2c8c9dfbf610d1f0297146f61409312877843c72d3100395b7a7b3e3b241e8c8

Sharing

Copy URL

Twitter E-mail

General

Target

2c8c9dfbf610d1f0297146f61409312877843c72d3100395b7a7b3e3b241e8c8
Size

830KB
MD5

4b63f7e94ec43f4c0135028164dc0c20
SHA1

1d0e342545c14e41681f7965c00feb0c03b995e7
SHA256

2c8c9dfbf610d1f0297146f61409312877843c72d3100395b7a7b3e3b241e8c8
SHA512

5c75238c17108a8c89473463a29d420f7316cb4df35f6f2e647f4e6182c63d4a815f795383861ff1f3745aaeeaaed79d1749cb06889935b8d9c5bbef43ed0c7b
SSDEEP

24576:k2XmV14y7BzInoKTzHJ+ay3Q3BTG/YdaO:k0m4uGX8af3Bq/Yh

Score

N/A

Malware Config

Signatures

Files

2c8c9dfbf610d1f0297146f61409312877843c72d3100395b7a7b3e3b241e8c8
.exe windows x86

4a7be84f2d1f245c117742b6556b5546

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
LocalFree
HeapReAlloc
ConvertDefaultLocale
LoadResource
GetOEMCP
SetUnhandledExceptionFilter
FreeEnvironmentStringsA
FileTimeToSystemTime
LCMapStringA
GlobalUnlock
GlobalDeleteAtom
GetLocaleInfoA
GetCurrentThread
CloseHandle
SetHandleCount
QueryPerformanceCounter
GlobalFlags
SetStdHandle
TlsSetValue
GetStringTypeA
LocalFileTimeToFileTime
GetStdHandle
GetLastError
GlobalAlloc
TlsFree
FileTimeToLocalFileTime
RtlUnwind
IsDebuggerPresent
GetFileType
VirtualFree
HeapCreate
CreateFileA
TlsAlloc
GetVersion
GetEnvironmentStrings
SetErrorMode
TerminateProcess
RaiseException
GetACP
UnlockFile
GetConsoleOutputCP
GetCommandLineW
VirtualQuery
ReadFile
WriteConsoleA
GlobalFree
GetFileSize
GlobalHandle
GetSystemInfo
GetWindowsDirectoryA
LocalReAlloc
DuplicateHandle
GetThreadLocale
GlobalReAlloc
LockResource
SetEndOfFile
lstrcmpA
HeapAlloc
SetEnvironmentVariableA
FlushFileBuffers
HeapSize
FreeLibrary
GetFileTime
GlobalLock
FreeResource
GetSystemDirectoryA
CompareStringA
LockFile
GetCommandLineA
SetFileTime
SizeofResource
HeapFree
LocalAlloc
GetVersionExA
SystemTimeToFileTime
GetConsoleMode
HeapDestroy
lstrcpyA
GetCurrentProcessId
GetCurrentThreadId
DeleteCriticalSection
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcatA
InitializeCriticalSection
GetModuleFileNameA
GetProcessHeap

user32

GetScrollPos
GetSystemMetrics
GetWindowPlacement
CopyRect
MapWindowPoints
ValidateRect
TrackPopupMenu
MessageBeep
GetWindowDC
ReuseDDElParam
ReleaseCapture
GetDC
GetLastActivePopup
SetWindowPos
GetDesktopWindow
EndDeferWindowPos
BeginPaint
GetClientRect
GetNextDlgGroupItem
GetWindowThreadProcessId
GetSysColor
OffsetRect
TranslateMessage
GetWindowRect
GetTopWindow
IsWindow
DeferWindowPos
ScreenToClient
FillRect
GetNextDlgTabItem
PtInRect
GetSysColorBrush
BeginDeferWindowPos
EqualRect
ShowScrollBar
IsChild
IntersectRect
GetDlgItem
SetWindowContextHelpId
GetFocus
SetRectEmpty
GetMenu
GetParent
SendDlgItemMessageA
IsWindowVisible
MoveWindow
SetParent
GetMenuItemID
GetMenuCheckMarkDimensions
AdjustWindowRectEx
SetActiveWindow
InflateRect
ShowWindow
SetMenuItemBitmaps
GetCapture
RedrawWindow
SetScrollPos
GetMessageTime
GetScrollInfo
GetActiveWindow
SetCapture
UpdateWindow
UnpackDDElParam
SetScrollInfo
SetScrollRange
GetSystemMenu
EnableMenuItem
IsRectEmpty
DestroyMenu
ReleaseDC
PostQuitMessage
EndDialog
CreatePopupMenu
InvalidateRect
KillTimer
GetScrollRange
EndPaint
ShowOwnedPopups
LockWindowUpdate
SetWindowRgn
IsWindowEnabled
IsZoomed
SetForegroundWindow
MapDialogRect
SetMenu
GetMenuItemCount
CheckMenuItem
GetWindow
SetFocus

gdi32

SetBkMode
OffsetRgn
SetMapMode
GetDeviceCaps
RestoreDC
DPtoLP
SetBkColor
ScaleWindowExtEx
GetBkColor
ExtSelectClipRgn
GetRgnBox
SetTextColor
CreatePatternBrush
DeleteObject
RectVisible
PtVisible
SetRectRgn
GetPixel
ExcludeClipRect
SetViewportOrgEx
SelectClipRgn
GetClipBox
GetMapMode
CreateCompatibleBitmap
SetViewportExtEx
GetWindowExtEx
ScaleViewportExtEx
Ellipse
OffsetViewportOrgEx
Escape
CreateRectRgn
BitBlt
SetWindowExtEx
CombineRgn
CreateRectRgnIndirect
SelectObject
DeleteDC
StretchDIBits
GetStockObject
CreateSolidBrush
GetTextColor
CreateBitmap
SaveDC
IntersectClipRect
PatBlt
CreateCompatibleDC

winspool.drv

ClosePrinter

advapi32

RegCloseKey
SetFileSecurityW

ole32

CoGetClassObject
CLSIDFromProgID
CLSIDFromString
OleInitialize
OleFlushClipboard
CoRevokeClassObject
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleUninitialize
OleIsCurrentClipboard

oleaut32

SysAllocStringLen
SysStringLen
SafeArrayDestroy
VariantCopy
VariantInit
OleCreateFontIndirect
SysFreeString
VariantTimeToSystemTime
VariantClear
VariantChangeType
SystemTimeToVariantTime

comctl32

ord17

msvcrt

_CIcos

Sections

.text
Size: 544KB - Virtual size: 543KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 95KB - Virtual size: 94KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 163KB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 101B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a7be84f2d1f245c117742b6556b5546

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

comctl32

msvcrt

Sections

.text Size: 544KB - Virtual size: 543KB

.rdata Size: 95KB - Virtual size: 94KB

.data Size: 163KB - Virtual size: 5.4MB

.tls Size: - Virtual size: 101B

.rsrc Size: 20KB - Virtual size: 20KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 544KB - Virtual size: 543KB

.rdata
Size: 95KB - Virtual size: 94KB

.data
Size: 163KB - Virtual size: 5.4MB

.tls
Size: - Virtual size: 101B

.rsrc
Size: 20KB - Virtual size: 20KB

.reloc
Size: 6KB - Virtual size: 6KB