c2ee446192879f30f239871a480db3856c795a614515bb60df688b5116c9404b

Sharing

Copy URL

Twitter E-mail

General

Target

c2ee446192879f30f239871a480db3856c795a614515bb60df688b5116c9404b
Size

1.6MB
MD5

6bb2cef30a77ca13b577317b38a5eff7
SHA1

d1a82398a91e9ba4131f981c6bb692186319ccce
SHA256

c2ee446192879f30f239871a480db3856c795a614515bb60df688b5116c9404b
SHA512

5bdc9200dce8260dd3bcb24c431f0cfa414dbe9e97146cb294feaa831b0236c3049e6e7f25628c3cdeef513b419945094d9237014b862e63f6425980ae5b2e32
SSDEEP

24576:1d+1n8T9YmSLNFpqOOiCrF4rT8mFCrgmVNerpNQO1NjtScT:mCT9YmYOrF4rT8ngmDz+ZT

Score

N/A

Malware Config

Signatures

Files

c2ee446192879f30f239871a480db3856c795a614515bb60df688b5116c9404b
.exe windows x86

eac06c1dcb8bde61db36781522d13e2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetFileAttributesExW
GetFileSizeEx
GetFileTime
GlobalFlags
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
SetErrorMode
IsDebuggerPresent
IsProcessorFeaturePresent
CreateThread
ExitThread
RtlUnwind
SetStdHandle
GetFileType
ExitProcess
GetModuleHandleExW
HeapQueryInformation
GetSystemInfo
VirtualAlloc
VirtualProtect
TlsSetValue
GetStdHandle
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsValidCodePage
GetOEMCP
GetCPInfo
GetConsoleCP
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetTimeZoneInformation
GetStringTypeW
OutputDebugStringW
LCMapStringW
WriteConsoleW
GetDriveTypeW
SetEnvironmentVariableA
TlsGetValue
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetCurrentProcessId
SuspendThread
SetThreadPriority
WritePrivateProfileStringW
GetCurrentThread
GetThreadLocale
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FileTimeToSystemTime
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
lstrcmpA
FormatMessageW
LocalFree
LoadLibraryW
GetModuleHandleA
SetLastError
OutputDebugStringA
GetACP
DecodePointer
HeapSize
RaiseException
GetProcessHeap
HeapFree
HeapAlloc
HeapReAlloc
ResetEvent
SetEvent
FreeResource
ResumeThread
MulDiv
CreateEventW
WriteFile
CreateFileW
GlobalLock
GlobalAlloc
GlobalFree
GlobalUnlock
GetCommandLineW
CreateMutexW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetLastError
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
GetVersionExW
MultiByteToWideChar
CloseHandle
TerminateProcess
GetLocalTime
lstrcpyW
RemoveDirectoryW
SetFileAttributesW
OpenProcess
WideCharToMultiByte
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
Sleep
CreateDirectoryW
DeleteFileW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetFileAttributesW
lstrlenW
GetModuleFileNameW
GetCurrentDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
VirtualQuery
GetTickCount

user32

PostThreadMessageW
LoadCursorW
GetSysColorBrush
IntersectRect
WindowFromPoint
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
GetWindowThreadProcessId
SetCursor
GetCursorPos
TranslateMessage
GetMessageW
MapDialogRect
SetWindowContextHelpId
PostQuitMessage
CharUpperW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
PtInRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
RedrawWindow
ValidateRect
GetForegroundWindow
SetMenu
GetCapture
GetKeyState
IsWindowVisible
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
IsDialogMessageW
GetWindow
GetWindowTextW
SetWindowTextW
GetFocus
SetFocus
GetDlgCtrlID
SetWindowPos
MoveWindow
ShowWindow
DestroyMenu
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
RegisterClipboardFormatW
CreateDialogIndirectParamW
DestroyWindow
MessageBeep
GetNextDlgGroupItem
IsRectEmpty
InvalidateRgn
CopyAcceleratorTableW
OffsetRect
CharNextW
SetCapture
ReleaseCapture
UpdateWindow
RealChildWindowFromPoint
GetMenuItemCount
GetMenuItemID
GetSubMenu
SendDlgItemMessageA
UnregisterClassW
CopyRect
GetSysColor
FillRect
ReleaseDC
GetDC
SetRect
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
IsWindow
InvalidateRect
GetWindowRect
GetParent
EqualRect
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetForegroundWindow
SetLayeredWindowAttributes
GetWindowLongW
SetWindowLongW
SendMessageW
DeleteMenu
AppendMenuW
LoadIconW
MessageBoxW
EnableWindow
KillTimer
EnableMenuItem
GetSystemMenu
SetTimer
wsprintfW
GetMenu

gdi32

SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
SetMapMode
SetBkMode
CreateRectRgnIndirect
DeleteDC
ExtSelectClipRgn
SaveDC
RestoreDC
GetWindowExtEx
GetViewportExtEx
GetClipBox
CreateBitmap
SetTextColor
SetBkColor
GetObjectW
CreateFontIndirectW
GetStockObject
CreateSolidBrush
DeleteObject
SelectObject
GetDeviceCaps
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC

winspool.drv

OpenPrinterW
ClosePrinter
DocumentPropertiesW

advapi32

RegSetValueExW
RegOpenKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW

shell32

SHGetFolderPathW
SHGetFolderLocation
SHGetPathFromIDListW
SHChangeNotify
CommandLineToArgvW
ShellExecuteW

comctl32

InitCommonControlsEx
_TrackMouseEvent

shlwapi

StrCatW
ord156
ord437
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
UrlUnescapeW

ole32

CoCreateInstance
CoRegisterMessageFilter
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoCreateGuid
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoGetClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoFreeUnusedLibraries
OleInitialize
OleUninitialize
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

oleaut32

OleCreateFontIndirect
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
OleLoadPicture

oledlg

OleUIBusyW

gdiplus

GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageI
GdipCreateImageAttributes
GdipDisposeImageAttributes
GdipSetImageAttributesColorMatrix
GdipGetImageWidth
GdipGetImageHeight
GdipDrawImageRectI
GdipLoadImageFromStream
GdipDisposeImage
GdipFree
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
GdipCloneImage
GdipDrawImageRectRect
GdipAlloc

psapi

EnumProcesses
GetModuleFileNameExW
EnumProcessModules

oleacc

CreateStdAccessibleObject
LresultFromObject

wininet

HttpOpenRequestW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionExW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpSendRequestW
HttpQueryInfoW
InternetCanonicalizeUrlW
InternetCrackUrlW

Sections

.text
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1018KB - Virtual size: 1018KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eac06c1dcb8bde61db36781522d13e2c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

psapi

oleacc

wininet

Sections

.text Size: 297KB - Virtual size: 297KB

.rdata Size: 96KB - Virtual size: 95KB

.data Size: 13KB - Virtual size: 29KB

.rsrc Size: 1018KB - Virtual size: 1018KB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 297KB - Virtual size: 297KB

.rdata
Size: 96KB - Virtual size: 95KB

.data
Size: 13KB - Virtual size: 29KB

.rsrc
Size: 1018KB - Virtual size: 1018KB

.reloc
Size: 25KB - Virtual size: 24KB