2c1b007a5c1f4852fba171f0bdb266eb932c99ef24f8ca89fc1a62e79b00e048

Sharing

Copy URL

Twitter E-mail

General

Target

2c1b007a5c1f4852fba171f0bdb266eb932c99ef24f8ca89fc1a62e79b00e048
Size

916KB
MD5

28aa49f538ed58e6c65f71ce4d6db27a
SHA1

a212452919047529b852586df9910d97304c9f58
SHA256

2c1b007a5c1f4852fba171f0bdb266eb932c99ef24f8ca89fc1a62e79b00e048
SHA512

ca498fb5090a8ae99a56acccf8836ae614a00f3230253b191ebfd872ab6ee218320725e5d4b4b2b50e781c6d75bafd72be2b33fe55dd9deadd77653d9a8bb46a
SSDEEP

12288:FAEPE9d5jLu3YRs8cKvhqGtTyV14HLnYhjabaTYr3s0ihrqtDBq8+u1NQEL:FAUE9d5PyYKvKZcijYp5TcQrqtppNQEL

Score

N/A

Malware Config

Signatures

Files

2c1b007a5c1f4852fba171f0bdb266eb932c99ef24f8ca89fc1a62e79b00e048
.exe windows x86

77b226b4905c7bd47d3a8a5a24519332

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetDriveTypeA
FreeEnvironmentStringsW
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetProfileStringA
InterlockedExchange
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
GetFileType
SetStdHandle
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
ExitProcess
GetCommandLineA
GetStartupInfoA
RaiseException
ExitThread
CreateThread
RtlUnwind
FindResourceExA
GetCurrentDirectoryA
SetErrorMode
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GlobalFlags
GetDiskFreeSpaceA
GetTempFileNameA
GlobalAlloc
GetCurrentThread
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
GetVolumeInformationA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
GetCurrentProcess
DuplicateHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
lstrcpynA
GetFileTime
FindNextFileA
FindFirstFileA
FindClose
lstrcmpA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SuspendThread
SetThreadPriority
ResumeThread
MulDiv
SetLastError
FormatMessageA
LocalFree
WideCharToMultiByte
InterlockedDecrement
InterlockedIncrement
GetVersion
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleHandleA
GetVersionExA
MultiByteToWideChar
GetProcAddress
lstrlenA
lstrcatA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GetProfileIntA
DeleteFileA
lstrcpyA
GetLocalTime
CreateDirectoryA
InterlockedExchangeAdd
GetQueuedCompletionStatus
GetOverlappedResult
WaitForSingleObject
Sleep
EnterCriticalSection
LeaveCriticalSection
PostQueuedCompletionStatus
HeapFree
DeleteCriticalSection
GetSystemInfo
InitializeCriticalSection
CreatePipe
WriteFile
CreateEventA
CreateIoCompletionPort
SetEvent
RemoveDirectoryA
MoveFileA
ReadFile
GetTickCount
CloseHandle
CreateFileA
GetFileSize
GetLastError
SetFilePointer
GetProcessHeap
HeapAlloc
GetFileAttributesA
IsBadReadPtr
GetModuleFileNameA

