e2cc8ea5c79e24a4349aa8c5054eb0135144be9f557ce2b33f44f5a51c056d0a

Sharing

Copy URL Twitter E-mail

General

Target

e2cc8ea5c79e24a4349aa8c5054eb0135144be9f557ce2b33f44f5a51c056d0a
Size

2.9MB
MD5

7cf91fb014f37a525b1b1d15cee54c96
SHA1

b4c48ddd93d7ba511069d757d24fe60946dc5b64
SHA256

e2cc8ea5c79e24a4349aa8c5054eb0135144be9f557ce2b33f44f5a51c056d0a
SHA512

51fc7e932680580e5f5b640be30858250dbc89106b29dada384cdadfad29630c6a8f848062060c8a452466bd1222e4b8fd6e71ce2daa1a49008e4577c7924925
SSDEEP

49152:efwXPcSxFuzCQzY629Ufco3SW+UIVX2g5tpkbp:tXdFnMYFo3SWQoatpk

Score

1^/10

Malware Config

Signatures

Files

e2cc8ea5c79e24a4349aa8c5054eb0135144be9f557ce2b33f44f5a51c056d0a
.exe windows x86

54de2633b5c2c93c781a8f880b1c02f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InterlockedExchange
lstrcpyA
FindResourceExW
GetWindowsDirectoryA
GetNumberFormatA
GetCurrentDirectoryA
GetTempFileNameA
GetTempPathA
GetTickCount
SearchPathA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapValidate
IsBadReadPtr
RtlUnwind
RaiseException
EncodePointer
DecodePointer
SetStdHandle
GetFileType
VirtualAlloc
GetSystemInfo
VirtualQuery
CreateThread
ExitThread
ExitProcess
GetSystemTimeAsFileTime
GetStdHandle
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
IsValidCodePage
IsProcessorFeaturePresent
GetConsoleCP
GetConsoleMode
LCMapStringW
GetStringTypeW
CompareStringW
GetTimeZoneInformation
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetOEMCP
GetCPInfo
GetACP
GlobalFlags
FileTimeToSystemTime
GetModuleHandleW
InterlockedIncrement
GetProfileIntA
VirtualProtect
CompareStringA
GetVersionExA
lstrcmpW
GlobalAddAtomA
GlobalFindAtomA
GetCurrentThread
FindResourceA
FreeResource
lstrcmpA
GetCurrentThreadId
GetCurrentProcessId
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
InitializeCriticalSection
ResumeThread
SetThreadPriority
InterlockedDecrement
GetModuleFileNameW
ReleaseActCtx
MulDiv
GlobalFree
lstrlenW
CopyFileA
GlobalSize
GlobalAlloc
GlobalLock
GlobalUnlock
GetFileAttributesExA
GetFileTime
GetFileSizeEx
GetFileAttributesA
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
WaitForSingleObject
GetAtomNameA
GlobalGetAtomNameA
GetModuleHandleA
MultiByteToWideChar
GetModuleFileNameA
lstrcmpiA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetFileSize
SetEndOfFile
UnlockFile
LockFile
CloseHandle
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
GetHandleInformation
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
FindResourceW
ActivateActCtx
LoadLibraryW
DeactivateActCtx
SetLastError
FormatMessageA
LocalAlloc
LocalFree
FreeLibrary
GetLastError
lstrlenA
GetLocaleInfoA
GetUserDefaultUILanguage
GlobalDeleteAtom
LoadLibraryA
GetProcAddress
Sleep
QueryPerformanceCounter
QueryPerformanceFrequency

user32

IsDialogMessageA
SetWindowTextA
MoveWindow
GetAsyncKeyState
SetRectEmpty
SetCursor
ReleaseCapture
GetKeyNameTextA
MapVirtualKeyA
DestroyMenu
SystemParametersInfoA
ReuseDDElParam
UnpackDDElParam
DestroyIcon
LoadImageA
GetClipboardFormatNameA
RealChildWindowFromPoint
EnumDisplayMonitors
SetLayeredWindowAttributes
MessageBeep
GetIconInfo
CopyImage
DrawIconEx
LoadAcceleratorsW
DestroyAcceleratorTable
CreateAcceleratorTableA
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
SetCursorPos
SetClassLongA
IsCharLowerA
MapVirtualKeyExA
MonitorFromPoint
UpdateLayeredWindow
OffsetRect
WaitMessage
LoadImageW
SetClipboardData
CloseClipboard
EmptyClipboard
RegisterClipboardFormatA
PtInRect
CopyIcon
IsRectEmpty
CharUpperBuffA
DefFrameProcA
TranslateMDISysAccel
DefMDIChildProcA
IsClipboardFormatAvailable
GetDoubleClickTime
DestroyCursor
SetRect
InflateRect
IntersectRect
UnionRect
SubtractRect
GetScrollInfo
SetScrollInfo
WinHelpA
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
CreateDialogIndirectParamA
GetDlgItem
GetSysColor
GetKeyState
CallNextHookEx
GetCursorPos
SetWindowsHookExA
MessageBoxA
IsWindowEnabled
GetWindowThreadProcessId
LoadIconW
LoadCursorW
PostThreadMessageA
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
GetWindowLongA
EnableWindow
NotifyWinEvent
GetForegroundWindow
SetForegroundWindow
HideCaret
OpenClipboard
WindowFromPoint
GetParent
IsChild
GetLastActivePopup
GetWindow
GetTopWindow
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
GetFocus
SetCapture
GetCapture
SetActiveWindow
GetActiveWindow
KillTimer
SetTimer
EnableScrollBar
RedrawWindow
LockWindowUpdate
ShowOwnedPopups
IsWindowVisible
ValidateRect
InvalidateRect
GetUpdateRect
ReleaseDC
GetWindowDC
GetDC
ScreenToClient
ClientToScreen
MapWindowPoints
GetClientRect
GetWindowRect
BringWindowToTop
GetWindowRgn
SetWindowRgn
IsZoomed
IsIconic
GetSystemMenu
DrawMenuBar
UnhookWindowsHookEx
LoadMenuW
LoadMenuA
SetMenuItemBitmaps
RemoveMenu
ModifyMenuA
InsertMenuItemA
InsertMenuA
GetSubMenu
GetMenuItemInfoA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuA
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
GrayStringA
DrawTextExA
DrawTextA
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateA
DrawIcon
InvertRect
FrameRect
FillRect
LoadBitmapW
GetSysColorBrush
TabbedTextOutA
PostMessageA
SendMessageA
IsWindow
MapDialogRect
PeekMessageA
GetSystemMetrics
CharUpperA
GetDesktopWindow
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
LoadIconA
LoadCursorA
RegisterClassExA
CreateWindowExA
ShowWindow
UpdateWindow
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
EndDialog
GetMenuCheckMarkDimensions
CheckDlgButton
GetClassInfoExA
GetClassInfoA
RegisterClassA
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoA
SetFocus
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
SetParent
ScrollWindow
CallWindowProcA

