ca8ba58401732473b7faeece853643fad4428b6ef40375188fed0ead99958ad4

General

Target

ca8ba58401732473b7faeece853643fad4428b6ef40375188fed0ead99958ad4
Size

62KB
MD5

5c41c266190101524fe2dee93d244dd5
SHA1

febf26b6c0cd7550471a784258d5789e9da78f83
SHA256

ca8ba58401732473b7faeece853643fad4428b6ef40375188fed0ead99958ad4
SHA512

141a8ab9633b2d3f624e93a99ff11d704d9f3977bcbadd7e3567e818b2892e233232bde6793c71313d4c615692361363562e77544cde8a6b201110ed5bd12481
SSDEEP

1536:wEely6b3Ni7rHZYyQhc75I+w+3DXZx7RaWt8:wFkMMrqLclmQJ1Ni

Score

N/A

Malware Config

Signatures

Files

ca8ba58401732473b7faeece853643fad4428b6ef40375188fed0ead99958ad4
.exe windows x86

72bb6a82118345837c7f0cb028f3875a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetThreadDesktop
GetKeyState
GetMessageA
LoadCursorA
GetCursorPos
DrawIcon
PeekMessageA
DispatchMessageA
GetKeyboardState
GetDlgItem
SendMessageA
GetIconInfo
GetWindowThreadProcessId
OpenDesktopA
SetProcessWindowStation
GetClassNameA
OpenWindowStationA

kernel32

VirtualProtect
GetAtomNameW
MulDiv
GetFileAttributesA
GetFileAttributesW
GetTimeZoneInformation
VirtualAlloc
OpenMutexW
WaitForSingleObject
MultiByteToWideChar
GetModuleHandleA
CreateFileA
EnterCriticalSection
GlobalUnlock
GetModuleFileNameA
GetEnvironmentVariableW
SystemTimeToFileTime
LeaveCriticalSection
GetUserDefaultUILanguage
GetSystemTime
CopyFileW
GetTickCount
SetFilePointer
lstrcpynW
GetLastError
GlobalLock
GetLocalTime

advapi32

DuplicateTokenEx
RegQueryValueExA
CryptHashData
CryptCreateHash
RegCreateKeyExA
RegEnumKeyExA
RegCloseKey
RegSetValueExA
CryptReleaseContext

shlwapi

PathCombineW
PathRemoveFileSpecW
PathFindFileNameW
StrCmpNIA
wvnsprintfA
StrStrW
wnsprintfA
SHDeleteKeyA
PathMatchSpecW
StrCmpNIW

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

72bb6a82118345837c7f0cb028f3875a

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

shlwapi

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 20KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 20KB