c2cc8c1239179b73c0edc1e7b93d0961a5c5af3ce32e29ce1d2d06f8ce59f256

Sharing

Copy URL Twitter E-mail

General

Target

c2cc8c1239179b73c0edc1e7b93d0961a5c5af3ce32e29ce1d2d06f8ce59f256
Size

223KB
MD5

927528558c7eef06c51ada3a2275caf9
SHA1

cf90f3dd2c753f5cd238a65042582f2795750806
SHA256

c2cc8c1239179b73c0edc1e7b93d0961a5c5af3ce32e29ce1d2d06f8ce59f256
SHA512

1f221978f0602be9cdfc73517f08e1c5c923bd8f19a02e8eadda01cee2caf7adc56789775806d21ba07d2dc811668039d30643acbc72d9b42670aa2f8e91da34
SSDEEP

6144:L+TImxE7N0y6koOWeFiCocEdRKNnl0dG:L+TJy7N0yYeFxSRIl0d

Score

N/A

Malware Config

Signatures

Files

c2cc8c1239179b73c0edc1e7b93d0961a5c5af3ce32e29ce1d2d06f8ce59f256
.exe windows x86

c9e3a2b11a6e02461d06cac3a114feb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
_controlfp
__p__fmode
__p__commode
?terminate@@YAXXZ
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
__winitenv
??2@YAPAXI@Z
free
__CxxFrameHandler
malloc
wcscpy
wcstok
_iob
wcslen
_wtoi
_ltow
_wsetlocale
_wcsicmp
wcschr
_CxxThrowException
_c_exit
_exit
_XcptFilter
_cexit
??1type_info@@UAE@XZ
_except_handler3
exit
calloc
wcstod
wcstol
wcsncmp
_wcsnicmp
realloc
fflush
fprintf
strtok
wcsstr
_wcsnset
wcscat
_strnicmp
_stricmp
localtime
??3@YAXPAX@Z

kernel32

FileTimeToSystemTime
GetComputerNameExW
GetConsoleMode
SetConsoleMode
ReadFile
ReadConsoleW
MultiByteToWideChar
LoadLibraryW
FreeLibrary
lstrcpynW
WideCharToMultiByte
VerSetConditionMask
VerifyVersionInfoW
lstrlenW
lstrcmpiW
lstrcmpW
InterlockedIncrement
GetModuleHandleA
LocalFree
GetStdHandle
WriteConsoleW
FormatMessageW
LocalAlloc
SetLastError
GetNumberFormatW
InterlockedDecrement
CreateFileW
CreateFileMappingW
CloseHandle
MapViewOfFile
GetDateFormatW
GetTimeFormatW
lstrcatW
UnmapViewOfFile
GetUserDefaultLCID
GetLocaleInfoW
GetModuleHandleW
GetProcAddress
GetLastError
lstrcpyW

user32

LoadStringW
wsprintfW
CharUpperW

mpr

WNetAddConnection2W
WNetCancelConnection2W
WNetGetLastErrorW

ole32

CoTaskMemFree
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoTaskMemAlloc

oleaut32

SysAllocStringByteLen
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysFreeString
SysStringLen
SysAllocString

framedyn

?Compare@CHString@@QBEHPBG@Z
?Format@CHString@@QAAXPBGZZ
?GetBufferSetLength@CHString@@QAEPAGH@Z
?ReleaseBuffer@CHString@@QAEXH@Z
??YCHString@@QAEABV0@PBG@Z
?Left@CHString@@QBE?AV1@H@Z
?FindOneOf@CHString@@QBEHPBG@Z
?Mid@CHString@@QBE?AV1@H@Z
??4CHString@@QAEABV0@ABV0@@Z
?Find@CHString@@QBEHG@Z
?GetBuffer@CHString@@QAEPAGH@Z
??0CHString@@QAE@PBG@Z
??0CHString@@QAE@XZ
??1CHString@@QAE@XZ
?GetData@CHString@@IBEPAUCHStringData@@XZ
??4CHString@@QAEABV0@PBG@Z

shlwapi

StrCmpNW

secur32

GetUserNameExW

ws2_32

gethostbyaddr
WSAGetLastError
inet_addr
WSACleanup
WSAStartup

netapi32

NetServerGetInfo
NetApiBufferFree

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 164KB - Virtual size: 428KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c9e3a2b11a6e02461d06cac3a114feb5

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

kernel32

user32

mpr

ole32

oleaut32

framedyn

shlwapi

secur32

ws2_32

netapi32

Sections

.text Size: 44KB - Virtual size: 43KB

.data Size: 512B - Virtual size: 140B

.tls Size: 512B - Virtual size: 21B

.rsrc Size: 13KB - Virtual size: 12KB

.vmp0 Size: 164KB - Virtual size: 428KB

.text
Size: 44KB - Virtual size: 43KB

.data
Size: 512B - Virtual size: 140B

.tls
Size: 512B - Virtual size: 21B

.rsrc
Size: 13KB - Virtual size: 12KB

.vmp0
Size: 164KB - Virtual size: 428KB