
GetDIBits
GetStockObject
GetSystemPaletteEntries
RealizePalette
SelectObject
SelectPalette
StretchBlt
SetStretchBltMode
GdiAlphaBlend
CreateDIBSection
SetDIBColorTable
GetObjectW
CreateFontIndirectW
GetTextExtentPoint32W
GetPath
CreateDCW
CreateDiscardableBitmap
CreateBrushIndirect
CreateBitmapIndirect
CombineRgn
Chord
Arc
AnimatePalette
CreateBitmap
ExtTextOutW
MoveToEx
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
PathToRegion
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
ExtCreatePen
GetMiterLimit
GetArcDirection
TextOutW
CreatePolygonRgn
DPtoLP
CloseMetaFile
Polygon
Polyline
PolyBezier
SetBitmapDimensionEx
SetBrushOrgEx
GetTextFaceW
GetKerningPairsW
UnrealizeObject
CopyMetaFileW
ExcludeClipRect
GetClipBox
GetClipRgn
IntersectClipRect
SetTextColor
CreateEnhMetaFileW
CloseEnhMetaFile
CreateMetaFileW
StartPage
LPtoDP
LineTo
OffsetClipRgn
PlayMetaFile
RestoreDC
SetTextCharacterExtra
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetGraphicsMode
SetMapperFlags
SetBkMode
SetBkColor
ExtSelectClipRgn
SelectClipRgn
SaveDC

advapi32

LookupPrivilegeValueW
GetFileSecurityW
RegEnumValueW
RegSetValueW
RegEnumKeyExW
RegSetValueExW
RegQueryValueExW
RegQueryValueW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
SetFileSecurityW
AdjustTokenPrivileges
OpenProcessToken
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyW

shell32

DragAcceptFiles
ShellExecuteW
ExtractIconW
SHGetFileInfoW
SHAddToRecentDocs
DragQueryFileW
DragFinish
SHAppBarMessage
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
ShellExecuteExW

ole32

CoTaskMemFree
StgCreateDocfile
StgOpenStorage
StgOpenStorageOnILockBytes
StgIsStorageFile
ReadClassStg
CreateILockBytesOnHGlobal
CreateFileMoniker
OleLoad
StringFromCLSID
CoTaskMemAlloc
WriteClassStg
CoTreatAsClass
OleUninitialize
WriteFmtUserTypeStg
ReadFmtUserTypeStg
OleDuplicateData
ReleaseStgMedium
OleRegGetUserType
SetConvertStg
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
StringFromGUID2
StgCreateDocfileOnILockBytes
CoDisconnectObject
PropVariantCopy
StgIsStorageILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleSave
OleSaveToStream
OleSetContainedObject
OleIsRunning
OleLockRunning
OleGetIconOfClass
OleSetMenuDescriptor
GetClassFile
OleQueryLinkFromData
OleQueryCreateFromData
OleGetClipboard
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
CoInitialize
CoGetMalloc
OleRun
CLSIDFromProgID
IIDFromString
CLSIDFromString
CoCreateInstance
CoInitializeEx
CoUninitialize
CreateBindCtx
CreateStreamOnHGlobal

oleaut32

SafeArrayPtrOfIndex
VarDateFromStr
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnlock
SafeArrayLock
SafeArrayRedim
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayAllocData
SafeArrayAllocDescriptor
SysReAllocStringLen
LoadRegTypeLi
SafeArrayDestroy
SysAllocStringByteLen
SysStringByteLen
SysAllocStringLen
SysAllocString
VarCyFromStr
SysFreeString
SysStringLen
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayUnaccessData
VariantInit
VariantClear
VariantCopy
VariantCopyInd
VariantChangeType
VarCmp
LHashValOfNameSys
LoadTypeLi
RegisterTypeLi
GetActiveObject
OleCreateFontIndirect
OleCreatePictureIndirect
VarUdateFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr

comctl32

ImageList_Create
ImageList_Destroy
ImageList_AddMasked
InitCommonControlsEx

msimg32

AlphaBlend
TransparentBlt
GradientFill

shlwapi

PathFindFileNameW
PathFindExtensionW
PathRemoveFileSpecW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveExtensionW

uxtheme

GetThemeColor
GetCurrentThemeName
GetThemeSysColor
DrawThemeText
DrawThemeParentBackground
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetWindowTheme
OpenThemeData
CloseThemeData
DrawThemeBackground

oledlg

OleUIChangeIconW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIInsertObjectW
OleUIBusyW
OleUIEditLinksW
OleUIConvertW

gdiplus

GdipDeleteGraphics
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipBitmapUnlockBits
GdipDrawImageRectI
GdipBitmapLockBits
GdipSetCompositingMode
GdipCreateBitmapFromStreamICM
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipDrawImageI

ws2_32

WSACleanup
WSAStartup

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetContext
ImmReleaseContext
ImmGetOpenStatus

winmm

PlaySoundW

winspool.drv

GetJobW
ClosePrinter
DocumentPropertiesW
OpenPrinterW

Sections

.text
Size: 5.9MB - Virtual size: 5.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 34KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 321KB - Virtual size: 321KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2dffc0c1fc78c55ba9d72426f36831e6

Code Sign

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5Certificate

Extended Key Usages

Key Usages

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4Certificate

Extended Key Usages

Key Usages

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5cCertificate

Extended Key Usages

Key Usages

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1Certificate

Extended Key Usages

Key Usages

c9:80:ac:e9:0f:b7:da:e6:be:6b:d3:6f:c6:07:dc:9e:9d:b3:41:64Signer

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

msimg32

shlwapi

uxtheme

oledlg

gdiplus

ws2_32

oleacc

imm32

winmm

winspool.drv

Sections

.text Size: 5.9MB - Virtual size: 5.9MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 34KB - Virtual size: 65KB

.rsrc Size: 5.5MB - Virtual size: 5.5MB

.reloc Size: 321KB - Virtual size: 321KB

38:25:d7:fa:f8:61:af:9e:f4:90:e7:26:b5:d6:5a:d5
Certificate

47:bf:19:95:df:8d:52:46:43:f7:db:6d:48:0d:31:a4
Certificate

65:52:26:e1:b2:2e:18:e1:59:0f:29:85:ac:22:e7:5c
Certificate

4d:4e:dd:77:06:ef:6b:31:31:d0:0b:1c:67:91:d0:c1
Certificate

c9:80:ac:e9:0f:b7:da:e6:be:6b:d3:6f:c6:07:dc:9e:9d:b3:41:64
Signer

.text
Size: 5.9MB - Virtual size: 5.9MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 34KB - Virtual size: 65KB

.rsrc
Size: 5.5MB - Virtual size: 5.5MB

.reloc
Size: 321KB - Virtual size: 321KB