2c8a1d69fa868e9590a82b0ce4485c82ba8b846c6958796cf5700ff6fb3517a7

Sharing

Copy URL Twitter E-mail

General

Target

2c8a1d69fa868e9590a82b0ce4485c82ba8b846c6958796cf5700ff6fb3517a7
Size

281KB
MD5

693c2e08b55e10509a7d977940275460
SHA1

173eb75a62fe3dc1af2b8e714894b83963523a31
SHA256

2c8a1d69fa868e9590a82b0ce4485c82ba8b846c6958796cf5700ff6fb3517a7
SHA512

4650db5dd4d62399e81a64e19f5a03144d5d211fedda5fc84d2f219a9c6d926607337bc9525b3db299ac7991e65d5de8f7f0a32969bcadee88d5340df9b0c1d0
SSDEEP

6144:Ll9XhdafqKFr/iGfh6yx68N5/u6VfJv1871Dtl:7PafDIYnpBv1gl

Score

N/A

Malware Config

Signatures

Files

2c8a1d69fa868e9590a82b0ce4485c82ba8b846c6958796cf5700ff6fb3517a7
.exe windows x86

27345281396d033a1407a6339a0c6e17

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateFileW
MultiByteToWideChar
GetTickCount
ExitThread
GetCurrentProcess
GetVersionExA
lstrcatA
MoveFileA
WriteFile
SetFilePointer
HeapAlloc
CreateFileA
LocalReAlloc
FindNextFileA
GetLogicalDriveStringsA
GetVolumeInformationA
GetDiskFreeSpaceExA
GetDriveTypeA
lstrlenA
GetFileAttributesA
CreateDirectoryA
GetLastError
DeleteFileA
OutputDebugStringA
lstrcpyA
Sleep
CancelIo
InterlockedExchange
ResetEvent
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
VirtualFree
DeleteCriticalSection
CreateThread
SetEvent
CloseHandle
lstrcmpiA
CreateToolhelp32Snapshot
Process32Next
OpenProcess
GetCurrentThreadId
CreateMutexA
CopyFileA
ReleaseMutex
InterlockedDecrement
GetSystemInfo
LocalSize
LocalFree
LocalAlloc
GetProcessHeap
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
IsBadWritePtr
HeapCreate
HeapDestroy
GetEnvironmentVariableA
SetUnhandledExceptionFilter
GetACP
HeapSize
GetCommandLineA
GetStartupInfoA
HeapReAlloc
TerminateProcess
ExitProcess
GetLocalTime
GetSystemTime
GetTimeZoneInformation
RaiseException
RtlUnwind
ReadFile
HeapFree
LoadLibraryA
GetProcAddress
FlushFileBuffers
CreateEventA
GetOEMCP
GetCPInfo
InterlockedIncrement
WideCharToMultiByte
SetLastError
lstrcpynA
InitializeCriticalSection
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
TlsGetValue
GetVersion
GetModuleHandleA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
GetProcessVersion
lstrcmpA
GlobalFlags

user32

GetAsyncKeyState
GetKeyState
LoadCursorA
DestroyCursor
BlockInput
SendMessageA
SystemParametersInfoA
keybd_event
mouse_event
SetCapture
WindowFromPoint
SetCursorPos
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClipboardData
GetSystemMetrics
SetRect
GetDC
GetDesktopWindow
ReleaseDC
GetCursorPos
GetCursorInfo
SetProcessWindowStation
OpenWindowStationA
PostThreadMessageA
GetInputState
GetWindowThreadProcessId
IsWindowVisible
EnumWindows
SetThreadDesktop
OpenInputDesktop
GetUserObjectInformationA
GetThreadDesktop
OpenDesktopA
PostMessageA
CreateWindowExA
CloseWindow
LoadStringA
EnableWindow
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
UnhookWindowsHookEx
SetWindowsHookExA
PeekMessageA
CallNextHookEx
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowRect
GetWindowTextA
IsIconic
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
DestroyWindow
GetDlgCtrlID
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
LoadIconA
SetWindowTextA
GetSysColorBrush
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
IsWindow
ExitWindowsEx
wsprintfA
CharNextA
GetMessageA
TranslateMessage
DispatchMessageA
GetWindowPlacement

gdi32

SetMapMode
GetClipBox
SetTextColor
SetBkColor
GetObjectA
GetDeviceCaps
SaveDC
RestoreDC
GetStockObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
CreateBitmap
SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteObject
DeleteDC
BitBlt
GetDIBits
CreateCompatibleBitmap

advapi32

RegCloseKey
RegCreateKeyExA
AdjustTokenPrivileges
GetTokenInformation
LookupAccountSidA
GetUserNameA
RegOpenKeyA
RegSaveKeyA
RegRestoreKeyA
RegEnumValueA
RegQueryInfoKeyA
RegDeleteKeyA
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
AllocateAndInitializeSid
GetLengthSid
InitializeAcl
AddAccessAllowedAce
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegSetKeySecurity
FreeSid
OpenEventLogA
ClearEventLogA
CloseEventLog
RegOpenKeyExA
RegQueryValueA
OpenSCManagerA
OpenServiceA
QueryServiceStatus
ControlService
CloseServiceHandle
OpenProcessToken
LookupPrivilegeValueA
RegSetValueExA

shell32

SHCreateDirectoryExA
SHGetFileInfoA

ole32

CoCreateInstance
OleRun
CLSIDFromString
CoUninitialize
CoInitialize
CLSIDFromProgID

oleaut32

SysFreeString
VariantClear
GetErrorInfo
SysAllocString

winmm

waveInStart
waveOutClose
waveOutUnprepareHeader
waveOutReset
waveInClose
waveInUnprepareHeader
waveOutGetNumDevs
waveInStop
waveOutWrite
waveInReset
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs
waveOutPrepareHeader
waveOutOpen

ws2_32

WSACleanup
setsockopt
connect
htons
gethostbyname
socket
recv
WSAStartup
closesocket
send
inet_ntoa
inet_addr
ntohs
getsockname
bind
getpeername
accept
listen
sendto
recvfrom
__WSAFDIsSet
htonl
WSASocketA
WSAGetLastError
gethostname
WSAIoctl
select

comctl32

ord17

msvcrt

??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z

netapi32

NetLocalGroupAddMembers
NetUserAdd

wininet

InternetCloseHandle
InternetReadFile
InternetOpenUrlA
InternetOpenA

avicap32

capCreateCaptureWindowA
capGetDriverDescriptionA

msvfw32

ICSeqCompressFrame
ICSeqCompressFrameStart
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSendMessage

psapi

EnumProcessModules
GetModuleFileNameExA

wtsapi32

WTSQuerySessionInformationA
WTSFreeMemory

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

Sections

.text
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27345281396d033a1407a6339a0c6e17

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

ws2_32

comctl32

msvcrt

netapi32

wininet

avicap32

msvfw32

psapi

wtsapi32

winspool.drv

Sections

.text Size: 279KB - Virtual size: 279KB

.rsrc Size: 512B - Virtual size: 16B

.text
Size: 279KB - Virtual size: 279KB

.rsrc
Size: 512B - Virtual size: 16B