cceacfa1f4f3f863a5192fd725db0c02d4487040b7f1fc041e6e69e02968d725

Sharing

Copy URL Twitter E-mail

General

Target

cceacfa1f4f3f863a5192fd725db0c02d4487040b7f1fc041e6e69e02968d725
Size

180KB
MD5

df6d4075be5442a0bc37472f6e774968
SHA1

4e8c835dbe402eea41c3e861918ce36f12cff738
SHA256

cceacfa1f4f3f863a5192fd725db0c02d4487040b7f1fc041e6e69e02968d725
SHA512

0f60eaef6dbf0705ed6b3c2f29922803300e205efb0ef42ff4925668f091c3ac69081d32dbc0f63586ec39cd83e602cdb14753f21a2581beff3e39280453121f
SSDEEP

3072:9lGeyrJP5KbCOjLLmZw2k0TvvKthTdbooKDatRRqW5hnuxs0nOC2gJFCbxQWLZ:6P5KbhjLShTvvCh2oyqRUWmeP0CVBZ

Score

N/A

Malware Config

Signatures

Files

cceacfa1f4f3f863a5192fd725db0c02d4487040b7f1fc041e6e69e02968d725
.exe windows x86

2a991e102c7617c2e2feaa1683f44f7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadFile
WaitForSingleObjectEx
GetProcessHeap
LocalFree
InterlockedCompareExchange
TlsFree
WaitForSingleObject
RegisterWaitForSingleObject
TerminateProcess
WriteFile
GetACP
InterlockedDecrement
RaiseException
GetEnvironmentStringsW
GetCurrentProcessId
WideCharToMultiByte
SetLastError
TlsSetValue
lstrlenW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetUnhandledExceptionFilter
LeaveCriticalSection
MultiByteToWideChar
GetFileSizeEx
GetModuleFileNameW
CreateThread
GetSystemTimeAsFileTime
GetCurrentProcess
GetCurrentThreadId
GetFileType
GetStdHandle
InterlockedIncrement
FlushFileBuffers
CreateFileA
GetVersionExW
HeapReAlloc
LoadLibraryA
Sleep
SetFilePointerEx
HeapAlloc
CloseHandle
InterlockedExchange
QueryPerformanceCounter
EnterCriticalSection
HeapFree
GetModuleFileNameA
GetTickCount
GetCPInfo
TryEnterCriticalSection
GetLastError
GetFileAttributesW
TlsAlloc
FindClose
LoadLibraryW
HeapCreate
DeleteCriticalSection
GetStartupInfoA
GetModuleHandleW
FreeLibrary
HeapSize
UnhandledExceptionFilter
GetFileSize
CreateFileW
LoadResource
FreeLibraryAndExitThread
IsDebuggerPresent
SetEvent
TlsGetValue
GetVersionExA
SetEndOfFile
ExitProcess
InitializeCriticalSection
SetErrorMode
GetModuleHandleA
GetCommandLineA
VirtualAllocEx

user32

GetWindowTextLengthW
MessageBoxW
BeginPaint
EndPaint
SetTimer
GetCursorPos
GetWindowTextLengthA
LoadStringA
InvalidateRect
GetMenuItemCount
SetCursor
SetRectEmpty
GetDesktopWindow
GetWindowRect
IsWindowVisible
IsWindowEnabled
ShowWindow
GetSysColorBrush
GetWindowLongW
GetDCEx
ShowWindowAsync
GetWindowThreadProcessId
GetWindowLongA
DestroyWindow
GetSystemMetrics
GetClientRect
GetWindowPlacement
PostQuitMessage
GetWindowDC
ReleaseDC
GetDlgItemInt
SetWindowPos
SetForegroundWindow
LoadStringW
MessageBoxA
GetDlgItem
GetWindowTextA
EnableWindow
TranslateMessage
GetDlgItemTextA
EndDialog
GetDlgItemTextW
IsWindowUnicode
SendMessageA
GetParent
GetWindowTextW

gdi32

CreatePalette
CreatePenIndirect
SelectPalette
SetViewportOrgEx
CreateFontIndirectA
StretchBlt
ExtSelectClipRgn
RestoreDC
GetClipBox
SaveDC
PatBlt
CreateBitmap
CreateCompatibleBitmap
ExtTextOutW
CreateSolidBrush
BitBlt
CreateRectRgnIndirect
SetBkMode
SetBkColor
CreateCompatibleDC
GetStockObject
DeleteDC
SetTextColor
SetStretchBltMode
GetDeviceCaps
SelectObject
DeleteObject
GetStretchBltMode
RealizePalette
SelectClipRgn
GetTextExtentPoint32W
SetMapMode
Rectangle
RectVisible
GetObjectW
LineTo
MoveToEx
CreateDIBitmap
CreateDIBSection
ExtTextOutA
GetObjectA
SetWindowOrgEx
ExtCreatePen
CreateFontIndirectW

ole32

OleFlushClipboard
OleIsCurrentClipboard
CoDisconnectObject
CoQueryProxyBlanket
CoGetClassObject
CoSetProxyBlanket
StgCreateDocfileOnILockBytes
CoRegisterClassObject
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CoCreateGuid
CoTaskMemRealloc
CoRevokeClassObject
CLSIDFromProgID
StringFromCLSID
StringFromGUID2
CLSIDFromString
CoTaskMemAlloc
CoInitialize
CoTaskMemFree
CoInitializeSecurity
CoUninitialize
CoCreateInstance
CoInitializeEx
CreateILockBytesOnHGlobal
ReleaseStgMedium
GetRunningObjectTable
CoRegisterMessageFilter
OleRun
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleLockRunning
OleSaveToStream
StgCreateDocfile
CreateItemMoniker
OleDuplicateData
OleInitialize
OleRegGetUserType
OleUninitialize
CreateBindCtx

msvcrt

memcmp
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__dllonexit
_onexit

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 132KB - Virtual size: 240KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2a991e102c7617c2e2feaa1683f44f7e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

ole32

msvcrt

Sections

.text Size: 16KB - Virtual size: 15KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 132KB - Virtual size: 240KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 16KB - Virtual size: 15KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 132KB - Virtual size: 240KB

.rsrc
Size: 20KB - Virtual size: 17KB