c0d2cccf25264ea6acf5ed340700b58fbf7f9ee1e437a22aaa8495afe50b6e95

Sharing

Copy URL Twitter E-mail

General

Target

c0d2cccf25264ea6acf5ed340700b58fbf7f9ee1e437a22aaa8495afe50b6e95
Size

840KB
MD5

03b3b640acf2dbab0de4a7ac478e9942
SHA1

6b4ee330e551b2412eb5d444ff777c1ce57ca227
SHA256

c0d2cccf25264ea6acf5ed340700b58fbf7f9ee1e437a22aaa8495afe50b6e95
SHA512

0326e6d7cf38371a3ef9393cada96f7af694e5d42d496c7a0d9782f1b35ed9305398478da8f34674600eb601dc653f9332065a55744836243e42ac9ff7e151b9
SSDEEP

24576:u2YCT+/1bbJx+1QknFYZLh4XmmKRNVfOR:uBxKfn+L4mRNVOR

Score

N/A

Malware Config

Signatures

Files

c0d2cccf25264ea6acf5ed340700b58fbf7f9ee1e437a22aaa8495afe50b6e95
.exe windows x86

19b4dd3f4fbfc7872e86f35f54331d86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CopyFileW
VirtualFree
GlobalMemoryStatusEx
HeapAlloc
GetACP
InterlockedExchange
GetConsoleCP
WaitForSingleObject
MoveFileW
SetFilePointerEx
LCMapStringW
HeapFree
GetTimeFormatW
TlsAlloc
IsDebuggerPresent
SetEvent
HeapCreate
LoadLibraryW
SetErrorMode
UnhandledExceptionFilter
DeleteCriticalSection
GetDriveTypeW
GetTickCount
WritePrivateProfileStringW
GetWindowsDirectoryW
WritePrivateProfileSectionW
CreateFileW
HeapReAlloc
DuplicateHandle
GlobalFree
GetFileType
GetProcessIoCounters
GetShortPathNameW
RtlUnwind
WriteProcessMemory
GetExitCodeProcess
ReadProcessMemory
OutputDebugStringW
IsValidCodePage
CreateEventW
Sleep
SetHandleCount
ResumeThread
WriteConsoleW
GetComputerNameW
EnterCriticalSection
MulDiv
LoadLibraryA
FileTimeToSystemTime
GetSystemInfo
GetStdHandle
QueryPerformanceFrequency
GetSystemTimeAsFileTime
CreateProcessW
ExitProcess
GetModuleHandleW
GetStringTypeW
DeleteFileW
Process32FirstW
SetCurrentDirectoryW
GetCPInfo
HeapSize
FreeEnvironmentStringsW
FlushFileBuffers
GetCurrentDirectoryW
SetFileAttributesW
GetPrivateProfileSectionW
SystemTimeToFileTime
GetProcAddress
LoadResource
GetEnvironmentStringsW
GetLastError
GetEnvironmentVariableW
HeapDestroy
VirtualProtect
LockResource
RaiseException
SetFilePointer
CloseHandle
CreateDirectoryW
GetFileAttributesW
TlsGetValue
SetStdHandle
IsProcessorFeaturePresent
EnumResourceNamesW
TlsFree
FreeLibrary
GetFileSize
WideCharToMultiByte
GetConsoleMode
GetDiskFreeSpaceExW
lstrcmpiW
SetFileTime
DeviceIoControl
GetProcessHeap
VirtualAllocEx
CreateToolhelp32Snapshot
GetTimeZoneInformation
LeaveCriticalSection
GetDateFormatW
FileTimeToLocalFileTime
GetPrivateProfileSectionNamesW
SetEndOfFile
TlsSetValue
GetDiskFreeSpaceW
lstrlenW
GlobalLock
SetLastError
ReadFile
SizeofResource
FindFirstFileW
GetVolumeInformationW
SetEnvironmentVariableA
LocalFileTimeToFileTime
GetCurrentProcess
TerminateThread
VirtualFreeEx
SetEnvironmentVariableW
QueryPerformanceCounter
TerminateProcess
CreatePipe
VirtualAlloc
GetTempPathW
GetLocalTime
WriteFile
FindClose
OpenProcess
GetOEMCP
GetCurrentThread
CompareStringW
InterlockedDecrement
CreateThread
GetModuleFileNameW
GetTempFileNameW
InitializeCriticalSectionAndSpinCount
FindResourceW
ExitThread
GetFullPathNameW
FindNextFileW
GetCurrentThreadId
lstrcpyW
SetPriorityClass
GetPrivateProfileStringW
Process32NextW
GetCurrentProcessId
RemoveDirectoryW
SetUnhandledExceptionFilter
FormatMessageW
CreateHardLinkW
GlobalUnlock
GetCommandLineW
Beep
GetStartupInfoW
SetVolumeLabelW
GetSystemDirectoryW
LoadLibraryExW
MultiByteToWideChar
InterlockedIncrement
GetVersionExW
GlobalAlloc

