cc21e5d55920ccba86a101edfe4b5d44c2a2e2316f25845b6c3e1b372d509899

Sharing

Copy URL Twitter E-mail

General

Target

cc21e5d55920ccba86a101edfe4b5d44c2a2e2316f25845b6c3e1b372d509899
Size

15KB
MD5

cfb18ee194ef559fcdcc4d28eb49b6ae
SHA1

3594056a104aa8822443e79406182d32630479f3
SHA256

cc21e5d55920ccba86a101edfe4b5d44c2a2e2316f25845b6c3e1b372d509899
SHA512

c07a6ab84ff20764b43bb415e2779538ec0e7f9dd99f45d2bf64ad91e489c665906b4c0591136490d1bf58d9a5720df130d089dbb3335e242846d1307558ecaa
SSDEEP

384:V7dIn8BqVX2hhtK4d1ij5bzR2LrLdSpo+8dmlbG:V7Sz9WhcrbzR2L1Uo+84A

Score

N/A

Malware Config

Signatures

Files

cc21e5d55920ccba86a101edfe4b5d44c2a2e2316f25845b6c3e1b372d509899
.exe windows x86

a8a254011495b0f1253f19e3f6a7df92

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapAlloc
HeapFree
LoadLibraryA
LoadResource
LocalAlloc
LocalFree
LockResource
MapViewOfFile
MultiByteToWideChar
OpenProcess
ReadFile
RtlMoveMemory
RtlZeroMemory
FindNextFileA
GlobalUnlock
SetFilePointer
SizeofResource
Sleep
UnmapViewOfFile
VirtualAlloc
VirtualFree
WriteFile
lstrcatA
lstrcmpW
lstrcmpiA
lstrcpyA
lstrlenA
FindFirstFileA
GlobalLock
GetVersionExA
GetProcessHeap
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetLastError
GetLocalTime
GetFileSize
GetFileAttributesA
GetEnvironmentVariableA
GetCommandLineA
FindClose
FreeResource
FreeLibrary
SetFileAttributesA
FindResourceA
ExitProcess
DeleteFileA
CreateThread
CreateProcessA
CreateMutexA
CreateFileMappingA
CreateFileA
CreateDirectoryA
CopyFileA
SetEndOfFile
CloseHandle

user32

UpdateWindow
TranslateMessage
ToAsciiEx
ShowWindow
SetTimer
SetClipboardViewer
SendMessageA
RegisterRawInputDevices
RegisterClassExA
OpenClipboard
MapVirtualKeyExA
LoadIconA
LoadCursorA
IsClipboardFormatAvailable
GetWindowThreadProcessId
wsprintfA
ChangeClipboardChain
CloseClipboard
CreateWindowExA
DefWindowProcA
GetMessageA
DispatchMessageA
GetClassNameA
GetClipboardData
GetDC
GetForegroundWindow
GetKeyNameTextA
GetKeyboardLayout
GetWindowTextA
GetWindowLongA
GetSystemMetrics
GetRawInputData
GetKeyboardState

shlwapi

PathRenameExtensionA
PathMatchSpecA
PathAddBackslashA
PathFindFileNameA

advapi32

AllocateAndInitializeSid
CryptEncrypt
CryptExportKey
CryptGenKey
CryptReleaseContext
FreeSid
RegCreateKeyExA
RegNotifyChangeKeyValue
RegSetValueExA
CryptAcquireContextA
CheckTokenMembership
CryptDestroyKey

ws2_32

socket
recv
gethostbyname
connect
closesocket
WSAStartup
send

wininet

InternetOpenA
InternetConnectA
InternetCloseHandle
FtpPutFileA

gdi32

CreateCompatibleDC
DeleteDC
DeleteObject
GetDIBits
SelectObject
StretchBlt
CreateDIBSection

gdiplus

GdipDisposeImage
GdipGetImageEncodersSize
GdipLoadImageFromFile
GdipSaveImageToFile
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders

psapi

GetProcessImageFileNameA

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 364B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a8a254011495b0f1253f19e3f6a7df92

Headers

File Characteristics

Imports

kernel32

user32

shlwapi

advapi32

ws2_32

wininet

gdi32

gdiplus

psapi

Sections

.text Size: 8KB - Virtual size: 8KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 1024B - Virtual size: 59KB

.rsrc Size: 512B - Virtual size: 364B

.text
Size: 8KB - Virtual size: 8KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 1024B - Virtual size: 59KB

.rsrc
Size: 512B - Virtual size: 364B