2cfedbeb7417bc85daf83a121d2f82ff3ecfeaf985e3ed05da0e29912649c7de

Sharing

Copy URL Twitter E-mail

General

Target

2cfedbeb7417bc85daf83a121d2f82ff3ecfeaf985e3ed05da0e29912649c7de
Size

532KB
MD5

a32bfa77efe0d83e684229cd580b4410
SHA1

f962f44c86343fe6149545d2300810cd2bcc2666
SHA256

2cfedbeb7417bc85daf83a121d2f82ff3ecfeaf985e3ed05da0e29912649c7de
SHA512

c7888f1a0e71000d65e859d0c0e3813f0baffb7a1208806d0b48ee3680944a776d66edfeaca243952ebf3ed3b99758a83405dc65ab05a07a22092414784129c5
SSDEEP

12288:mVCauj94ZwNCKTQORH5gfMymo5TvUHCS:mVe42QORH5gfRUH9

Score

N/A

Malware Config

Signatures

Files

2cfedbeb7417bc85daf83a121d2f82ff3ecfeaf985e3ed05da0e29912649c7de
.exe windows x86

de35707a6fcdf92c506871049a63da6e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesW
GetTempFileNameW
GetFullPathNameW
SetFileTime
GetFileTime
GetDiskFreeSpaceW
GetLastError
FileTimeToSystemTime
FileTimeToLocalFileTime
DuplicateHandle
FlushFileBuffers
WritePrivateProfileStringW
UnlockFile
SetEndOfFile
MoveFileW
DeleteFileW
LoadLibraryW
FindClose
FindFirstFileW
GetVolumeInformationW
GetStringTypeExW
GetThreadLocale
lstrcmpiW
GetShortPathNameW
GlobalGetAtomNameW
SizeofResource
FindResourceExW
GetProcessVersion
GlobalFlags
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
LocalFileTimeToFileTime
SystemTimeToFileTime
SetErrorMode
GetTickCount
GetStartupInfoW
ExitProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RtlUnwind
HeapAlloc
HeapFree
RaiseException
TerminateProcess
HeapSize
HeapReAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetEnvironmentStrings
GetCommandLineW
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
GetProfileStringA
GlobalAddAtomA
FindResourceA
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalAlloc
lstrcmpiA
GetCurrentThread
lstrcmpW
lstrcmpA
GetModuleFileNameW
FormatMessageW
LocalFree
InterlockedDecrement
InterlockedIncrement
lstrlenW
LoadLibraryA
FreeLibrary
lstrlenA
GetVersion
lstrcatW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcpyW
GetModuleHandleW
MulDiv
GetModuleHandleA
GetProcAddress
SetLastError
VirtualProtect
FindResourceW
LoadResource
LockResource
GlobalFree
GetCurrentDirectoryW
GetCurrentProcess
SetProcessAffinityMask
WideCharToMultiByte
lstrcpynW
GlobalLock
GlobalUnlock
SetFilePointer
WriteFile
ReadFile
GetFileSize
CloseHandle
MultiByteToWideChar
LockFile
CreateFileW

