3c2675ec3cbb175d0e2d4a8acbf4aebbdf5fb0335b8f3a926a3064f627828a7b

Sharing

Copy URL Twitter E-mail

General

Target

3c2675ec3cbb175d0e2d4a8acbf4aebbdf5fb0335b8f3a926a3064f627828a7b
Size

1.0MB
MD5

7b75f81de5583e67071af08b9cf62681
SHA1

73067a9336720fb5c51035f5ae97f786a13e8083
SHA256

3c2675ec3cbb175d0e2d4a8acbf4aebbdf5fb0335b8f3a926a3064f627828a7b
SHA512

317faa92f83eae1a872472a54cec428992b1fbf02cdbf155c9aedd802b1fe881cc7fb2edc8b9d818b47773a6943dc065c91b0a1e23936bcc7680401a086679b2
SSDEEP

12288:yxVjFFijHP3w27z/wTa/VEXiFKncFnJyFtJCGQPcvADiqvzxW2UJS5Deo/KqQO4d:LHP3L3/wTfkJyFtJCGQOmDwUA9iY

Score

N/A

Malware Config

Signatures

Files

3c2675ec3cbb175d0e2d4a8acbf4aebbdf5fb0335b8f3a926a3064f627828a7b
.exe windows x86

417219cd96248383cca175340e42726d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wintrust

WinVerifyTrust

kernel32

GetModuleFileNameA
SetFilePointer
MultiByteToWideChar
ReadFile
InterlockedExchange
LoadLibraryA
InitializeCriticalSection
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
FlushFileBuffers
RtlUnwind
CreateFileA
CompareStringA
CompareStringW
InterlockedDecrement
InterlockedIncrement
QueryPerformanceCounter
GetProcAddress
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
HeapSize
RaiseException
GetLastError
lstrcmpW
LeaveCriticalSection
EnterCriticalSection
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
WriteFile
IsDebuggerPresent
FreeLibrary
InterlockedCompareExchange
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetStartupInfoA
GetProcessHeap
GetVersionExA
GetCommandLineA
ExitProcess
HeapAlloc
HeapFree
CreateMutexA
WaitForSingleObject
Sleep
OpenMutexA
CloseHandle
GetExitCodeProcess
TerminateProcess
OpenProcess
GetCurrentProcessId
CreateEventA
ResetEvent
SetEvent
WaitForMultipleObjects
TerminateThread
SetThreadPriority
GetDriveTypeA
GetFileSize
SetEndOfFile
UnmapViewOfFile
DeleteFileW
DeleteFileA
GetModuleHandleW
FindFirstFileW
LoadLibraryW
FindFirstFileA
LoadLibraryExW
FindFirstFileExW
LoadLibraryExA
CreateDirectoryW
FindFirstFileExA
CreateDirectoryExW
SetFileAttributesA
FindNextFileW
FindNextFileA
GetFileAttributesExA
CopyFileW
GetShortPathNameA
MoveFileW
GetShortPathNameW
MoveFileExW
CreateFileW
CopyFileA
SetFileAttributesW
GetFileAttributesExW
MoveFileA
RemoveDirectoryA
GetDateFormatW
MoveFileExA
GetTimeFormatW
RemoveDirectoryW
CopyFileExW
MoveFileWithProgressW
CopyFileExA
CreateProcessW
CreateDirectoryA
CreateProcessA
FindFirstChangeNotificationW
MoveFileWithProgressA
FindFirstChangeNotificationA
CreateDirectoryExA
GetFileAttributesW
GetFileAttributesA
GetVersion
GetModuleFileNameW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetModuleHandleA
LoadResource
SetErrorMode
LockResource
GetLongPathNameW
GetLongPathNameA
FindResourceA
SizeofResource
SearchPathA
FormatMessageA
LocalFree
GetSystemDefaultLCID
QueryPerformanceFrequency
GetSystemInfo
FindClose
ExitThread
CreateThread

