c2c9044dcf918a25078c2e39f11dc7ad

Sharing

Copy URL Twitter E-mail

General

Target

c2c9044dcf918a25078c2e39f11dc7ad
Size

130KB
MD5

c2c9044dcf918a25078c2e39f11dc7ad
SHA1

b301f1515f1a240ee2edd50ff5fa40b0f6b0de47
SHA256

bd24aa1e670a10d95347d721881b40b73adbb6fbba8116394cc50e210cc73d3f
SHA512

da22528213650a7fab73f85d655c1a8e2cde88941f277e309d0d3fba065673267bac2649e87afb97ee65ae572f03cf649ca890aae173e922fa47937eec5dec47
SSDEEP

3072:uJrpCjzJGuKZfRGdm/lnmXmnLGhLf5yteEPjjIVW5YPAFHV:QrGzJVu540SmLaqeDQ1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2c9044dcf918a25078c2e39f11dc7ad

Files

c2c9044dcf918a25078c2e39f11dc7ad
.exe windows:5 windows x86 arch:x86

9dfe10b5c68bf7860c606bc3215f5947

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

GetRunningObjectTable
StgSetTimes

kernel32

ExpandEnvironmentStringsA
WritePrivateProfileStructA
GetConsoleScreenBufferInfo
GetFileSize
LoadLibraryA
GetDiskFreeSpaceA
GetModuleFileNameW
LocalFlags
CancelDeviceWakeupRequest
GetWriteWatch
lstrcat
UpdateResourceA
EnumCalendarInfoW
EnumCalendarInfoExA
VirtualAllocEx
EnumSystemCodePagesA
FatalAppExitA
GetLogicalDriveStringsA
ResetEvent
OpenSemaphoreW
GetCurrentThreadId
GetMailslotInfo
GetCurrencyFormatW
lstrcpynA
GetEnvironmentStrings
SetMailslotInfo
EnumCalendarInfoA
SetProcessPriorityBoost
GetProfileStringA
IsBadHugeReadPtr
ConnectNamedPipe
ReadConsoleOutputW
GetSystemTime
SetTimeZoneInformation
GetCompressedFileSizeW
SetNamedPipeHandleState
GetModuleFileNameA
VirtualAlloc
LoadResource
GetSystemTimeAdjustment
IsValidLocale
RequestDeviceWakeup
FillConsoleOutputCharacterA
QueueUserAPC
CreateFileMappingW
GetProcessTimes
WriteFile
LockFileEx
GetStringTypeExW
WaitNamedPipeA
SetErrorMode
TlsFree
SetConsoleMode
GetOEMCP
LCMapStringW
CreateEventA
UnmapViewOfFile
VirtualFree
DisconnectNamedPipe
VirtualLock
HeapCreate
SetSystemTime
SetThreadPriority
CreateSemaphoreW
GetCompressedFileSizeA
CreateFileMappingA
PostQueuedCompletionStatus
UnlockFileEx
WritePrivateProfileStructW
GetTimeFormatW
GetDriveTypeA
GetFileAttributesExA
GetBinaryTypeW
GetCurrentProcessId
ReadConsoleOutputCharacterA
LCMapStringA
RequestWakeupLatency
GetPrivateProfileIntA
GetQueuedCompletionStatus
RemoveDirectoryA
SetMessageWaitingIndicator
GetTempFileNameW
GetModuleHandleA
CreateWaitableTimerA
GetCurrentProcess
GetFileTime
LocalFileTimeToFileTime
ReadConsoleInputA
GetProcessAffinityMask
GetCurrentDirectoryA
FormatMessageA
GetVolumeInformationW
GetDiskFreeSpaceExW
FatalExit
GetBinaryTypeA
WriteProcessMemory
GetStringTypeW
SetCalendarInfoW
GetLongPathNameA
GetStdHandle
GetPrivateProfileIntW
EnumSystemLocalesW
WriteConsoleOutputAttribute
LocalHandle
GetExitCodeProcess
SetConsoleCtrlHandler
GetPrivateProfileSectionA
GetPrivateProfileStructW
GetTickCount
SetConsoleTitleA
HeapDestroy
LockResource
SetFilePointer
GetThreadPriority
GetEnvironmentVariableA
GetNumberFormatW
WaitForSingleObject
IsBadHugeWritePtr
FormatMessageW
GetSystemTimeAsFileTime
EnumCalendarInfoExW
WritePrivateProfileSectionA
SetConsoleTitleW
CreateConsoleScreenBuffer
MoveFileExA
ConvertThreadToFiber
ExpandEnvironmentStringsW
ReadConsoleA
SetWaitableTimer
UnlockFile
BackupWrite
SetEndOfFile
CreateMailslotA
GetLogicalDriveStringsW
GetFileType
GlobalDeleteAtom
GetPriorityClass
OpenWaitableTimerA
OpenFile
SwitchToFiber
CreateThread
FlushConsoleInputBuffer
lstrcatW
DosDateTimeToFileTime
LocalFree
GetThreadLocale
FreeEnvironmentStringsA
ReleaseMutex
lstrcmp
ResumeThread
VirtualProtect
GetProfileIntA
GetProcAddress

shlwapi

UrlApplySchemeW
StrRStrIA
UrlIsW
PathIsUNCA
PathUnquoteSpacesA
PathFindExtensionW

