c42c5cc1230a75f8f6e0729e8054cc212ae8eb237e157d4be3108c610b6fdb35

Sharing

Copy URL Twitter E-mail

General

Target

c42c5cc1230a75f8f6e0729e8054cc212ae8eb237e157d4be3108c610b6fdb35
Size

258KB
MD5

ecc70995f1fe3de8d756725304789a48
SHA1

6a6ad72c33e002a1b35007fe20f92e193ec7a08f
SHA256

c42c5cc1230a75f8f6e0729e8054cc212ae8eb237e157d4be3108c610b6fdb35
SHA512

bab72f7bb01feaaf67768e096b94a0f5fba6615f8ced96e49bf6f876da4700821ca91c3f4dd469f2ebfc45677df745f98ed284e0c6354663e120c2251aa9a7a9
SSDEEP

6144:BperJRwEh2KyXzKXOtjBmfsNH5SoKZ2Ok37jOrgpxuLeMGL6KX3UW:c0Eh8XeetjsfoCRk3fHxAs+K3U

Score

N/A

Malware Config

Signatures

Files

c42c5cc1230a75f8f6e0729e8054cc212ae8eb237e157d4be3108c610b6fdb35
.exe windows x86

4a2fa7abc9171dba8ae43d97100eb6aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCurrentThreadId
WaitForSingleObject
Sleep
GetVersion
GetVersionExW
GetCurrentProcessId
WaitForMultipleObjects
DuplicateHandle
SetEvent
OpenMutexW
LocalFree
LocalAlloc
GetModuleHandleA
lstrcmpA
GetCurrentThread
GetTickCount
GetModuleFileNameW
GetTempPathW
GetTempFileNameW
CreateEventW
InitializeCriticalSection
CreateSemaphoreW
lstrcpynA
lstrlenA
GetFullPathNameA
GetFileAttributesA
lstrcpynW
lstrlenW
GetFileAttributesW
MultiByteToWideChar
GetModuleHandleW
ExpandEnvironmentStringsW
FreeLibrary
LoadLibraryW
SetErrorMode
GetCurrentProcess
CreateMutexW
GetLastError
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
QueryPerformanceCounter
GetVersionExA
GetProcessHeap
RaiseException
SetUnhandledExceptionFilter
TlsAlloc
ExitProcess
HeapCreate
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStartupInfoA
GetEnvironmentStringsW
GetLocalTime
GetProcAddress

user32

MessageBoxW
PeekMessageW
DefWindowProcA
GetMenu
SetWindowPos
CreatePopupMenu
GetClassInfoExA
SendDlgItemMessageW
GetMenuItemRect
RegisterWindowMessageW
GetCapture
MessageBoxA
GetCaretPos
MessageBoxIndirectA
SetCursor
mouse_event
SendMessageW
GetSubMenu
CharPrevW
GetAsyncKeyState
GetMessageA
GetMenuItemID
OpenClipboard
LoadBitmapW
CharLowerW
GetClassInfoA
GetDlgItemTextW
DialogBoxIndirectParamW

advapi32

RegQueryValueExA
RegOpenKeyA
FreeSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
RegEnumKeyW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegDeleteKeyW
RegDeleteKeyA
EqualSid

shell32

SHGetDesktopFolder
ShellExecuteExW
ord680

ole32

CoUninitialize
CoInitializeEx

security

SealMessage
CompleteAuthToken

gdi32

CreatePalette
CreateEllipticRgn
TranslateCharsetInfo
GetRasterizerCaps
CreateColorSpaceA
CreateFontW
CreateRoundRectRgn
GetTextExtentPointW
SelectBrushLocal

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.FTPE
Size: 2KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.s
Size: 1024B - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.i
Size: 92KB - Virtual size: 127KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.j
Size: 5KB - Virtual size: 370KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kLjQcb
Size: 1KB - Virtual size: 469KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TEURV
Size: 124KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a2fa7abc9171dba8ae43d97100eb6aa

Headers

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

security

gdi32

Sections

.text Size: 11KB - Virtual size: 12KB

.rdata Size: 3KB - Virtual size: 17KB

.FTPE Size: 2KB - Virtual size: 180KB

.s Size: 1024B - Virtual size: 268KB

.i Size: 92KB - Virtual size: 127KB

.j Size: 5KB - Virtual size: 370KB

.kLjQcb Size: 1KB - Virtual size: 469KB

.data Size: 6KB - Virtual size: 383KB

.TEURV Size: 124KB - Virtual size: 135KB

.rsrc Size: 8KB - Virtual size: 8KB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 11KB - Virtual size: 12KB

.rdata
Size: 3KB - Virtual size: 17KB

.FTPE
Size: 2KB - Virtual size: 180KB

.s
Size: 1024B - Virtual size: 268KB

.i
Size: 92KB - Virtual size: 127KB

.j
Size: 5KB - Virtual size: 370KB

.kLjQcb
Size: 1KB - Virtual size: 469KB

.data
Size: 6KB - Virtual size: 383KB

.TEURV
Size: 124KB - Virtual size: 135KB

.rsrc
Size: 8KB - Virtual size: 8KB

.reloc
Size: 1KB - Virtual size: 4KB