user32

IsMenu
GetMessageW
SystemParametersInfoA
WindowFromPoint
MonitorFromPoint
IsIconic
CharLowerBuffA
TranslateAcceleratorA
SendMessageTimeoutA
BeginPaint
GetWindowRect
CopyRect
FlashWindow
GetWindowThreadProcessId
DestroyIcon
EmptyClipboard
wsprintfA
DrawFocusRect
GetClientRect
GetSubMenu
GetProcessWindowStation
CountClipboardFormats
GetAsyncKeyState
GetForegroundWindow
GetMenuItemID
GetWindowTextW
FindWindowW
GetMenuStringA
TranslateMessage
GetCursorPos
SendInput
SendDlgItemMessageA
IsDialogMessageA
LockWindowUpdate
ClientToScreen
ReleaseCapture
LoadCursorW
SetMenuItemInfoA
RegisterWindowMessageA
SetProcessWindowStation
AdjustWindowRectEx
LoadIconW
MessageBoxA
DestroyAcceleratorTable
VkKeyScanW
DestroyWindow
CreateAcceleratorTableA
IsZoomed
GetMenu
InsertMenuItemA
SetForegroundWindow
CharUpperBuffA
PostQuitMessage
CloseClipboard
MoveWindow
GetWindowDC
LoadImageA
SetWindowTextA
PostMessageA
SetClipboardData
SetKeyboardState
KillTimer
OpenDesktopA
EnumChildWindows
DispatchMessageA
DialogBoxParamA
GetDC
CreateMenu
IsCharAlphaNumericA
MessageBeep
CheckMenuRadioItem
GetKeyboardState
FindWindowExA
SetLayeredWindowAttributes
FrameRect
RegisterClassExA
IsWindowEnabled
DefWindowProcA
mouse_event
MonitorFromRect
IsClipboardFormatAvailable
SetMenu
SetUserObjectSecurity
IsWindowVisible
SetFocus
ScreenToClient
EnableWindow
CreateIconFromResourceEx
RegisterHotKey
SetTimer
DrawFrameControl
GetClipboardData
CreateWindowExA
DefDlgProcA
GetParent
SetActiveWindow
DestroyMenu
ReleaseDC
FillRect
SetCapture
IsCharAlphaA
GetWindowTextLengthA
CreatePopupMenu
GetClassLongA
GetDesktopWindow
CharNextA
GetCaretPos
GetDlgCtrlID
SendMessageA
RedrawWindow
DrawTextA
GetSysColor
BlockInput
AttachThreadInput
DeleteMenu
GetFocus
GetWindowLongW
SetWindowPos
GetMonitorInfoW
ExitWindowsEx
EndPaint
InflateRect
GetDlgItem
GetUserObjectSecurity
SetCursor
DrawMenuBar
GetCursorInfo
OpenClipboard
PtInRect
PeekMessageA
MapVirtualKeyA
IsDlgButtonChecked
EnumThreadWindows
SetMenuDefaultItem
IsWindow
GetKeyboardLayoutNameA
GetKeyState
GetMenuItemCount
keybd_event
InvalidateRect
EnumWindows
EndDialog
GetSystemMetrics
GetClassNameA
SetWindowLongW
TrackPopupMenuEx
UnregisterHotKey
IsCharLowerA
CopyImage
CloseWindowStation
LoadStringW
IsCharUpperA
GetMenuItemInfoA
CloseDesktop

gdi32

Ellipse
StrokePath
GetDIBits
ExtCreatePen
GetPixel
SetTextColor
SetPixel
CreatePen
GetDeviceCaps
GetTextExtentPoint32W
CreateFontW
EndPath
DeleteObject
CreateCompatibleBitmap
PolyDraw
CreateCompatibleDC
GetTextFaceW
SetViewportOrgEx
CreateSolidBrush
BeginPath
CloseFigure
CreateDCW
MoveToEx
GetStockObject
StretchBlt
RoundRect
SelectObject
AngleArc
StrokeAndFillPath
Rectangle
SetBkMode
GetObjectW
LineTo
DeleteDC
SetBkColor