user32

ClientToScreen
SetCapture
LoadStringA
wvsprintfA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
IsDlgButtonChecked
SetDlgItemTextA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
SendDlgItemMessageA
MapWindowPoints
GetFocus
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetMenuItemID
TrackPopupMenu
GetWindowTextLengthA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
ReleaseCapture
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
GetWindow
GetTabbedTextExtentA
SetWindowPos
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
IsWindowEnabled
DrawIcon
DrawEdge
GetWindowRect
SetRect
GetWindowTextA
GetParent
EnableMenuItem
LoadBitmapA
GetCursorPos
SetForegroundWindow
PeekMessageA
DispatchMessageA
SendMessageA
EnableWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
DrawTextA
IsWindowUnicode
GetWindowRgn
RedrawWindow
TranslateMessage
LoadCursorA
CopyIcon
SetCursor
GetMessagePos
ScreenToClient
PtInRect
MessageBeep
LoadMenuA
GetSubMenu
GetDesktopWindow
InvalidateRect
UpdateWindow
DestroyIcon
LoadIconA
ReleaseDC
GetDC
SetCursorPos
DestroyCursor
GetWindowDC
BeginPaint
EndPaint
PostThreadMessageA
UnhookWindowsHookEx
RegisterClipboardFormatA
PostMessageA
wsprintfA
MessageBoxA
LoadImageA
DrawStateA
OffsetRect
InflateRect
SetTimer
KillTimer
IsWindow
GetClientRect
GetDlgItem
GetSystemMetrics
DrawFocusRect
FillRect
GetSysColor
CopyRect
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
GetMenuStringA
InsertMenuA
LockWindowUpdate
GetDCEx
InvertRect
WindowFromPoint
GetSysColorBrush
GetClassNameA
GetAsyncKeyState
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
PostQuitMessage
CharUpperA
GetSystemMenu
DeleteMenu
AppendMenuA
SetParent
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
SetMenu
DestroyMenu
TranslateAcceleratorA
LoadAcceleratorsA
GetMessageA
ValidateRect
IsZoomed
SetRectEmpty
IsRectEmpty
FindWindowA
GrayStringA
SetWindowLongA
TabbedTextOutA

gdi32

ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
CreateRectRgn
ExtSelectClipRgn
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
SetViewportExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
LPtoDP
DPtoLP
GetTextExtentPoint32A
GetTextMetricsA
SetRectRgn
CombineRgn
CreateRectRgnIndirect
StretchDIBits
GetCharWidthA
Rectangle
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
CreateDCA
GetTextColor
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
EnumFontFamiliesExA
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
StartDocA
DeleteDC
SelectObject
PatBlt
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
GetMapMode
RoundRect
CreatePen
GetObjectA
GetStockObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
CreateFontA
BitBlt
DeleteObject
CreatePatternBrush
CreateDIBitmap
OffsetRgn
GetTextExtentPointA
CreateFontIndirectA

comdlg32

PrintDlgA
GetOpenFileNameA
CommDlgExtendedError
GetFileTitleA
GetSaveFileNameA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegSetValueA
RegQueryValueExA

shell32

SHGetFileInfoA
DragQueryFileA
DragFinish
Shell_NotifyIconA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationA
ShellExecuteA
ExtractIconA

comctl32

ImageList_SetBkColor
_TrackMouseEvent
InitCommonControlsEx
ord17
ImageList_Destroy
ImageList_Create
PropertySheetA
DestroyPropertySheetPage
ImageList_ReplaceIcon
CreatePropertySheetPageA

oledlg

ord8

ole32

CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CoCreateInstance
CoUninitialize
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
CoInitialize

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen

ws2_32

gethostname
WSAGetLastError
gethostbyname
inet_ntoa
WSAStartup
WSASend
WSARecv
WSAEventSelect
setsockopt
WSAIoctl
WSASocketA
closesocket
htons
inet_addr
WSAConnect
bind
listen
WSACleanup

Sections

.text
Size: 480KB - Virtual size: 479KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 171KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rmnet
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

77b226b4905c7bd47d3a8a5a24519332

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

ws2_32

Sections

.text Size: 480KB - Virtual size: 479KB

.rdata Size: 108KB - Virtual size: 105KB

.data Size: 36KB - Virtual size: 50KB

.rsrc Size: 172KB - Virtual size: 171KB

.rmnet Size: 116KB - Virtual size: 116KB

.text
Size: 480KB - Virtual size: 479KB

.rdata
Size: 108KB - Virtual size: 105KB

.data
Size: 36KB - Virtual size: 50KB

.rsrc
Size: 172KB - Virtual size: 171KB

.rmnet
Size: 116KB - Virtual size: 116KB