c2ec3682ec2e71d46a87d2efba0be9b6

Sharing

Copy URL Twitter E-mail

General

Target

c2ec3682ec2e71d46a87d2efba0be9b6
Size

206KB
MD5

c2ec3682ec2e71d46a87d2efba0be9b6
SHA1

70e4b490f24de01addefa1f2a4b5c1b6db9a0e67
SHA256

84518fcd1a2391e4257f37c26f33b66a20e916bc2a077b1426d8a373727a50cd
SHA512

528471aa33f22b27fedf0b004790829bcea3a73e9dec506c1a27a1d32db96e35e14c0be506fc2ee2529af57449bae7bc3dcae15d9e07e8e847addb7863de1bae
SSDEEP

6144:jdH6+QtYhrWQmwD0VeZu63RigCYSwZqf/joE0:jV6+QtYhKQmk2eZpRigCWq3UE0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c2ec3682ec2e71d46a87d2efba0be9b6

Files

c2ec3682ec2e71d46a87d2efba0be9b6
.dll windows:4 windows x86 arch:x86

0dd2f03c02122b83704837417f528d3a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

user32

GetWindowPlacement
EnableMenuItem
LoadImageW
KillTimer
CharLowerW
CallNextHookEx
CheckMenuItem
PostMessageW
CharNextA
SetWindowLongA
wsprintfW
DefWindowProcW
ReleaseDC
GetSubMenu
SetScrollPos
DrawTextExW
IsDialogMessageW
LoadStringW
LoadBitmapA
DispatchMessageW
RegisterClassExW
GetMenuState
SendDlgItemMessageW
SetWinEventHook
MessageBoxW
GetMessageW
SetPropW
TranslateAcceleratorW
ChildWindowFromPoint
GetCapture
GetFocus
IsDlgButtonChecked
CharUpperW
PtInRect
ScreenToClient
GetLastActivePopup
EnableWindow
SetActiveWindow
CreateDialogParamW
GetDlgCtrlID
GetDlgItem
DefWindowProcA
GetClientRect
GetDlgItemTextW
SendMessageW
DestroyWindow
IsWindowEnabled
WinHelpW
SetForegroundWindow
GetDesktopWindow
LoadIconA
SetWindowLongW
CreateWindowExW
LoadCursorW
PeekMessageW
UpdateWindow
UnregisterClassA
GetSystemMenu
SetWindowTextW
CreatePopupMenu
SetWindowPlacement
GetForegroundWindow
UnhookWinEvent
SetCursor
OpenClipboard
CloseClipboard
SetWindowTextA
GetMenuItemCount
GetCursorPos
LoadIconW
GetWindowTextW
GetWindowLongW
BringWindowToTop
RegisterWindowMessageW
ValidateRect
IsClipboardFormatAvailable
MessageBeep
GetDC
GetSystemMetrics
IsWindow
DestroyMenu
BeginPaint
PeekMessageA
GetParent
PostQuitMessage
CharNextW
TranslateMessage
ShowWindow
TrackPopupMenu
InvalidateRect
EndDialog
GetMenu
GetKeyboardLayout
DialogBoxParamW
IsIconic
LoadAcceleratorsW
MoveWindow
SetFocus
RegisterWindowMessageA
SetDlgItemTextW

gdi32

GetTextMetricsW
SetMapMode
TextOutW
GetDeviceCaps
GetObjectW
StartDocW
EndPage
CreateDCW
CreateFontIndirectW
EndDoc
SelectObject
EnumFontsW
GetTextFaceW
SetViewportExtEx
SetWindowExtEx
AbortDoc
DeleteObject
LPtoDP
GetStockObject
SetBkMode
SetAbortProc
GetTextExtentPoint32W
StartPage
DeleteDC

comdlg32

GetSaveFileNameW
FindTextW
ReplaceTextW
PageSetupDlgW
CommDlgExtendedError
PrintDlgExW
GetOpenFileNameW
ChooseFontW
GetFileTitleW

