cccfd58954faa7b9bf611a8c80d26bbe98596050ec084662901e6cc763ddfaa8

Sharing

Copy URL Twitter E-mail

General

Target

cccfd58954faa7b9bf611a8c80d26bbe98596050ec084662901e6cc763ddfaa8
Size

281KB
MD5

3c20d5dae14dc93a047665e9746f4d0c
SHA1

891a05fa4acd16df6fe4644fb88cccf32db91a0d
SHA256

cccfd58954faa7b9bf611a8c80d26bbe98596050ec084662901e6cc763ddfaa8
SHA512

6b4793c9406fdd1a9fdc742ea314167f1d63c4c03526e87dc83b8a97690e8f95331c06771c90215d96c93f2635b02be52f6c3178ffdafba3c2919da32d99d225
SSDEEP

6144:FLjNVAQq73ts4IMvc6eFrhUBHzeDPHLRc5:FnAlTts4JChyzerHtc5

Score

N/A

Malware Config

Signatures

Files

cccfd58954faa7b9bf611a8c80d26bbe98596050ec084662901e6cc763ddfaa8
.exe windows x86

23f99ed004dec4de9f827d939eb879d4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathIsRelativeW
PathFindFileNameW
PathRemoveExtensionW
PathCanonicalizeW
PathIsURLW
PathStripToRootW
PathStripPathW
PathIsRootW
PathFileExistsW

gdi32

DeleteDC
SetViewportOrgEx
SetWindowExtEx
CreateMetaFileW
RestoreDC
SetTextAlign
SaveDC
CloseMetaFile
CreateFontIndirectW
LPtoDP
GetDeviceCaps
SetWindowOrgEx
CreateRectRgnIndirect
TextOutW
DeleteMetaFile
DeleteObject
SetMapMode

kernel32

GlobalAlloc
EnumResourceNamesW
FlushInstructionCache
FreeLibrary
lstrlenA
LeaveCriticalSection
RaiseException
RemoveDirectoryW
IsDebuggerPresent
lstrlenW
LoadResource
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
GetACP
TlsGetValue
VirtualFree
GetCurrentThreadId
GetProcessHeap
InterlockedPopEntrySList
UnhandledExceptionFilter
GlobalUnlock
MulDiv
LocalAlloc
IsProcessorFeaturePresent
FindResourceExW
WaitForSingleObject
IsValidCodePage
SetFileAttributesA
CreateFileMappingW
OutputDebugStringW
DeleteCriticalSection
GlobalLock
GetShortPathNameW
GetModuleHandleW
GetComputerNameW
CreateFileA
TlsAlloc
CreateFileW
CopyFileW
SetThreadPriority
GetSystemDefaultLCID
GetFileSize
FindResourceW
GetCurrentDirectoryW
CreateDirectoryW
HeapReAlloc
InterlockedPushEntrySList
HeapDestroy
CopyFileA
VirtualAlloc
HeapFree
FindNextFileW
ReadFile
FindClose
FindFirstFileW
MapViewOfFile
EnterCriticalSection
LockResource
WideCharToMultiByte
UnmapViewOfFile
HeapSize
SwitchToThread
SetFileAttributesW
TlsSetValue
HeapAlloc
TlsFree
CreateThread
CreateEventW
CloseHandle
lstrcmpW
SetUnhandledExceptionFilter
SizeofResource
SetLastError
GetFullPathNameW
InitializeCriticalSectionAndSpinCount
CompareFileTime
VirtualAllocEx

oleaut32

SysStringByteLen
SysStringLen
SysAllocString
VariantInit
RegisterTypeLi
VariantChangeType
SafeArrayLock
SysFreeString
GetErrorInfo
VarBstrCat
LoadTypeLi
DispCallFunc
SysAllocStringByteLen
SafeArrayCreate
SafeArrayUnaccessData
SafeArrayCopy
VariantClear
SafeArrayDestroy
LoadRegTypeLi
SafeArrayGetUBound
VarBstrCmp
SysAllocStringLen
SafeArrayGetElement
VariantCopy
SafeArrayGetVartype
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayUnlock
OleCreatePropertyFrame
UnRegisterTypeLi

user32

RegisterClassExW
MonitorFromWindow
OffsetRect
MessageBoxExW
GetParent
LoadCursorW
SetFocus
IntersectRect
GetMonitorInfoW
EnableWindow
GetMenu
PtInRect
MapWindowPoints
CharToOemBuffA
UnionRect
IsWindowEnabled
EndDialog
EndPaint
CharNextW
IsChild
SendMessageA
BeginPaint
MapDialogRect
GetClassNameW
SetWindowRgn
SetCursor
GetWindowRect
InvalidateRect
UnhookWindowsHookEx
CreateWindowExW
DefWindowProcW
SendMessageW
UnregisterClassA
CallNextHookEx
EqualRect
PostMessageW
GetWindowLongW
GetDC
DestroyWindow
ShowWindow
SetWindowPos
GetKeyState
AdjustWindowRectEx
SetWindowTextW
SetWindowContextHelpId
CallWindowProcW
GetClientRect
GetFocus
ReleaseDC
GetClassInfoExW
GetWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
IsWindow
SetWindowsHookExW

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExA
RegCreateKeyExW
RegEnumKeyExW
RegSetValueExW

ole32

CoTaskMemAlloc
ProgIDFromCLSID
CLSIDFromProgID
IIDFromString
OleRegEnumVerbs
CreateDataAdviseHolder
CoCreateInstance
StringFromGUID2
OleRegGetMiscStatus
CreateStreamOnHGlobal
CreateOleAdviseHolder
CLSIDFromString
OleRegGetUserType
StringFromCLSID
CoCreateGuid
CoTaskMemFree

userenv

GetProfileType
UnloadUserProfile
FreeGPOListW
GetAllUsersProfileDirectoryW
DllGetClassObject
UnregisterGPNotification

loadperf

InstallPerfDllW

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 248KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

23f99ed004dec4de9f827d939eb879d4

Headers

File Characteristics

Imports

shlwapi

gdi32

kernel32

oleaut32

user32

advapi32

ole32

userenv

loadperf

Sections

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 248KB - Virtual size: 249KB

.rsrc Size: 11KB - Virtual size: 11KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 248KB - Virtual size: 249KB

.rsrc
Size: 11KB - Virtual size: 11KB