ec2ce259a0f14709ecfb58dcf8d81f23d85618ee6f38c05821b14c4c80104385

Sharing

Copy URL

Twitter E-mail

General

Target

ec2ce259a0f14709ecfb58dcf8d81f23d85618ee6f38c05821b14c4c80104385
Size

415KB
MD5

60a128e1ae49ed94381a029306b9c5e0
SHA1

5d18ed9766edc8225ffd1e86c3c591168ee9cf16
SHA256

ec2ce259a0f14709ecfb58dcf8d81f23d85618ee6f38c05821b14c4c80104385
SHA512

98c04ce03487fefedcece1c83c359ece7b22296e91b5a122b3a6add4152d40b6064b8d77a3b9712dc84f56b62d9223698fc01949e8ca3fcc238144746d5afd00
SSDEEP

6144:eb7VOWng4ULhgyMZG0201T9skiCUDoRedhUYi/Wl4/fmAzf37:c5OYg4ULe/T9swguuhWemFzf37

Score

N/A

Malware Config

Signatures

Files

ec2ce259a0f14709ecfb58dcf8d81f23d85618ee6f38c05821b14c4c80104385
.exe windows x86

855c85f745d42154c29797564c6d15d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetThreadLocale
GetStdHandle

user32

PostMessageW
GetMessageW
ShowWindow
LoadStringW
SendMessageW
wsprintfW
SystemParametersInfoW
MessageBoxW
SetWindowPos
CharNextW
GetMonitorInfoW
FindWindowW
DefWindowProcW
CallWindowProcW
CloseWindowStation
PostQuitMessage
KillTimer
UnregisterDeviceNotification
DefDlgProcW
SetWindowTextW
MonitorFromRect
DispatchMessageW
SetWindowLongW
RegisterDeviceNotificationW
DestroyWindow
GetSysColorBrush
RegisterWindowMessageW
CreateWindowExW
TranslateMessage
SendDlgItemMessageW
GetSystemMetrics
GetClientRect
SetTimer
EndDialog
GetWindowLongW
SetForegroundWindow
LoadImageW

rpcrt4

RpcBindingVectorFree
NdrServerCall2
RpcBindingSetAuthInfoExW
RpcBindingToStringBindingW
NdrClientCall2
RpcServerRegisterIfEx
I_RpcBindingInqTransportType
RpcBindingFromStringBindingW
RpcRevertToSelf
RpcStringBindingParseW
RpcBindingFree
RpcServerUnregisterIf
RpcStringFreeW
RpcImpersonateClient
RpcServerInqBindings

ole32

CoUninitialize
CoCreateInstance
CLSIDFromString
CoInitialize

comctl32

ImageList_AddMasked
ImageList_Destroy
ImageList_Create
CreateStatusWindowW

ntdll

NtClose
RtlDeleteResource
NtQueryVirtualMemory
RtlAcquireResourceShared
RtlInitializeResource
RtlUnwind
RtlAcquireResourceExclusive
RtlOpenCurrentUser
_wcsicmp
NtDuplicateToken
RtlReleaseResource
wcstoul

winspool.drv

SpoolerPrinterEvent
SetPortA
GetPrinterDataExW
GetPrinterDriverA

setupapi

SetupDiGetDeviceInterfaceAlias
SetupDiEnumDeviceInterfaces
SetupDiCreateDeviceInfoList
SetupDiOpenDeviceInterfaceRegKey
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiGetDeviceInstanceIdW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiOpenDeviceInterfaceW

winsta

WinStationQueryInformationW

shell32

SHCreateDirectoryExA

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 148KB - Virtual size: 635KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

855c85f745d42154c29797564c6d15d3

Headers

File Characteristics

Imports

kernel32

user32

rpcrt4

ole32

comctl32

ntdll

winspool.drv

setupapi

winsta

shell32

Sections

.text Size: 134KB - Virtual size: 133KB

.data Size: 148KB - Virtual size: 635KB

.rdata Size: 25KB - Virtual size: 24KB

.rsrc Size: 102KB - Virtual size: 102KB

.data Size: 5KB - Virtual size: 5KB

.text
Size: 134KB - Virtual size: 133KB

.data
Size: 148KB - Virtual size: 635KB

.rdata
Size: 25KB - Virtual size: 24KB

.rsrc
Size: 102KB - Virtual size: 102KB

.data
Size: 5KB - Virtual size: 5KB