kernel32

GetLocalTime
DebugBreak
LocalFree
SetEndOfFile
GetThreadLocale
GetCurrentThreadId
FindFirstFileW
GetVersion
LoadLibraryW
SetFileAttributesA
GetEnvironmentStringsW
HeapFree
MapViewOfFile
lstrcpyW
GetCommandLineW
CompareStringW
CreateFileW
DeviceIoControl
FoldStringW
GetEnvironmentVariableA
GetFileAttributesW
CreateFileMappingW
lstrcmpW
GetFileSize
TerminateProcess
MultiByteToWideChar
GetEnvironmentStrings
DeleteFileW
Sleep
GetSystemTimeAsFileTime
LocalSize
GetCurrentProcess
WriteConsoleA
HeapCreate
CloseHandle
GetVersionExA
GetProcessHeap
lstrcmpiW
EnterCriticalSection
FormatMessageA
LoadResource
GetLastError
SetEvent
GlobalLock
TlsFree
GetCommandLineA
SetUnhandledExceptionFilter
SizeofResource
GetModuleFileNameW
GetModuleHandleA
GetTimeFormatW
GetTickCount
lstrcpynA
ReadFile
MulDiv
CreateMutexA
OpenMutexA
lstrcatW
VirtualProtect
LocalAlloc
GetModuleFileNameA
GetUserDefaultLCID
FreeEnvironmentStringsW
CompareStringA
InterlockedExchange
WideCharToMultiByte
GetStringTypeW
InterlockedDecrement
ExitProcess
RtlUnwind
CreateFileA
LocalUnlock
FormatMessageW
IsValidCodePage
CreateThread
GetDateFormatW
GetLocaleInfoA
GetEnvironmentVariableW
GetStartupInfoA
lstrlenW
GetCurrentProcessId
LocalReAlloc
GetTempFileNameW
LocalLock
DeleteCriticalSection
HeapSize
GetModuleHandleW
lstrcpynW
SetFileAttributesW
LeaveCriticalSection
FlushFileBuffers
GetFileInformationByHandle
LoadLibraryExW
SetLastError
GlobalFree
UnmapViewOfFile
CreateEventA
LoadLibraryA
GetProcAddress
GlobalUnlock
UnhandledExceptionFilter
GetOEMCP
GetLocaleInfoW
FindClose
SetStdHandle
WriteFile
GetACP
FreeLibrary
GetFileType
GetUserDefaultUILanguage
QueryPerformanceCounter

msvcrt

_adjust_fdiv
_initterm
exit
wcsncmp
iswctype
fclose
wcsncpy
_CxxThrowException
__setusermatherr
__getmainargs
_purecall
_exit
??2@YAPAXI@Z
_controlfp
_XcptFilter
_snwprintf
__p__fmode
??0exception@@QAE@XZ
calloc
_acmdln
_cexit
_wtol
__p__commode
_wcsicmp
_c_exit
localtime
_amsg_exit
time
__set_app_type

advapi32

RegCreateKeyW
RegQueryValueExW
RegSetValueExW
RegQueryValueExA
IsTextUnicode
RegOpenKeyExA
RegCloseKey

shell32

DragQueryFileW
DragAcceptFiles
DragFinish
ShellAboutW

comctl32

CreateStatusWindowW

winspool.drv

OpenPrinterW
ClosePrinter
GetPrinterDriverW

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 314B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0dd2f03c02122b83704837417f528d3a

Headers

File Characteristics

Imports

user32

gdi32

comdlg32

kernel32

msvcrt

advapi32

shell32

comctl32

winspool.drv

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 98KB - Virtual size: 98KB

.data Size: 24KB - Virtual size: 26KB

.reloc Size: 512B - Virtual size: 314B

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 98KB - Virtual size: 98KB

.data
Size: 24KB - Virtual size: 26KB

.reloc
Size: 512B - Virtual size: 314B

.rsrc
Size: 3KB - Virtual size: 2KB