7c2c3b5446cdef5524e6a659ae52ec718e1784338a3ffb5a5882e1deedbbd0e0

Sharing

Copy URL Twitter E-mail

General

Target

7c2c3b5446cdef5524e6a659ae52ec718e1784338a3ffb5a5882e1deedbbd0e0
Size

669KB
MD5

b73d8a5c9c0ef47fe5e8e547005a4a9c
SHA1

a6cbc0d05ab31b3b3d1ed9259d376ade09484307
SHA256

7c2c3b5446cdef5524e6a659ae52ec718e1784338a3ffb5a5882e1deedbbd0e0
SHA512

3c23b91e83127dbfc9326d7aea70b08b3b2bd39e7ee15dd58f6dfa54c9364bd92dfd116a7624af5d5343185606d9253949d8caabeeb1ebdc4cf0f0ed5bcf3534
SSDEEP

12288:lxuj/5kQANn9MUHPVLoNjY+6z0AB0BZqBuA903FL+e66Q2qT:lo75kQArMyPVLAQPWO8bFKI

Score

N/A

Malware Config

Signatures

Files

7c2c3b5446cdef5524e6a659ae52ec718e1784338a3ffb5a5882e1deedbbd0e0
.exe windows x86

ccea3d96ef90697aefbd6d2712e875b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualAlloc
GetCommandLineW
SetFileAttributesW
GetProfileSectionW
GetCurrentProcessId
AreFileApisANSI
SwitchToFiber
PeekConsoleInputA
ChangeTimerQueueTimer
RemoveDirectoryA
GetTimeFormatW
FindResourceW
GetCurrentThreadId
CreateFileMappingA
LocalUnlock
EnumCalendarInfoW
IsDebuggerPresent
GetOEMCP
ReadFileEx
ReplaceFileA
GlobalMemoryStatusEx
WriteTapemark
VirtualQueryEx
LocalSize
BindIoCompletionCallback
SetDefaultCommConfigW

winspool.drv

ClosePrinter
GetFormW
EndPagePrinter
EnumFormsA
GetPrinterW
GetPrinterDriverDirectoryW
DeletePrinterDataW
GetPrintProcessorDirectoryA
GetPrinterDataW
EnumMonitorsW
GetPrinterDataExW
WritePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

OpenTraceW
GetTraceEnableLevel
RegEnumKeyW
AddAccessAllowedAce
ControlTraceW
BuildSecurityDescriptorW
CryptHashData
GetSidIdentifierAuthority
InitializeSecurityDescriptor
RegisterServiceCtrlHandlerW
EnumDependentServicesW
AllocateLocallyUniqueId
AreAllAccessesGranted
RegEnumKeyExW
SetEntriesInAclA
ConvertStringSecurityDescriptorToSecurityDescriptorW
LsaICLookupNames

comctl32

_TrackMouseEvent
ImageList_Add
ImageList_ReplaceIcon
InitCommonControls
InitCommonControlsEx
ImageList_GetImageCount
ImageList_GetBkColor
CreateStatusWindowW
ImageList_Read
ImageList_SetDragCursorImage
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_DragLeave

msvcrt

?set_terminate@@YAP6AXXZP6AXXZ@Z
exit
_mbsupr
abort
isupper
_setmode
_strdate
_ismbblead
_stat
frexp
ungetwc
_localtime64
_cabs
fclose
_lseek
_strdup
atoi
wcstoul
_snprintf
strcspn
_close
wprintf
??1bad_cast@@UAE@XZ
_isctype
_ultow
_mktemp
_mbsdec
??8type_info@@QBEHABV0@@Z
fflush
_memicmp
_open
memcpy
_winmajor
__lconv_init
_strcmpi
fseek
strcat
feof

crypt32

CryptUninstallDefaultContext

mscms

InternalGetPS2ColorRenderingDictionary
DeleteColorTransform
InternalGetPS2CSAFromLCS
InternalGetPS2ColorSpaceArray
OpenColorProfileA
TranslateBitmapBits
IsColorProfileValid
InstallColorProfileW
GetColorDirectoryA
GetColorProfileHeader
EnumColorProfilesA
OpenColorProfileW
CreateColorTransformW
InternalGetPS2PreviewCRD

Sections

BSS
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

TEXT
Size: 11KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 593KB - Virtual size: 930KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 258B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccea3d96ef90697aefbd6d2712e875b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

winspool.drv

advapi32

comctl32

msvcrt

crypt32

mscms

Sections

BSS Size: 15KB - Virtual size: 14KB

BSS Size: 8KB - Virtual size: 7KB

TEXT Size: 11KB - Virtual size: 348KB

.idata Size: 593KB - Virtual size: 930KB

.rsrc Size: 40KB - Virtual size: 39KB

.reloc Size: 1024B - Virtual size: 258B

BSS
Size: 15KB - Virtual size: 14KB

BSS
Size: 8KB - Virtual size: 7KB

TEXT
Size: 11KB - Virtual size: 348KB

.idata
Size: 593KB - Virtual size: 930KB

.rsrc
Size: 40KB - Virtual size: 39KB

.reloc
Size: 1024B - Virtual size: 258B