user32

TranslateMDISysAccel
TranslateAcceleratorW
DrawMenuBar
DefMDIChildProcW
RedrawWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
IsZoomed
SetParent
DeleteMenu
GetSystemMenu
LoadStringW
GetSysColorBrush
InsertMenuW
GetMenuStringW
DestroyIcon
CharNextW
CopyAcceleratorTableW
GetNextDlgGroupItem
GetTabbedTextExtentA
InvertRect
GetDCEx
LockWindowUpdate
RegisterClipboardFormatW
PostThreadMessageW
GetPropA
SetPropA
SetWindowLongA
GetClassNameA
IsWindowUnicode
SendMessageA
GetWindowLongA
SetWindowsHookExA
RemovePropA
CallWindowProcA
CharNextA
DefWindowProcA
DefDlgProcA
GetClassInfoA
DrawFocusRect
DrawTextA
GetWindowTextA
ExcludeUpdateRgn
ShowCaret
HideCaret
GetWindowTextLengthA
SetWindowContextHelpId
LoadMenuW
LoadAcceleratorsW
GetMessageW
ValidateRect
ShowOwnedPopups
PostQuitMessage
DestroyMenu
InflateRect
EndDialog
CreateDialogIndirectParamW
GetMenuCheckMarkDimensions
LoadBitmapW
GetMenuState
ModifyMenuW
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetNextDlgTabItem
LoadIconW
SendDlgItemMessageA
MapWindowPoints
PeekMessageW
AdjustWindowRectEx
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
DefFrameProcW
GetTopWindow
MessageBoxW
IsChild
WinHelpW
wsprintfW
GetClassInfoW
RegisterClassW
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
TrackPopupMenu
DestroyWindow
CreateWindowExW
SetWindowsHookExW
CallNextHookEx
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
RegisterWindowMessageW
IntersectRect
SystemParametersInfoW
IsIconic
GetWindowPlacement
GetSystemMetrics
GrayStringW
TabbedTextOutW
EndPaint
BeginPaint
GetWindowDC
MapDialogRect
GetCapture
GetActiveWindow
SetActiveWindow
GetAsyncKeyState
SetFocus
IsWindowEnabled
ShowWindow
SetWindowPos
MoveWindow
GetDlgCtrlID
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
BringWindowToTop
IsRectEmpty
FindWindowW
FillRect
LoadCursorW
SetCursor
GetDlgItem
CreatePopupMenu
AppendMenuW
ReleaseCapture
KillTimer
SetTimer
ClientToScreen
GetDesktopWindow
WindowFromPoint
UnionRect
GetCursorPos
ScreenToClient
SetCapture
GetKeyState
PtInRect
SetRect
DestroyCursor
CharUpperW
SetScrollPos
GetFocus
GetSysColor
IsWindow
OffsetRect
GetDC
ReleaseDC
CopyRect
SetRectEmpty
MessageBeep
OpenClipboard
GetClipboardData
CloseClipboard
PostMessageW
TranslateMessage
DispatchMessageW
GetParent
BeginDeferWindowPos
EqualRect
UpdateWindow
DeferWindowPos
EndDeferWindowPos
GetClassNameW
GetWindowLongW
SetWindowLongW
GetClientRect
EnableWindow
SendMessageW
GetWindowRect
InvalidateRect
DrawTextW
UnregisterClassW

gdi32

ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
SelectClipRgn
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
GetCurrentPositionEx
CreatePen
CreateSolidBrush
GetTextExtentPoint32W
GetObjectW
GetCurrentObject
CreateFontIndirectW
CreateCompatibleBitmap
CreateCompatibleDC
CreatePatternBrush
SetViewportOrgEx
SetMapMode
SetTextColor
SetStretchBltMode
SetROP2
SetPolyFillMode
CreateDIBitmap
GetTextExtentPointA
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
StartDocW
GetWindowExtEx
GetViewportExtEx
GetDeviceCaps
CreateRectRgn
DeleteObject
DeleteDC
PtVisible
ExtTextOutA
RectVisible
TextOutW
ExtTextOutW
Escape
CreateBitmap
PatBlt
CreateRectRgnIndirect
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
Rectangle
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCW
LPtoDP
GetTextMetricsW
StretchDIBits
GetCharWidthW
CreateFontW
EnumFontFamiliesExW
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceW
GetTextExtentPoint32A
GetWindowOrgEx
BitBlt

comdlg32

GetSaveFileNameW
CommDlgExtendedError
GetFileTitleW
PrintDlgW
GetOpenFileNameW

advapi32

RegCreateKeyW
GetFileSecurityW
SetFileSecurityW
RegDeleteValueW
RegDeleteKeyW
RegOpenKeyW
RegQueryValueW
RegCloseKey
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegSetValueW

shell32

ShellExecuteExW
SHGetFileInfoW
DragFinish
ExtractIconW
DragQueryFileW

comctl32

ImageList_DragShowNolock
ImageList_EndDrag
ImageList_DragMove
ImageList_DragLeave
PropertySheetW
ImageList_GetImageInfo
ImageList_AddMasked
ImageList_BeginDrag
DestroyPropertySheetPage
CreatePropertySheetPageW
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_DrawIndirect
ImageList_DragEnter

oledlg

OleUIBusyW

olepro32

ord253

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

ole32

CoFreeUnusedLibraries
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

SysStringLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

Sections

.text
Size: 380KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 250KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

de35707a6fcdf92c506871049a63da6e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

comctl32

oledlg

olepro32

winspool.drv

ole32

oleaut32

Sections

.text Size: 380KB - Virtual size: 377KB

.rdata Size: 96KB - Virtual size: 92KB

.data Size: 20KB - Virtual size: 250KB

.rsrc Size: 32KB - Virtual size: 30KB

.text
Size: 380KB - Virtual size: 377KB

.rdata
Size: 96KB - Virtual size: 92KB

.data
Size: 20KB - Virtual size: 250KB

.rsrc
Size: 32KB - Virtual size: 30KB