cdd5b3c7e1be38ed611cf97832b4d5f69e8d1e60bf4e11eee45490b3d0b0800d

Sharing

Copy URL Twitter E-mail

General

Target

cdd5b3c7e1be38ed611cf97832b4d5f69e8d1e60bf4e11eee45490b3d0b0800d
Size

240KB
MD5

cc57db078d6e05973ac9f07022c156ef
SHA1

8e2aa1783bf07646fea7cd8e73b6383837aa2fed
SHA256

cdd5b3c7e1be38ed611cf97832b4d5f69e8d1e60bf4e11eee45490b3d0b0800d
SHA512

a11a759835f8bf4bb46c3ee5fb66055e26ef0e1f31e0204c721ee1c1421ce2a7a726523854c82e0b29040f5ce000b68f7c7c1bb25b55ea97cef6306f96a1bc57
SSDEEP

3072:Hooq6ZDr6Wa2uNnAmAHtFnWOg1aNeR7TyE5I+LhUfZXXViXTMsSMGXzdppETntw0:HoV27FnFyacR7TVI+0ZXXV6obDdYM0Z

Score

N/A

Malware Config

Signatures

Files

cdd5b3c7e1be38ed611cf97832b4d5f69e8d1e60bf4e11eee45490b3d0b0800d
.exe windows x86

0ad0dc94f42ca531e2e0412a86766a2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetSpecialFolderPathA
SHFileOperationA

shlwapi

PathIsDirectoryA
PathRemoveExtensionA
PathFindExtensionA
PathFindFileNameA
SHDeleteValueA
PathAppendA
SHDeleteKeyA
PathFileExistsA
SHGetValueA

iphlpapi

GetAdaptersInfo

kernel32

GetFullPathNameA
GlobalGetAtomNameA
GetModuleFileNameW
InterlockedDecrement
WritePrivateProfileStringA
GetCurrentDirectoryA
GlobalFlags
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
lstrcmpW
GlobalFindAtomA
SetErrorMode
GetCPInfo
GetOEMCP
GetFileInformationByHandle
PeekNamedPipe
GetThreadLocale
ExitProcess
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetStdHandle
SetHandleCount
GetStdHandle
GetACP
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetTimeZoneInformation
GetDriveTypeA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcessId
GlobalAddAtomA
GlobalFree
GlobalUnlock
FormatMessageA
LocalFree
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
GlobalLock
lstrcmpA
GlobalAlloc
GlobalDeleteAtom
GetModuleHandleA
lstrcpyA
WaitForSingleObject
FreeLibrary
GetVersion
CompareStringA
InterlockedExchange
MultiByteToWideChar
CompareStringW
lstrlenA
RemoveDirectoryA
TerminateProcess
OpenProcess
Sleep
CreateMutexA
MoveFileExA
GetTempPathA
DeleteFileA
GetShortPathNameA
GetModuleFileNameA
GetCurrentProcess
SetPriorityClass
DeviceIoControl
GetLastError
GetVolumeInformationA
GetComputerNameA
lstrcatA
lstrcmpiA
SetLastError
GetVersionExA
CloseHandle
ReadFile
GetFileSize
CreateFileA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
GetProcAddress
LoadLibraryA
GetFileType

user32

GetSysColorBrush
UnregisterClassA
DestroyMenu
ShowWindow
LoadIconA
WinHelpA
GetClassLongA
SetPropA
GetPropA
RemovePropA
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSysColor
ReleaseDC
GetDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
LoadCursorA
GetCapture
ClientToScreen
UnhookWindowsHookEx
GetSystemMetrics
RegisterWindowMessageA
MessageBoxA
PostMessageA
GetDesktopWindow
GetWindow
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
SetCursor
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetWindowTextA
FindWindowExA
SendMessageTimeoutA
EnumWindows
GetWindowThreadProcessId
PostQuitMessage
ValidateRect
GetCursorPos
PeekMessageA
GetKeyState
SendMessageA
IsWindowVisible
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA

gdi32

SetMapMode
GetClipBox
DeleteDC
GetStockObject
SetTextColor
SetBkColor
RestoreDC
SaveDC
DeleteObject
CreateBitmap
GetDeviceCaps
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegCreateKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA

ole32

CoGetMalloc
StringFromIID

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0ad0dc94f42ca531e2e0412a86766a2f

Headers

File Characteristics

Imports

shell32

shlwapi

iphlpapi

kernel32

user32

gdi32

winspool.drv

advapi32

ole32

oleaut32

Sections

.text Size: 176KB - Virtual size: 175KB

.rdata Size: 48KB - Virtual size: 44KB

.data Size: 8KB - Virtual size: 35KB

.rsrc Size: 4KB - Virtual size: 176B

.text
Size: 176KB - Virtual size: 175KB

.rdata
Size: 48KB - Virtual size: 44KB

.data
Size: 8KB - Virtual size: 35KB

.rsrc
Size: 4KB - Virtual size: 176B