2cd78da3935f9815fa383c88cf5c70d01092958187e5dd1e28ecad31ecff9587

Sharing

Copy URL

Twitter E-mail

General

Target

2cd78da3935f9815fa383c88cf5c70d01092958187e5dd1e28ecad31ecff9587
Size

223KB
MD5

0757144a1093c21b7dec4dd5bfc2b880
SHA1

ef688af022754af3b8d6856a367add8b621393e4
SHA256

2cd78da3935f9815fa383c88cf5c70d01092958187e5dd1e28ecad31ecff9587
SHA512

922cd183d316ab29582c5f8070599281741882246d6901025728c0dfa38a701008875348f07f5284e5b2333d68cff746c75942809e040900618b392fb16b46e6
SSDEEP

3072:cGAQyjPfVRCsAzgut4j6ulGW4Js0eS//cwXE4eCfEZ7DYwtfMJBaU1dFbYcqBhdO:ApjPbQguu+BLJs974eSITUJ7dFML/m

Score

N/A

Malware Config

Signatures

Files

2cd78da3935f9815fa383c88cf5c70d01092958187e5dd1e28ecad31ecff9587
.exe windows x86

0c70b1e6227c9d51a4fb45c3269dac68

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindClose
GetCurrentProcess
UnlockFile
GetPrivateProfileIntA
VirtualFree
SetFileTime
FreeEnvironmentStringsA
GetStartupInfoA
GlobalLock
LocalFileTimeToFileTime
GetUserDefaultLCID
HeapFree
lstrcpynA
GetModuleHandleA
GetProcessVersion
LocalAlloc
WriteFile
GetPrivateProfileStringA
DuplicateHandle
SetHandleCount
GetFileSize
lstrcmpiA
TlsAlloc
GetStdHandle
InterlockedDecrement
GlobalAlloc
SetFileAttributesA
GetVersionExA
GetLocalTime
WaitForSingleObject
GlobalFree
LockResource
GlobalDeleteAtom
CompareStringA
FindFirstFileA
SuspendThread
InterlockedIncrement
FlushFileBuffers
lstrcmpA
CreateEventA
MulDiv
LeaveCriticalSection
SetUnhandledExceptionFilter
SetEvent
WritePrivateProfileStringA
IsBadCodePtr
RtlUnwind
GetStringTypeA
LCMapStringA
LoadLibraryW
GetSystemTime
GlobalGetAtomNameA
GetStringTypeExA
LocalReAlloc
GetFileAttributesA
LockFile
GetShortPathNameA
GlobalAddAtomA
FatalAppExitA
MultiByteToWideChar
TlsSetValue
GetCurrentThread
GetFullPathNameA
FreeLibrary
LocalFree
ResumeThread
DeleteCriticalSection
LoadResource
IsBadWritePtr
GetFileTime
GetEnvironmentVariableA
GetWindowsDirectoryA
lstrcpyA
GetThreadLocale
SetEnvironmentVariableA
GetModuleFileNameA
SetConsoleCtrlHandler
lstrcatA
GetCurrentProcessId
DeleteFileA
GetCommandLineA
LCMapStringW
CloseHandle
CreateFileA
HeapReAlloc
IsBadReadPtr
GetStringTypeW
HeapCreate
SetLastError
EnterCriticalSection
FileTimeToLocalFileTime
GetVersion
GlobalReAlloc
HeapSize
HeapDestroy
GetLocaleInfoA
FreeEnvironmentStringsW
lstrlenA
GlobalFlags
SetFilePointer
GetCurrentDirectoryA
SetThreadPriority
CompareStringW
GetVolumeInformationA
HeapAlloc
GlobalUnlock
GetEnvironmentStrings
WideCharToMultiByte
ReadFile
RaiseException
GetCPInfo
IsValidCodePage
SystemTimeToFileTime
IsValidLocale
GlobalHandle
GetFileType
GetTimeZoneInformation
CreateThread
EnumSystemLocalesA
GetLastError
SetEndOfFile
GetLocaleInfoW
FindResourceA
FileTimeToSystemTime
SetErrorMode
TlsGetValue