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

GetAce
InitiateSystemShutdownExW
DuplicateTokenEx
RegCreateKeyExW
RegQueryValueExW
OpenThreadToken
RegCloseKey
LookupPrivilegeValueW
GetTokenInformation
CopySid
GetLengthSid
UnlockServiceDatabase
RegDeleteValueW
GetSecurityDescriptorDacl
RegDeleteKeyW
RegOpenKeyExW
LockServiceDatabase
AdjustTokenPrivileges
AddAce
GetUserNameW
CreateProcessAsUserW
RegConnectRegistryW
InitializeSecurityDescriptor
RegSetValueExW
SetSecurityDescriptorDacl
RegEnumKeyExW
CreateProcessWithLogonW
LogonUserW
RegEnumValueW
GetAclInformation
InitializeAcl
OpenSCManagerW
CloseServiceHandle

shell32

SHGetFolderPathW
ExtractIconExW
SHEmptyRecycleBinW
SHGetMalloc
SHGetPathFromIDListW
DragFinish
ShellExecuteW
ShellExecuteExW
Shell_NotifyIconW
DragQueryPoint
SHBrowseForFolderW
DragQueryFileW
SHFileOperationW
SHGetDesktopFolder

ole32

OleSetContainedObject
CoCreateInstance
IIDFromString
StringFromGUID2
OleSetMenuDescriptor
OleInitialize
CoCreateInstanceEx
CoInitializeSecurity
CoTaskMemAlloc
CoUninitialize
CreateBindCtx
CoSetProxyBlanket
CoInitialize
CoTaskMemFree
CreateStreamOnHGlobal
ProgIDFromCLSID
OleUninitialize
MkParseDisplayName
CLSIDFromString
CLSIDFromProgID

oleaut32

VariantCopy
CreateDispTypeInfo
SafeArrayUnaccessData
SafeArrayAllocDescriptorEx
VariantCopyInd
VariantTimeToSystemTime
QueryPathOfRegTypeLi
GetActiveObject
OleLoadPicture
VarR8FromDec
SafeArrayAccessData
SafeArrayCreateVector
VariantChangeType
VariantClear
SysStringLen
DispCallFunc
SysAllocString
SysFreeString
VariantInit
CreateStdDispatch
SafeArrayGetVartype
SafeArrayDestroyDescriptor
SafeArrayAllocData
OACreateTypeLib2

comctl32

ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_ReplaceIcon
ImageList_Remove
ImageList_EndDrag
ImageList_Destroy
ImageList_BeginDrag
ImageList_SetDragCursorImage
InitCommonControlsEx
ImageList_Create

winmm

timeGetTime
mciSendStringW
waveOutSetVolume

version

VerQueryValueW
GetFileVersionInfoSizeW
GetFileVersionInfoW

wininet

InternetConnectW
InternetOpenUrlW
InternetQueryOptionW
HttpSendRequestW
HttpOpenRequestW
InternetQueryDataAvailable
FtpGetFileSize
HttpQueryInfoW
InternetCloseHandle
InternetReadFile
FtpOpenFileW
InternetCrackUrlW
InternetOpenW
InternetSetOptionW

wsock32

ioctlsocket
sendto
setsockopt
select
htons
gethostbyname
recvfrom
recv
WSAStartup
socket
WSAGetLastError
accept
closesocket
ntohs
gethostname
listen
connect
inet_addr
WSACleanup
bind
__WSAFDIsSet
send

mpr

WNetUseConnectionW
WNetGetConnectionW
WNetCancelConnection2W
WNetAddConnection2W

wldap32

ord307

psapi

EnumProcesses
GetModuleBaseNameW
EnumProcessModules
GetProcessMemoryInfo

userenv

LoadUserProfileW
CreateEnvironmentBlock
DestroyEnvironmentBlock
UnloadUserProfile

Sections

.text
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 122KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 155KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19b4dd3f4fbfc7872e86f35f54331d86

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

comctl32

winmm

version

wininet

wsock32

mpr

wldap32

psapi

userenv

Sections

.text Size: 532KB - Virtual size: 531KB

.rdata Size: 122KB - Virtual size: 122KB

.data Size: 155KB - Virtual size: 5.4MB

.tls Size: - Virtual size: 101B

.rsrc Size: 17KB - Virtual size: 16KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 532KB - Virtual size: 531KB

.rdata
Size: 122KB - Virtual size: 122KB

.data
Size: 155KB - Virtual size: 5.4MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 17KB - Virtual size: 16KB

.reloc
Size: 12KB - Virtual size: 12KB