2006cc2bfa7878a73cd2922607d2ae2c8bbe967a5464843aa9e70f576b54717e

Sharing

Copy URL Twitter E-mail

General

Target

2006cc2bfa7878a73cd2922607d2ae2c8bbe967a5464843aa9e70f576b54717e
Size

139KB
MD5

35e4da0e32e3da434df18c14e5d35860
SHA1

817665a88c8e5a13b1c694402594b2a5ba114bc4
SHA256

2006cc2bfa7878a73cd2922607d2ae2c8bbe967a5464843aa9e70f576b54717e
SHA512

acd8930365d3ac2c0de2f0f2ed865e0a50b26cf8e12c650cc3964c82808e8e27f682e6b2bce0c4e5e40b427a46ea17c4808e4ecd2332ac74a375404943a3880f
SSDEEP

1536:xd08pKA7VfMX6GtuvezcngDkY02WUvH1h8nW/+3ZDoioif5owyXW65ZgU:ZJj+U8cpJ2gWKZdoIe5ZgU

Score

N/A

Malware Config

Signatures

Files

2006cc2bfa7878a73cd2922607d2ae2c8bbe967a5464843aa9e70f576b54717e
.exe windows x86

bd2f580f5ff3076a5561cd1c8ad4feec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle

kernel32

CreateToolhelp32Snapshot
CloseHandle
ExitProcess
SetPriorityClass
MoveFileExA
GetCurrentProcess
GetCurrentThread
SetProcessPriorityBoost
GetFileAttributesA
GetEnvironmentVariableA
SetThreadPriority
GetShortPathNameA
GetProcAddress
LoadLibraryA
GetModuleHandleA
GetVersionExA
GetLastError
CreateMutexA
ReleaseMutex
GetCurrentProcessId
FreeLibrary
GetModuleFileNameA
WaitForSingleObject
GetTickCount
CreateEventA
MultiByteToWideChar
CreateThread
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
InitializeCriticalSectionAndSpinCount
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
HeapSize
Process32Next
Sleep
Process32First
GetComputerNameA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
WinExec
WideCharToMultiByte
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetFileType
SetHandleCount
FlushFileBuffers
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapFree
HeapAlloc
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
GetCPInfo
LCMapStringA
LCMapStringW
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW

user32

IsWindow
SwitchToThisWindow
RealGetWindowClassA
VkKeyScanW
SendInput
MapVirtualKeyA
PostMessageA
BlockInput
keybd_event
FindWindowExA
SendMessageA
GetForegroundWindow
GetWindowTextA
FindWindowA

advapi32

AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
FreeSid
AllocateAndInitializeSid
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
IsTextUnicode

shell32

ShellExecuteExA
ShellExecuteA
SHChangeNotify

ntdll

ZwSystemDebugControl
NtQuerySystemInformation

Sections

.text
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.haxed
Size: 4KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hauumec
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

bd2f580f5ff3076a5561cd1c8ad4feec

Headers

DLL Characteristics

File Characteristics

Imports

wininet

kernel32

user32

advapi32

shell32

ntdll

Sections

.text Size: 104KB - Virtual size: 103KB

.rdata Size: 16KB - Virtual size: 15KB

.data Size: 5KB - Virtual size: 12KB

.reloc Size: 9KB - Virtual size: 9KB

.haxed Size: 4KB - Virtual size: 32KB

hauumec Size: - Virtual size: 4KB

.text
Size: 104KB - Virtual size: 103KB

.rdata
Size: 16KB - Virtual size: 15KB

.data
Size: 5KB - Virtual size: 12KB

.reloc
Size: 9KB - Virtual size: 9KB

.haxed
Size: 4KB - Virtual size: 32KB

hauumec
Size: - Virtual size: 4KB