bcbc1f9aa822d4da908ac1a1a8c117dcd8f5eb6caead88949a75d59a288553cb

Sharing

Copy URL Twitter E-mail

General

Target

bcbc1f9aa822d4da908ac1a1a8c117dcd8f5eb6caead88949a75d59a288553cb
Size

220KB
MD5

2e41bc928eccba5ce49fb260902be6e5
SHA1

c1cb0ac1641bfcb1b4beba2ff2800e6a4d59a7de
SHA256

bcbc1f9aa822d4da908ac1a1a8c117dcd8f5eb6caead88949a75d59a288553cb
SHA512

4eacc776766d89f6561577b72bcc7b8908c3b592272e00873c06f4491933781df3123a9891ab834c2e8f071ff59a5ece057d5bc7a5304f13fcf05742ddaf628c
SSDEEP

3072:CIGw4Fnqu15laSnXl/w03531iVoJ06u9DxRZe8hyu2S/J4+gRNddlIhFch8S:GFnRHlaSX603loAkzTZyFSCr7diF0J

Score

N/A

Malware Config

Signatures

Files

bcbc1f9aa822d4da908ac1a1a8c117dcd8f5eb6caead88949a75d59a288553cb
.exe windows x86

89b3e8bcf4eb127213530a9f5620b11c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocaleInfoA
CopyFileA
GetSystemDirectoryA
CreateProcessA
OpenFile
GetVersionExA
FindResourceA
LoadResource
SizeofResource
IsBadCodePtr
IsBadReadPtr
FlushFileBuffers
SetStdHandle
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
FreeLibrary
GetSystemDefaultLCID
CreateFileA
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
TlsGetValue
SetLastError
LocalFree
TlsSetValue
HeapSize
GetCurrentProcess
TerminateProcess
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
ReadFile
WriteFile
ExitProcess
GetVersion
GlobalLock
GlobalUnlock
GlobalFree
lstrcatA
lstrcpyA
LoadLibraryA
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByte
lstrcpynA
lstrcmpiA
LoadLibraryExA
SetUnhandledExceptionFilter
LCMapStringW
GetShortPathNameA
GetModuleFileNameA
GetModuleHandleA
lstrlenW
lstrlenA
MultiByteToWideChar
CreateMutexA
GetCommandLineA
GetCurrentThreadId
InterlockedIncrement
GetLastError
CloseHandle
FreeEnvironmentStringsA
UnhandledExceptionFilter
TlsAlloc
InterlockedDecrement
HeapFree
DeleteCriticalSection
GetStartupInfoA
RaiseException
HeapReAlloc
EnterCriticalSection
HeapAlloc
RtlUnwind
InterlockedExchange
Sleep
LeaveCriticalSection

user32

LoadStringA
WinHelpA
PostThreadMessageA
DefWindowProcA
DestroyMenu
DispatchMessageA
GetMessageA
PostMessageA
CreateWindowExA
RegisterClassA
CharNextA
RegisterWindowMessageA
PostQuitMessage
ReleaseDC
GetSystemMetrics
DialogBoxParamA
GetDC
SetTimer
DestroyIcon
KillTimer
TrackPopupMenu
GetCursorPos
SetForegroundWindow
DestroyWindow
AppendMenuA
CreatePopupMenu
InsertMenuA
wsprintfA
CallWindowProcA
SetWindowLongA
GetParent
EnableWindow
EnumChildWindows
GetSystemMenu
GetWindowRect
GetSubMenu
GetMenuStringA
SetWindowTextA
GetDlgItem
EndDialog
GetDlgCtrlID
EnableMenuItem
SendMessageA
FindWindowA

gdi32

GetDIBits
GetStockObject
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteObject
DeleteDC

advapi32

AllocateAndInitializeSid
FreeSid
RegOpenKeyA
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegCloseKey
RegDeleteValueA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA

shell32

ShellExecuteExA
Shell_NotifyIconA

ole32

CLSIDFromProgID
CoCreateInstance
CoRevokeClassObject
CoRegisterClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
CoUninitialize
CoSuspendClassObjects

oleaut32

SysFreeString
SysAllocStringByteLen
SysStringLen
SysAllocString
SysStringByteLen
VarUI4FromStr
RegisterTypeLi
VariantClear
LoadTypeLi

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageA

hccutils

LoadSTRING
LoadBITMAP
LoadIMAGE
GetMyRegKey
LoadDialogString
ReleaseClassDevice
IsDisplayValid
EnumDeviceByClass
FindResources

Sections

.text
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yrdata
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

89b3e8bcf4eb127213530a9f5620b11c

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

comctl32

hccutils

Sections

.text Size: 100KB - Virtual size: 97KB

.rdata Size: 16KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 31KB

.rsrc Size: 4KB - Virtual size: 2KB

.yrdata Size: 80KB - Virtual size: 80KB

.text
Size: 100KB - Virtual size: 97KB

.rdata
Size: 16KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 31KB

.rsrc
Size: 4KB - Virtual size: 2KB

.yrdata
Size: 80KB - Virtual size: 80KB