2c1559c0360cbfd074df7955fa8d9584aec40d899d97213b2a29c5fe9f875357

Sharing

Copy URL Twitter E-mail

General

Target

2c1559c0360cbfd074df7955fa8d9584aec40d899d97213b2a29c5fe9f875357
Size

197KB
MD5

09dfdad71bbb96d050f1b97a937a7370
SHA1

3372afadcf94e59af9fb24fdd2d68625d2893965
SHA256

2c1559c0360cbfd074df7955fa8d9584aec40d899d97213b2a29c5fe9f875357
SHA512

cbb76257dd4beedf9f1d7d0426a8b0e00a119efff60d561eb3e6a0a8e91cb819ca9df7e238bdc6b3467077e69febf87bde88315bfa19b1de3e8291c7e0aa0bf5
SSDEEP

3072:gYuzcf/Xj9GaWyQvGk6ZdTb0zVjO6KhfSpsKsnUxouOTJrGD8qgLGFPJmzz:SzmxGzlvGHLTb0zVtK9P3qoID8TGFi

Score

N/A

Malware Config

Signatures

Files

2c1559c0360cbfd074df7955fa8d9584aec40d899d97213b2a29c5fe9f875357
.exe windows x86

98b81a981b1a9e32a323014dadf7503e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
GetModuleHandleA
GetSystemWindowsDirectoryW
lstrcmpiW
GetACP
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryW
SetLastError
CloseHandle
GetCPInfo
CreateFileW
FileTimeToSystemTime
GetDateFormatW
lstrcpyW
IsValidCodePage
FileTimeToLocalFileTime
GlobalAlloc
GetLastError
GetCurrentProcess
WideCharToMultiByte
RemoveDirectoryA
InterlockedDecrement
MultiByteToWideChar
OutputDebugStringA
LocalReAlloc
GetProcAddress
GetModuleFileNameW
GlobalUnlock
SetUnhandledExceptionFilter
GetStartupInfoA
QueryPerformanceCounter
lstrlenW
FormatMessageW
GetEnvironmentStringsA
OutputDebugStringW
GetTickCount
GetSystemTimeAsFileTime
GlobalLock
GlobalFree
InterlockedIncrement
GetComputerNameW
IsBadReadPtr

msvcrt

_except_handler3
wcsstr
?terminate@@YAXXZ
free
malloc
??3@YAXPAX@Z
wcsrchr
_onexit
mbstowcs
memmove
wcscat
wcslen
__dllonexit
??2@YAPAXI@Z
_wcsicmp
wcscmp
wcstoul
__RTDynamicCast
wcscpy
_wcsupr
wcschr
vswprintf
_adjust_fdiv
_purecall
_initterm
??1type_info@@UAE@XZ

certcli

CAGetCertTypeFlags
CAFindByName
CAGetCertTypeKeySpec
CASetCertTypeFlags
CARemoveCACertificateType
CAGetCertTypeExtensions
CAEnumCertTypesForCA
CASetCertTypeExtension
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CAFreeCertTypeProperty
CASetCertTypeKeySpec
CACreateCertType
CAGetCertTypeProperty
CAGetCertTypePropertyEx
CACertTypeSetSecurity
CACloseCA
CAEnumNextCertType
CAAddCACertificateType
CAUpdateCertType
CAUpdateCA
CAGetCAProperty
CAFindCertTypeByName
CAFreeCAProperty
CACloseCertType
CAEnumCertTypes
CASetCertTypeProperty

user32

SetFocus
MessageBoxW
SetDlgItemTextW
LoadCursorW
LoadStringW
SystemParametersInfoW
WinHelpW
LoadIconW
InsertMenuItemW
DialogBoxParamW
RegisterClipboardFormatW
SendMessageW
EnableWindow
LoadBitmapW
PostMessageW
SetWindowTextW
GetDlgItemTextA
EndDialog
LoadImageW
GetWindowLongW
ReleaseDC
wsprintfW
SetCursor
GetDlgItem
SetWindowLongW
GetDC
GetParent
SendDlgItemMessageW

comctl32

PropertySheetW
CreatePropertySheetPageW

advapi32

RegCloseKey
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW

gdi32

CreateFontIndirectW
DeleteObject
GetDeviceCaps

shell32

ShellExecuteExW
ShellExecuteW

Sections

.text
Size: 68KB - Virtual size: 68KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98b81a981b1a9e32a323014dadf7503e

Headers

File Characteristics

Imports

kernel32

msvcrt

certcli

user32

comctl32

advapi32

gdi32

shell32

Sections

.text Size: 68KB - Virtual size: 68KB

.rdata Size: 123KB - Virtual size: 2.3MB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 68KB - Virtual size: 68KB

.rdata
Size: 123KB - Virtual size: 2.3MB

.rsrc
Size: 3KB - Virtual size: 2KB