ecb2c62b1593b4d19b1d34d87310c7a9c001e7ff96d5c2b8ca509f3001db810b

Sharing

Copy URL

Twitter E-mail

General

Target

ecb2c62b1593b4d19b1d34d87310c7a9c001e7ff96d5c2b8ca509f3001db810b
Size

2.9MB
MD5

1721a0dee62051d27efc1c1f5cccb9a6
SHA1

21fbf18b5d5214804060fe640063f2d9ac6d7c1d
SHA256

ecb2c62b1593b4d19b1d34d87310c7a9c001e7ff96d5c2b8ca509f3001db810b
SHA512

059069eb514027dda7e66bcbee0332a3d14e5ec6c4cdac9e4c316f9ac4bc85a310ba79785fc055e4183df9b132b7ddc70ee0fd1c0694cbafc1dfea246d923678
SSDEEP

24576:shoNlPUcdbMZMvTV2GlSpbRrSnYPVtrklEAve9GKoqW:tNlPUuLoD8kd/ZoqW

Score

N/A

Malware Config

Signatures

Files

ecb2c62b1593b4d19b1d34d87310c7a9c001e7ff96d5c2b8ca509f3001db810b
.exe windows x86

33c3358135759d1dc04ad25aad212d04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetFileTime
GetFileAttributesA
CreateDirectoryA
LocalFileTimeToFileTime
lstrcpyA
FreeLibrary
GlobalAlloc
lstrcmpA
GlobalLock
InterlockedExchange
CompareStringA
GetLocaleInfoA
GetModuleFileNameA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
GlobalAddAtomA
GetCurrentProcessId
FreeResource
GlobalFree
GlobalUnlock
MulDiv
lstrlenA
LocalFree
FormatMessageA
GetModuleFileNameW
InterlockedDecrement
GetVersionExA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
WritePrivateProfileStringA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
GetThreadLocale
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
FileTimeToSystemTime
GetModuleHandleW
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
RtlUnwind
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
ExitProcess
HeapReAlloc
VirtualProtect
VirtualAlloc
VirtualQuery
HeapSize
SetHandleCount
GetStdHandle
GetFileType
HeapCreate
VirtualFree
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetStdHandle
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA
SystemTimeToFileTime
ReadFile
SetFilePointer
lstrcatA
Sleep
DeleteFileA
WriteFile
FlushViewOfFile
FindFirstFileA
FindClose
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
GetSystemInfo
LoadResource
LockResource
SizeofResource
FindResourceA
WideCharToMultiByte
GetModuleHandleA
LoadLibraryA
GetProcAddress
GetLastError
SetLastError
TerminateThread
WaitForSingleObject
CloseHandle
GetTickCount
MultiByteToWideChar
CreateThread

user32

IsChild
WinHelpA
SendDlgItemMessageA
LoadIconA
RegisterWindowMessageA
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
DestroyMenu
LoadCursorA
GetSysColorBrush
CharUpperA
CharNextA
CopyAcceleratorTableA
IsRectEmpty
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
RegisterClipboardFormatA
PostThreadMessageA
TrackPopupMenu
SetMenu
SetForegroundWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
GetClassLongA
GetMenuItemID
GetMenuItemCount
WindowFromPoint
EndPaint
BeginPaint
GetWindowDC
GetDC
ScreenToClient
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
GetMenuState
LoadBitmapA
SendMessageA
AppendMenuA
GetSystemMenu
EnableMenuItem
CheckMenuItem
PostQuitMessage
GetClassNameA
SetPropA
SetCapture
UpdateWindow
InvalidateRect
ReleaseCapture
GetSubMenu
ClientToScreen
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
LoadMenuA
PostMessageA
FlashWindow
EnableWindow
DrawIcon
OffsetRect
FillRect
GetSysColor
CopyRect
PtInRect
GetClientRect
GetCapture
GetActiveWindow
SetWindowLongA
GetWindowLongA
GetParent
SetRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
wsprintfA
GetTopWindow
GetMessageTime
GetMessagePos
UnhookWindowsHookEx
MapWindowPoints
ReleaseDC

gdi32

GetMapMode
GetBkColor
GetTextColor
GetRgnBox
CreateRectRgnIndirect
ExtSelectClipRgn
SaveDC
RestoreDC
SetBkColor
SetBkMode
SetTextColor
SetMapMode
GetClipBox
LineTo
MoveToEx
DeleteObject
GetViewportExtEx
GetWindowExtEx
GetObjectA
SelectObject
BitBlt
CreateCompatibleDC
CreateSolidBrush
CreateCompatibleBitmap
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
CreatePen
GetStockObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
GetDeviceCaps
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
CreateBitmap

shell32

ShellExecuteA

ole32

CoCreateInstance
CoUninitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

shlwapi

PathStripToRootA
PathIsUNCA
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW

oledlg

ord8

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle

oleacc

LresultFromObject
CreateStdAccessibleObject

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

comdlg32

GetFileTitleA

advapi32

RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

oleaut32

SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantClear
VariantChangeType
VariantInit
OleCreateFontIndirect
VariantTimeToSystemTime
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocString
SysFreeString
VariantCopy

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 77KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VMP01
Size: 892KB - Virtual size: 891KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33c3358135759d1dc04ad25aad212d04

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

ole32

shlwapi

oledlg

wininet

oleacc

winspool.drv

comdlg32

advapi32

oleaut32

Sections

.text Size: 342KB - Virtual size: 342KB

.rdata Size: 77KB - Virtual size: 76KB

.data Size: 11KB - Virtual size: 26KB

.VMP01 Size: 892KB - Virtual size: 891KB

.rsrc Size: 1.6MB - Virtual size: 1.6MB

.text
Size: 342KB - Virtual size: 342KB

.rdata
Size: 77KB - Virtual size: 76KB

.data
Size: 11KB - Virtual size: 26KB

.VMP01
Size: 892KB - Virtual size: 891KB

.rsrc
Size: 1.6MB - Virtual size: 1.6MB