msimg32

TransparentBlt
AlphaBlend

comctl32

ImageList_GetIconSize

shlwapi

PathRemoveFileSpecW
PathFindFileNameA
PathFindExtensionA
PathStripToRootA
PathIsUNCA
UrlUnescapeA

wininet

HttpQueryInfoA
InternetQueryDataAvailable
InternetReadFile
InternetGetLastResponseInfoA
InternetWriteFile
InternetSetFilePointer
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetSetOptionExA
InternetSetStatusCallback

oleacc

CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdiplusShutdown
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipAlloc
GdipDeleteGraphics
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDisposeImage
GdipFree
GdipCloneImage
GdipCreateFromHDC

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundA

gdi32

CreateBitmap
CreateFontIndirectA
CreateCompatibleBitmap
CreatePatternBrush
GetPaletteEntries
SetPaletteEntries
GetNearestPaletteIndex
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreatePolygonRgn
CreateRoundRectRgn
SetRectRgn
CombineRgn
OffsetRgn
GetRgnBox
CreateHatchBrush
CreateSolidBrush
CreatePen
GetObjectType
GetStockObject
GetObjectA
ExtTextOutA
SelectObject
GetDeviceCaps
CreatePalette
PtInRegion
CreateDCA
SetDIBColorTable
CreateDIBSection
GetSystemPaletteEntries
EnumFontFamiliesExA
CreateDIBitmap
GetTextCharsetInfo
EnumFontFamiliesA
ExtSelectClipRgn
DeleteObject
SetLayout
GetLayout
RealizePalette
GetBkColor
SetTextAlign
LineTo
MoveToEx
IntersectClipRect
ExcludeClipRect
SelectClipRgn
GetClipBox
ScaleWindowExtEx
GetTextColor
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
FillRgn
FrameRgn
PtVisible
RectVisible
Polyline
Ellipse
Polygon
Rectangle
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
ExtFloodFill
TextOutA
GetTextExtentPoint32A
GetTextFaceA
GetTextMetricsA
Escape
GetBoundsRect
SetPixelV
CopyMetaFileA
DeleteDC
CreateCompatibleDC
SaveDC
RestoreDC
SelectPalette
SetBkColor
SetBkMode
SetPolyFillMode
SetROP2
SetTextColor
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

comdlg32

GetFileTitleA

advapi32

RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
OpenThreadToken
SetThreadToken
RevertToSelf

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListA
ShellExecuteA
SHBrowseForFolderA
SHAppBarMessage

ole32

OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
StringFromCLSID
CoTaskMemFree
OleDuplicateData
DoDragDrop
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoInitializeEx
CoCreateInstance
ReleaseStgMedium
RevokeDragDrop
CoTaskMemAlloc

oleaut32

VariantInit
SysAllocStringLen
SysStringLen
VariantChangeType
VariantClear
SysFreeString
VarBstrFromDate
SysAllocString
VariantTimeToSystemTime
SystemTimeToVariantTime

Sections

.text
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 356KB - Virtual size: 356KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 211KB - Virtual size: 210KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

54de2633b5c2c93c781a8f880b1c02f6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msimg32

comctl32

shlwapi

wininet

oleacc

gdiplus

imm32

winmm

gdi32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 2.1MB - Virtual size: 2.1MB

.rdata Size: 356KB - Virtual size: 356KB

.data Size: 21KB - Virtual size: 52KB

.rsrc Size: 211KB - Virtual size: 210KB

.reloc Size: 222KB - Virtual size: 222KB

.text
Size: 2.1MB - Virtual size: 2.1MB

.rdata
Size: 356KB - Virtual size: 356KB

.data
Size: 21KB - Virtual size: 52KB

.rsrc
Size: 211KB - Virtual size: 210KB

.reloc
Size: 222KB - Virtual size: 222KB