user32

EndPaint
GetWindowPlacement
ModifyMenuA
PostMessageA
GetDlgCtrlID
GetPropA
SetScrollInfo
GetScrollPos
GetFocus
GetForegroundWindow
SetScrollRange
InsertMenuA
RemovePropA
MoveWindow
IsDlgButtonChecked
RegisterWindowMessageA
SetForegroundWindow
GetWindow
GetWindowLongA
GetScrollInfo
GetScrollRange
GetSubMenu
CreateWindowExA
CheckDlgButton
GetWindowDC
IsWindow
IntersectRect
SetCursor
OffsetRect
SetWindowTextA
GetMenu
EnableMenuItem
SetWindowPlacement
LoadCursorA
GetCapture
SetWindowPos
TrackPopupMenu
IsWindowVisible
SetDlgItemTextA
EnableWindow
PtInRect
ValidateRect
CallWindowProcA
IsWindowEnabled
IsChild
UnhookWindowsHookEx
ScrollWindow
GetMenuItemID
ScrollWindowEx
GetMenuItemCount
IsIconic
DispatchMessageA
GetMessageTime
DeleteMenu
EndDeferWindowPos
SetFocus
CharToOemA
SetActiveWindow
BeginDeferWindowPos
IsDialogMessageA
GetDlgItemTextA
MapWindowPoints
SystemParametersInfoA
RegisterClassA
CallNextHookEx
wsprintfA
GetClassLongA
CharUpperA
DestroyWindow
CheckMenuItem
SendDlgItemMessageA
GetParent
AdjustWindowRectEx
SetMenuItemBitmaps
WinHelpA
DeferWindowPos
GetClientRect
GetSysColorBrush
GetKeyState
GetWindowRect
PeekMessageA
TranslateMessage
LoadBitmapA
GetMenuStringA
BeginPaint
ShowOwnedPopups
GetWindowTextLengthA
GetTopWindow
LoadStringA
GetMenuCheckMarkDimensions
OemToCharA
SetWindowsHookExA
MessageBoxA
TabbedTextOutA
DefWindowProcA
PostQuitMessage
GetDC
GetWindowTextA
ClientToScreen
CheckRadioButton
EqualRect
GrayStringA
LoadIconA
GetDlgItemInt
GetDlgItem
SetDlgItemInt
GetClassNameA
GetMenuState
GetSystemMetrics
UpdateWindow
GetClassInfoA
ReleaseDC
GetActiveWindow
ShowScrollBar
SetPropA
ShowWindow
GetCursorPos
SetScrollPos
DrawTextA
GetMessagePos
GetDesktopWindow
GetMessageA
SetWindowLongA
SendMessageA
CopyRect
ScreenToClient
DestroyMenu
GetNextDlgTabItem

gdi32

GetDeviceCaps
CreatePen
PtVisible
ScaleWindowExtEx
SetStretchBltMode
TextOutA
SetColorAdjustment
OffsetClipRgn
PlayMetaFile
SelectClipRgn
DeleteDC
SetArcDirection
GetWindowExtEx
GetObjectType
CreatePatternBrush
PolyDraw
SetTextJustification
LineTo
PlayMetaFileRecord
StartDocA
ExtTextOutA
ExtSelectClipRgn
SetTextAlign
RectVisible
SaveDC
SetPolyFillMode
SetROP2
SetMapMode
SetWindowExtEx
OffsetWindowOrgEx
RestoreDC
ScaleViewportExtEx
SelectPalette
PolyBezierTo
SetViewportExtEx
GetClipBox
GetViewportExtEx
GetObjectA
ExtCreatePen
SetWindowOrgEx
CreateDIBPatternBrushPt
PolylineTo
IntersectClipRect
CreateSolidBrush
GetClipRgn
CreateHatchBrush
SetBkMode
SelectObject
EnumMetaFile
GetDCOrgEx
ArcTo
GetStockObject
CreateRectRgn
SetMapperFlags
ExcludeClipRect
DeleteObject
OffsetViewportOrgEx
CreateBitmap
SelectClipPath
SetTextColor
GetCurrentPositionEx
Escape
SetViewportOrgEx
MoveToEx
SetBkColor
SetTextCharacterExtra

advapi32

RegRestoreKeyA
RegOpenKeyA
RegQueryInfoKeyA
RegEnumValueA
OpenProcessToken
RegCloseKey
RegQueryValueExA
LookupPrivilegeValueA
RegDeleteValueA
RegSetValueExA
RegCreateKeyExA
AdjustTokenPrivileges
RegOpenKeyExA
RegDeleteKeyA

shell32

SHGetFileInfoA
DragAcceptFiles

comdlg32

GetFileTitleA

setupapi

SetupGetStringFieldA
SetupDiOpenDevRegKey
SetupDiEnumDriverInfoA
SetupFindFirstLineA
SetupFindNextLine
SetupDiGetDeviceInstallParamsA
SetupDiSetDeviceRegistryPropertyA
SetupDiSetSelectedDriverA
SetupDiBuildDriverInfoList
SetupOpenInfFileA
SetupCloseInfFile
SetupDiCreateDeviceInfoA
SetupDiSetDeviceInstallParamsA
SetupDiClassGuidsFromNameA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

Sections

.text
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0c70b1e6227c9d51a4fb45c3269dac68

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

comdlg32

setupapi

winspool.drv

Sections

.text Size: 156KB - Virtual size: 156KB

.rdata Size: 42KB - Virtual size: 42KB

.rdata Size: 512B - Virtual size: 258B

.rdata Size: 6KB - Virtual size: 5KB

.rdata Size: 14KB - Virtual size: 13KB

.rsrc Size: 1KB - Virtual size: 1KB

.text
Size: 156KB - Virtual size: 156KB

.rdata
Size: 42KB - Virtual size: 42KB

.rdata
Size: 512B - Virtual size: 258B

.rdata
Size: 6KB - Virtual size: 5KB

.rdata
Size: 14KB - Virtual size: 13KB

.rsrc
Size: 1KB - Virtual size: 1KB