user32

GetClipboardViewer
RegisterClassW
LockWindowUpdate
DrawIcon
GrayStringW
CreateDialogIndirectParamA
SendMessageTimeoutA
CreateMDIWindowW
RemovePropA
DefMDIChildProcW
GetWindowLongA
EnumDisplayDevicesA
GetSysColor
ChildWindowFromPointEx
LoadCursorW
RealChildWindowFromPoint
SetWindowPlacement
GetCursorPos
ChildWindowFromPoint
InflateRect
GetKeyboardLayoutNameA
GetCursorInfo
ChangeDisplaySettingsExA
OpenInputDesktop
DdeReconnect
FillRect
CloseDesktop
DrawTextW
UnionRect
GetMenuCheckMarkDimensions
DrawTextExW
TranslateAcceleratorA
GetKeyNameTextW
CharNextW
LoadBitmapA
FlashWindowEx
RegisterWindowMessageW
ScrollDC
SendDlgItemMessageW
LoadCursorA
EnumDisplaySettingsExW
GetKeyboardLayoutList
SetCaretPos
SetWindowTextA
TranslateAcceleratorW
LoadStringW
GetMenuItemInfoA
LoadAcceleratorsW
CharNextA
GetClientRect
GetMenuState
CharUpperBuffW
OemToCharBuffW
GetTabbedTextExtentW
GetTabbedTextExtentA
GetUserObjectInformationA
IsCharAlphaNumericA
EnumDesktopsA
GetComboBoxInfo
GetClipboardFormatNameA
GetMessageW
DragObject
ImpersonateDdeClientWindow
CreateCaret
SetSystemCursor
ClientToScreen
RegisterClassA
CheckMenuItem
GetKeyboardType
CharLowerBuffW
SetCapture
DdeQueryStringA
WINNLSGetEnableStatus
MapDialogRect
DestroyMenu
GetKeyboardLayoutNameW
InSendMessage
CopyAcceleratorTableW
EnumThreadWindows
UnloadKeyboardLayout
RegisterDeviceNotificationA
SetMenuInfo
DdeDisconnectList
GetSubMenu
SetWindowRgn
ReleaseDC
InSendMessageEx
GetKeyState
GetKBCodePage
SetUserObjectInformationW
RegisterDeviceNotificationW
CopyImage
CreateAcceleratorTableW
SetMenuItemBitmaps
SetLastErrorEx
CharToOemW
FindWindowExW
DefFrameProcW
GetDlgItemTextW
LoadStringA
MapVirtualKeyA
MessageBoxW
BeginPaint
DefDlgProcA
DragDetect
GetClassInfoW
CheckDlgButton
GetWindowTextLengthW
DdeUnaccessData
GetPropA
EnumWindowStationsW
GetListBoxInfo
SendIMEMessageExA
LoadImageA
DdeInitializeA
MonitorFromRect
CharNextExA
EnumDisplaySettingsExA
GetAsyncKeyState
SetMenuItemInfoA
WindowFromPoint
ArrangeIconicWindows
DialogBoxIndirectParamA
GetCursor
SetShellWindow
GetMessageExtraInfo
GetTopWindow
GetScrollPos
CallWindowProcA
SetScrollRange
InsertMenuW
UpdateWindow
DlgDirSelectExA
OpenWindowStationW
SendInput
GetWindowPlacement
CascadeChildWindows
GetThreadDesktop
DdeAbandonTransaction
EnumDisplayMonitors
SetClassLongA
GetLastActivePopup
IsCharAlphaW
IsDialogMessageW
DdeAddData
CreateDesktopW
GetMessageA
PeekMessageA
DdeSetQualityOfService
ShowScrollBar
LoadIconA
GetPropW
UnregisterDeviceNotification
MessageBoxA
GetShellWindow
ChangeDisplaySettingsW
EndPaint
PostMessageA
GetWindowContextHelpId
VkKeyScanExW
TileChildWindows
DrawFrame
DrawFrameControl
OpenIcon
EnumDesktopsW
IsZoomed
WinHelpA
SetFocus
ScrollWindowEx
CharLowerA
ValidateRect
LoadMenuIndirectA
MapVirtualKeyW
EnumChildWindows
SendMessageCallbackA
SwitchDesktop
GetMenuItemRect
GetMenuItemID
SetMenuItemInfoW
EnableMenuItem
InvalidateRgn
GetDlgCtrlID
CloseWindow
MsgWaitForMultipleObjects
DdeQueryStringW
DdeEnableCallback

advapi32

GetMultipleTrusteeOperationW
StartServiceCtrlDispatcherA
GetSecurityInfoExA
RegCreateKeyA
CryptGetDefaultProviderW
SetEntriesInAuditListW
BackupEventLogA
CreateServiceW
SetAclInformation
GetSidSubAuthorityCount

Sections

.text
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9dfe10b5c68bf7860c606bc3215f5947

Headers

DLL Characteristics

File Characteristics

Imports

ole32

kernel32

shlwapi

user32

advapi32

Sections

.text Size: 91KB - Virtual size: 90KB

.rdata Size: 36KB - Virtual size: 35KB

.data Size: - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 91KB - Virtual size: 90KB

.rdata
Size: 36KB - Virtual size: 35KB

.data
Size: - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 1KB