c2fff562bec163234e5d04233b763eeb88d8649400b07e711a71db1f33399a06

Sharing

Copy URL Twitter E-mail

General

Target

c2fff562bec163234e5d04233b763eeb88d8649400b07e711a71db1f33399a06
Size

212KB
MD5

ced524f502c2cc3ddc64ac0b8ee58f94
SHA1

b60a4924737d65b36c2c4c5da4afe31321207ca1
SHA256

c2fff562bec163234e5d04233b763eeb88d8649400b07e711a71db1f33399a06
SHA512

6a7e577facc9e2ae3dd5a4e994cc0dab8fec09e25872a9a9dec5f13a9f4cef55da6ae281a3bc7f84a9a178b3d1509df9c5315ddba5e76e9c4dbd748cee69b9d3
SSDEEP

1536:gsAr7WRhgCdAXm5SoWzacQlCVpUYXIYxdwBuHCRpeOSiLKGYdISov:UrigCdl5SGcQlSpUYbwuipeh/dLov

Score

N/A

Malware Config

Signatures

Files

c2fff562bec163234e5d04233b763eeb88d8649400b07e711a71db1f33399a06
.exe windows x86

2f77d5052b02d77358cf30719016148a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

Sleep
QueryPerformanceCounter
ReadFile
DeleteCriticalSection
lstrcpyW
GetLastError
VirtualFree
LoadLibraryA
GetLastError
GetCurrentProcessId
GetCurrentProcessId
lstrlenW
CreateFileW
GetCurrentProcessId
TerminateProcess
lstrlenW
MultiByteToWideChar
MultiByteToWideChar
HeapDestroy
lstrlenW
HeapFree
GetModuleFileNameA
WaitForSingleObject
LoadLibraryA
LoadLibraryW
lstrlenW
InterlockedDecrement
GetCommandLineA
HeapFree
SetLastError
LoadLibraryW
LoadLibraryA
CloseHandle
SetLastError

user32

MoveWindow
MapWindowPoints
GetDlgItem
DestroyMenu
CheckDlgButton
GetDlgItem
DefWindowProcW
CreateWindowExW
GetWindowTextW
ReleaseCapture
SetCapture
IsDialogMessageW
MapWindowPoints
EnableWindow
GetWindow
WinHelpW
GetKeyState
LoadStringA
LoadCursorW
IsWindow
RegisterClassW
LoadStringW
GetSysColor
EnableMenuItem
InvalidateRect
DestroyMenu
UpdateWindow
DispatchMessageW
IsIconic
OffsetRect
TranslateMessage
MessageBeep
GetWindowTextW
GetClientRect
DispatchMessageA
PeekMessageW
EndPaint
MessageBoxA
InvalidateRect
SetRect
CheckDlgButton
IsWindow
GetWindowTextW
EndPaint
CopyRect
DestroyWindow
SetForegroundWindow
LoadStringA
GetCursorPos
InvalidateRect
InvalidateRect
SetDlgItemTextW
IsWindow
DefWindowProcW
GetKeyState
SystemParametersInfoW
GetWindowLongW

gdi32

GetStockObject
GetDeviceCaps
MoveToEx
BitBlt
GetStockObject
TextOutW
LineTo
TextOutW
SetBkMode
PatBlt
DeleteObject
GetDeviceCaps
CreateCompatibleDC
GetDeviceCaps
SetBkMode
SetBkColor
DeleteObject
SetTextColor
GetStockObject
StretchBlt
SetBkMode
CreateBitmap
CreateCompatibleBitmap
CreateSolidBrush
MoveToEx
SelectObject
DeleteObject
SetTextColor
LineTo
SetBkColor
GetObjectW
GetTextExtentPoint32W
PatBlt
SelectObject
TextOutW
LineTo
ExtTextOutW
GetTextExtentPoint32W
DeleteDC
BitBlt
SetBkMode
CreateFontIndirectW
DeleteDC
GetStockObject
CreateCompatibleBitmap
CreateBitmap
BitBlt
DeleteDC
CreateBitmap
GetTextMetricsW
GetTextMetricsW
ExtTextOutW
PatBlt
SelectObject
TextOutW
SetBkColor
StretchBlt
CreateSolidBrush
DeleteObject
CreateBitmap
SelectObject
GetTextMetricsW
LineTo
GetStockObject
DeleteDC
DeleteDC
CreateFontIndirectW
GetStockObject
GetDeviceCaps
ExtTextOutW
GetDeviceCaps
SetBkMode
TextOutW
TextOutW
MoveToEx
CreateBitmap
DeleteObject
CreateSolidBrush
SetTextColor
GetDeviceCaps
SetBkMode
GetObjectW
PatBlt
GetTextMetricsW
PatBlt
StretchBlt
ExtTextOutW
LineTo
CreateSolidBrush
CreateFontIndirectW
SelectObject
CreateFontIndirectW
CreateCompatibleBitmap
CreateCompatibleBitmap
CreateBitmap
CreateFontIndirectW
GetDeviceCaps
DeleteDC
DeleteObject

Sections

.idata
Size: 181KB - Virtual size: 184KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.fdata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.fdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 512B - Virtual size: 512B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2f77d5052b02d77358cf30719016148a

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.idata Size: 181KB - Virtual size: 184KB

.idata Size: 1KB - Virtual size: 4KB

.idata Size: 2KB - Virtual size: 4KB

.fdata Size: 5KB - Virtual size: 8KB

.fdata Size: 4KB - Virtual size: 4KB

.fdata Size: 5KB - Virtual size: 8KB

.fdata Size: 1024B - Virtual size: 4KB

.fdata Size: 4KB - Virtual size: 4KB

.fdata Size: 2KB - Virtual size: 4KB

.fdata Size: 512B - Virtual size: 4KB

.fdata Size: 512B - Virtual size: 4KB

.fdata Size: 4KB - Virtual size: 4KB

.fdata Size: 512B - Virtual size: 4KB

Size: 512B - Virtual size: 512B

.idata
Size: 181KB - Virtual size: 184KB

.idata
Size: 1KB - Virtual size: 4KB

.idata
Size: 2KB - Virtual size: 4KB

.fdata
Size: 5KB - Virtual size: 8KB

.fdata
Size: 4KB - Virtual size: 4KB

.fdata
Size: 5KB - Virtual size: 8KB

.fdata
Size: 1024B - Virtual size: 4KB

.fdata
Size: 4KB - Virtual size: 4KB

.fdata
Size: 2KB - Virtual size: 4KB

.fdata
Size: 512B - Virtual size: 4KB

.fdata
Size: 512B - Virtual size: 4KB

.fdata
Size: 4KB - Virtual size: 4KB

.fdata
Size: 512B - Virtual size: 4KB