2c9837a5fe821ffc4f2ba42500957da74da07bf0de92cd3238b6e6dc569dfb4b

Sharing

Copy URL Twitter E-mail

General

Target

2c9837a5fe821ffc4f2ba42500957da74da07bf0de92cd3238b6e6dc569dfb4b
Size

664KB
MD5

686d006fa773991a733fb7ad249f3630
SHA1

e877ebd6b80d56bb112ecd4bb0ff7e7955eb461c
SHA256

2c9837a5fe821ffc4f2ba42500957da74da07bf0de92cd3238b6e6dc569dfb4b
SHA512

2535939e11fe83dd9413330ef0f0fe57323767c9f52ece64034d34f0793ef596b30c2468c40558bf8a780284bdae95666e6c8a9a6fb61619fed47c90bd3a69be
SSDEEP

6144:CS8yBuXbsr+ygr/YbtdV5oVWTJbIBbboV7UbQiyU:CLyYsayRbHYxAQQih

Score

N/A

Malware Config

Signatures

Files

2c9837a5fe821ffc4f2ba42500957da74da07bf0de92cd3238b6e6dc569dfb4b
.exe windows x86

70d7dabf74f51a8bc4f1ddf01c7c758f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathFileExistsW

kernel32

GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetVersion
GetCurrentThreadId
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
lstrcatW
GetModuleHandleA
GetProcessVersion
lstrcmpiW
lstrcmpW
GlobalFlags
GetCurrentDirectoryW
FlushFileBuffers
SetEndOfFile
GetFullPathNameW
RtlUnwind
RaiseException
ExitProcess
TlsAlloc
GetStartupInfoA
GetCommandLineA
HeapAlloc
HeapFree
GetTimeZoneInformation
HeapSize
HeapReAlloc
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
IsBadReadPtr
IsBadCodePtr
GetCPInfo
SetStdHandle
CreateFileA
GetACP
GetOEMCP
GetDriveTypeA
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalAlloc
FileTimeToLocalFileTime
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
lstrcpyW
SetLastError
lstrlenA
InterlockedDecrement
InterlockedIncrement
FindFirstFileW
FindNextFileW
FindClose
WideCharToMultiByte
UnmapViewOfFile
DuplicateHandle
CreateFileMappingW
MapViewOfFile
GetFileType
GetFileInformationByHandle
GetLocalTime
SystemTimeToFileTime
FileTimeToDosDateTime
FileTimeToSystemTime
GetModuleFileNameA
WinExec
CreateMutexW
ReleaseMutex
CreateThread
GetCurrentProcessId
OutputDebugStringW
LoadLibraryA
lstrlenW
GetEnvironmentVariableW
GetShortPathNameW
GetCurrentProcess
SetPriorityClass
ResumeThread
GetModuleHandleW
EnumResourceNamesW
FindResourceW
LoadResource
SizeofResource
LockResource
FreeLibrary
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
GetSystemTime
SetFilePointer
LoadLibraryW
GetProcAddress
MultiByteToWideChar
ExpandEnvironmentStringsW
CreateProcessW
WaitForSingleObject
GetModuleFileNameW
GetDiskFreeSpaceExW
GetTickCount
Sleep
GetDriveTypeW
GetVolumeInformationW
SetFileAttributesW
GetFileAttributesW
CopyFileW
lstrcpynW
CreateDirectoryW
DeleteFileW
GetLastError
RemoveDirectoryW
FormatMessageW
LocalFree
CreateFileW
GetFileSize
ReadFile
CloseHandle
WriteFile
TerminateProcess

user32

GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageW
SetWindowTextW
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameW
PtInRect
ClientToScreen
DestroyMenu
TabbedTextOutW
DrawTextW
GrayStringW
CopyRect
GetTopWindow
GetCapture
WinHelpW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetDlgItem
GetWindowTextW
GetDlgCtrlID
DestroyWindow
SetPropW
GetPropW
CallWindowProcW
RemovePropW
GetMessageTime
GetMessagePos
SetForegroundWindow
GetWindow
SetWindowLongW
SetWindowPos
RegisterWindowMessageW
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetFocus
GetNextDlgTabItem
GetKeyState
CallNextHookEx
PeekMessageW
SetWindowsHookExW
GetParent
GetLastActivePopup
GetWindowLongW
SendMessageW
EnableWindow
UnhookWindowsHookEx
PostQuitMessage
DefWindowProcW
GetForegroundWindow
GetWindowTextA
GetAsyncKeyState
CreateWindowExW
UpdateWindow
LoadIconW
LoadCursorW
RegisterClassExW
LoadStringW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
wsprintfW
MessageBoxW
IsWindowEnabled

gdi32

ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SetViewportExtEx
SetViewportOrgEx
PtVisible
RectVisible
TextOutW
ExtTextOutW
DeleteObject
Escape
OffsetViewportOrgEx
GetDeviceCaps
GetObjectW
SetBkColor
SetTextColor
SetMapMode
GetStockObject
SelectObject
RestoreDC
SaveDC
CreateBitmap
GetClipBox
DeleteDC

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegSetValueExW
RegCreateKeyExW
RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegCloseKey

shell32

ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

ord17

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree

Sections

.text
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 496KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

70d7dabf74f51a8bc4f1ddf01c7c758f

Headers

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

ole32

Sections

.text Size: 112KB - Virtual size: 111KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 496KB - Virtual size: 496KB

.text
Size: 112KB - Virtual size: 111KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 496KB - Virtual size: 496KB