cc2be2e454a39b096bd8207caff85eae70ce8940bf0485306db66c579e32f492

Sharing

Copy URL Twitter E-mail

General

Target

cc2be2e454a39b096bd8207caff85eae70ce8940bf0485306db66c579e32f492
Size

276KB
MD5

0727cbca2a20965aefa209ffe0b49200
SHA1

840699cf98b4d34a3d5109085991596a9e663753
SHA256

cc2be2e454a39b096bd8207caff85eae70ce8940bf0485306db66c579e32f492
SHA512

c3be97bb05ca99ddc1c9b8847087b5f7b8b4362d9d81285a5a1e8cc6c443bfc01d53ccd34fbacae0a29be7188573bb955bfe7eeb71dc982cffe512096e89cff3
SSDEEP

6144:B3jKMGFTlJ0YWNIPV+PPi7sZ7Z363oby2G14WUP/H:1jcRJi/F7Zco234d/H

Score

N/A

Malware Config

Signatures

Files

cc2be2e454a39b096bd8207caff85eae70ce8940bf0485306db66c579e32f492
.exe windows x86

5fa4d589c624f9f9060467b05d627fda

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLastError
OutputDebugStringA
LoadResource
LoadLibraryW
SizeofResource
GetProcessHeap
lstrcpyW
LoadLibraryExW
GetStartupInfoA
GetProcAddress
HeapFree
lstrcatW
GetCurrentProcessId
InterlockedDecrement
LoadLibraryA
DeleteCriticalSection
HeapDestroy
GetUserDefaultLCID
InterlockedIncrement
EnterCriticalSection
FlushInstructionCache
SetUnhandledExceptionFilter
GlobalFindAtomW
LocalFree
GetTickCount
GetSystemTimeAsFileTime
HeapAlloc
FormatMessageW
lstrcpynW
SetLastError
GetEnvironmentStringsA
lstrcmpiW
MultiByteToWideChar
FindResourceW
GetSystemInfo
FreeLibrary
RemoveDirectoryA
QueryPerformanceCounter
GetCurrentProcess
GetModuleFileNameW
LeaveCriticalSection
lstrlenA
lstrlenW
VirtualFree

user32

ShowWindow
LoadStringW
SendDlgItemMessageW
MapWindowPoints
EnableWindow
DestroyWindow
CopyRect
SetWindowTextW
SetDlgItemTextW
GetWindowRect
SetWindowLongW
MessageBoxW
GetWindow
SetFocus
SetWindowPos
DrawTextW
GetParent
GetDialogBaseUnits
GetClientRect
GetWindowLongW
SendMessageW
EndDialog
DialogBoxParamW
GetSystemMetrics
CreateDialogParamW
GetDlgItemTextW
SystemParametersInfoW
CharNextW
LoadImageW
GetDlgItem

wldap32

ldap_count_entries
ldap_count_values
ldap_controls_freeW
ldap_count_references

advapi32

RegSetValueExW
RegCloseKey
RegEnumKeyExW
GetTraceLoggerHandle
RegQueryValueExW
RegDeleteValueW
GetTraceEnableLevel
GetTraceEnableFlags
RegDeleteKeyW
RegisterTraceGuidsW
RegQueryInfoKeyW
UnregisterTraceGuids
RegOpenKeyExW
TraceMessage
RegCreateKeyExW

url

OpenURLA
OpenURL
TelnetProtocolHandlerA
TelnetProtocolHandler

rpcrt4

CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerQueryInterface
NdrDllCanUnloadNow
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Connect
NdrDllUnregisterProxy
NdrDllRegisterProxy
NdrCStdStubBuffer_Release
NdrOleAllocate
CStdStubBuffer_AddRef
NdrDllGetClassObject
CStdStubBuffer_CountRefs
NdrOleFree

shell32

SHGetFolderPathW
ShellExecuteW

Sections

text
Size: 121KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 152KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fa4d589c624f9f9060467b05d627fda

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

wldap32

advapi32

url

rpcrt4

shell32

Sections

text Size: 121KB - Virtual size: 120KB

.rdata Size: 152KB - Virtual size: 156KB

.rsrc Size: 1024B - Virtual size: 916B

text
Size: 121KB - Virtual size: 120KB

.rdata
Size: 152KB - Virtual size: 156KB

.rsrc
Size: 1024B - Virtual size: 916B