2ccdbe2d0cf5cc1618e44310f054d8af

Sharing

Copy URL Twitter E-mail

General

Target

2ccdbe2d0cf5cc1618e44310f054d8af
Size

97KB
MD5

2ccdbe2d0cf5cc1618e44310f054d8af
SHA1

4ad9e3c08cc86e1e1ed6a169d6cb25553a2e1a2e
SHA256

2cb1a986f9bb6ec86a9c48c10d6112917d79c67e07972636a52862af2c3ff29c
SHA512

108a1f781caaa2b6ea2a537654123ce2d186936bc7812727a30a241152b38ce5f236242360109f3e76b9afc24316cfc39d6a223e928a511fa6464b6a87426f32
SSDEEP

1536:NvKQ13A/S+Ek6twyio1BXHRmW90mo9pw/u5N+lgetpjbE37hhOmKu:5Zi/F36twyB1HAWxp/u5N+lltpXELxKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2ccdbe2d0cf5cc1618e44310f054d8af

Files

2ccdbe2d0cf5cc1618e44310f054d8af
.exe windows:5 windows x86 arch:x86

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_controlfp
calloc
floor
wcschr
towlower
__set_app_type
strchr
__p__fmode
qsort
iswxdigit
iswalpha
__p__commode
wcsncmp
free
towupper
fputs
getenv
clock
swprintf
putchar
puts
mbtowc
iswspace
tolower
_amsg_exit
printf
_initterm
_ismbblead
_XcptFilter
strncmp
remove
strtol
wcslen
_exit
_cexit
isspace
strcpy
__setusermatherr
strncpy
iswdigit
iswctype
malloc
__getmainargs
swscanf

user32

GetMenuItemInfoW
GetLastActivePopup
FindWindowExA
HideCaret
GetUserObjectInformationW
EqualRect
TranslateAcceleratorW
ChildWindowFromPoint
TileWindows
LoadMenuA
EnableScrollBar
GetMenuItemCount
FindWindowA
MessageBoxExW
InSendMessage
MonitorFromPoint
GetWindow
ShowScrollBar
LoadImageA
DialogBoxIndirectParamA
MapVirtualKeyA
RemovePropW
GetUpdateRgn
RegisterClassA
SetDlgItemTextA
DrawMenuBar
GetMenu
PostMessageW
GetDlgCtrlID
VkKeyScanW
GetIconInfo
MapWindowPoints
CharNextW
SendMessageTimeoutA
CharLowerBuffW
GetWindowLongW
WaitForInputIdle
MapVirtualKeyExW
CheckRadioButton
AllowSetForegroundWindow
MessageBoxA
GetMessageA
SetMenuDefaultItem
MessageBoxW
GetMenuStringW
LoadMenuW
GetSystemMetrics
SendMessageA
GetMenuState
DrawIcon
DestroyCursor
AdjustWindowRect
GetSysColor
HiliteMenuItem
AppendMenuW
CheckMenuRadioItem
LoadStringW
ScrollWindow
CharPrevW
SetSysColors
GetDlgItem
SetMenuItemBitmaps
GetDesktopWindow
GetParent
EndTask
CreateMenu
GetCaretPos
SendMessageW
InsertMenuItemW
CreatePopupMenu
GetMonitorInfoW
MapVirtualKeyW
FrameRect
EnableMenuItem
UnloadKeyboardLayout
WindowFromPoint
DrawAnimatedRects
ScrollWindowEx
SetRect
SetDlgItemInt
BeginPaint
CreateIconIndirect
SetMenuItemInfoW
SetScrollInfo
CharToOemA
SendNotifyMessageW
GetClassNameW
TranslateAcceleratorA
ShowCursor
SetWindowTextA
CharLowerA
InsertMenuW
AppendMenuA
GetWindowDC
SetRectEmpty
GetSysColorBrush
ShowWindow
ChangeMenuW
OemToCharA
IsCharAlphaW
SystemParametersInfoW
RegisterClassW
ShowWindowAsync
wsprintfA
SetWindowLongW
SwitchToThisWindow
wsprintfW
IsDialogMessageA
GetKeyboardType
EnumChildWindows

gdi32

CreateRectRgnIndirect
CreateBrushIndirect
PtVisible
SelectPalette
CreateDIBitmap
ResizePalette
MoveToEx
CreateFontIndirectA
Ellipse
DeleteDC
ExtTextOutW
CreateBitmap
RectVisible
Escape
SetDIBColorTable
OffsetViewportOrgEx
GetBitmapBits
DeleteObject
CreateHatchBrush
CreatePolygonRgn
CombineRgn
SetBitmapBits
PolyBezier
SetAbortProc
OffsetRgn
WidenPath
CreateSolidBrush
GetTextMetricsA
GetPaletteEntries
CreateICW
SelectClipRgn
SetBitmapDimensionEx
SetBrushOrgEx
SelectObject
GetTextExtentPoint32A
FillRgn
CreateEllipticRgnIndirect
GetPixel
GetStockObject
GetCurrentObject
GetROP2
CreateRectRgn
StartDocW
BitBlt
BeginPath
RealizePalette

kernel32

FindFirstFileW
LeaveCriticalSection
DeleteFileA
InitializeCriticalSection
CallNamedPipeW
SetErrorMode
GetTempFileNameA
CreateWaitableTimerW
FindFirstFileA
HeapLock
RemoveDirectoryW
CreateFileMappingW
LocalSize
GetShortPathNameA
GetModuleHandleW
WriteFile
GlobalSize
CreateSemaphoreW
GetFileAttributesExW
ResetEvent
SleepEx
lstrcpynW
CreateEventA
GetSystemDirectoryW
VerSetConditionMask
LoadLibraryExW
TlsGetValue
IsBadReadPtr
GetShortPathNameW
GetUserDefaultLangID
LocalLock
ConvertDefaultLocale
GetLocaleInfoA
CreateMutexW
SetFileApisToOEM
EscapeCommFunction
SetThreadContext
MoveFileExA
GetThreadLocale
UnlockFile
AddAtomW
GetSystemTimeAdjustment
WaitForMultipleObjects
GetTempPathA
GetFileSize
lstrcmpiW
GlobalFree
CreateFileMappingA
OpenFile

comdlg32

PrintDlgExW
PageSetupDlgW
ChooseColorW
GetFileTitleW
GetSaveFileNameA

shlwapi

PathFileExistsA

Exports

Exports

?HideKeyboardNew@@YGXD<V

Sections

.text
Size: 71KB - Virtual size: 71KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 135KB - Virtual size: 195KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

750ee104af3acee00859b8fd97bc3610

Headers

File Characteristics

Imports

msvcrt

user32

gdi32

kernel32

comdlg32

shlwapi

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 71KB

.data Size: 135KB - Virtual size: 195KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 71KB - Virtual size: 71KB

.data
Size: 135KB - Virtual size: 195KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 2KB - Virtual size: 1KB