user32

SetClassLongA
CreateWindowExA
SendMessageW
SetMenuItemInfoA
CreateWindowExW
SetDlgItemTextW
SetWindowTextA
DefWindowProcW
CreateDialogParamW
InsertMenuItemA
GetParent
LoadCursorA
PostMessageA
SetCursor
SetForegroundWindow
FlashWindowEx
GetWindowRect
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
EnumThreadWindows
IsWindowVisible
IsIconic
SystemParametersInfoA
GetSystemMetrics
PeekMessageA
IsWindow
IsDialogMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
MsgWaitForMultipleObjects
SetActiveWindow
GetAsyncKeyState
ShowWindow
DialogBoxParamW
AdjustWindowRect
EndPaint
MoveWindow
DestroyWindow
ReleaseCapture
GetClientRect
GetActiveWindow
MessageBeep
PostQuitMessage
BeginPaint
GetDC
ReleaseDC
CreateDialogParamA
DefWindowProcA
MessageBoxA
SetDlgItemTextA
AppendMenuA
DialogBoxParamA
GetWindowTextA
GetWindowTextW
GetClassNameA
GetWindowLongA
FindWindowA
EnumWindows
SetWindowTextW
GetWindow
SetClassLongW
LoadStringA
UnregisterClassA
GetClassInfoA
UnregisterClassW
RegisterClassA
RegisterClassW
CallWindowProcW
CallWindowProcA
GetWindowLongW
SetWindowLongW
SetWindowLongA
GetMenuItemInfoA
MessageBoxW
SendMessageA
SetWindowPos
LoadImageA
GetDlgItem
EndDialog
LoadIconA
AppendMenuW
InsertMenuItemW
GetMenuItemInfoW
SetFocus
SetMenuItemInfoW

advapi32

RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegEnumValueA
CryptAcquireContextA
CryptGenRandom
RegEnumKeyExA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegEnumValueW
RegEnumKeyExW
RegCloseKey

shell32

SHGetSpecialFolderPathA
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
DragQueryFileW
SHFileOperationA
SHGetFileInfoA
SHBrowseForFolderA
SHGetPathFromIDListA
SHFileOperationW
SHGetFileInfoW
SHGetSpecialFolderPathW
DragQueryFileA
ShellExecuteA
ShellExecuteExA
ShellExecuteExW

oleaut32

SysFreeString
SysAllocString
SystemTimeToVariantTime

comctl32

PropertySheetW
PropertySheetA
CreatePropertySheetPageA
InitCommonControlsEx
CreatePropertySheetPageW

shlwapi

SHDeleteValueA

urlmon

URLDownloadToFileA
URLDownloadToFileW

wininet

DeleteUrlCacheEntry
InternetCrackUrlA
InternetOpenA
InternetGetConnectedState
HttpOpenRequestA
HttpSendRequestA
InternetConnectA
InternetCloseHandle

gdi32

CreateDIBSection
SetStretchBltMode
StretchBlt
SetBkMode
TextOutW
GetKerningPairsA
GetStockObject
CreateFontIndirectA
BitBlt
Rectangle
CreatePen
DeleteDC
SelectObject
CreateCompatibleDC
DeleteObject
GetTextExtentPoint32A
ExtTextOutA
TextOutA
GetTextExtentPoint32W
ExtTextOutW
GetGlyphOutlineW
GetGlyphOutlineA

comdlg32

GetOpenFileNameW
GetOpenFileNameA
GetSaveFileNameW
GetSaveFileNameA

Sections

.text
Size: 568KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 56KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

417219cd96248383cca175340e42726d

Headers

File Characteristics

Imports

wintrust

kernel32

user32

advapi32

shell32

oleaut32

comctl32

shlwapi

urlmon

wininet

gdi32

comdlg32

Sections

.text Size: 568KB - Virtual size: 566KB

.rdata Size: 108KB - Virtual size: 105KB

.data Size: 56KB - Virtual size: 139KB

.rsrc Size: 300KB - Virtual size: 296KB

.idata Size: 16KB - Virtual size: 24KB

.text
Size: 568KB - Virtual size: 566KB

.rdata
Size: 108KB - Virtual size: 105KB

.data
Size: 56KB - Virtual size: 139KB

.rsrc
Size: 300KB - Virtual size: 296KB

.idata
Size: 16KB - Virtual size: 24KB