02eacfbfa21ddc26ecf55bb46a2e2cef0433005fe0be83000146e4a4053ae9cb

General

Target

02eacfbfa21ddc26ecf55bb46a2e2cef0433005fe0be83000146e4a4053ae9cb
Size

496KB
MD5

7508e414afdf556eede964e8c5d2bce0
SHA1

bca6fc7920e2c5c9a85cdc158054c4e397d097af
SHA256

02eacfbfa21ddc26ecf55bb46a2e2cef0433005fe0be83000146e4a4053ae9cb
SHA512

e37a5798a81f307e3368dd68d8ce053a84d28820812463349d11687db86f5f3c58c8ca7e8619d6aa93642bf9286e4d0b0beaceb45fb9f0cd10c71e9e8d15560f
SSDEEP

12288:CKY71Cw/rGvk+QdmAo4E5UqNAKk4Rb7Uh+7/K7al:PYJ5N3dh3EVN5NXj/3

Score

N/A

Malware Config

Signatures

Files

02eacfbfa21ddc26ecf55bb46a2e2cef0433005fe0be83000146e4a4053ae9cb
.exe windows x86

9b4157691c208e07616ea90bf44575c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIcon
LoadImageA
LoadCursorA
CreateWindowExA
IsCharLowerA
DispatchMessageA
PostMessageA
GetWindowLongA
DialogBoxParamA
IsDialogMessageA
SetFocus
PeekMessageA

wtsapi32

WTSVirtualChannelOpen
WTSVirtualChannelWrite
WTSVirtualChannelClose
WTSWaitSystemEvent
WTSQuerySessionInformationA
WTSSetSessionInformationA
WTSQueryUserToken
WTSEnumerateServersA
WTSVirtualChannelPurgeInput
WTSOpenServerA
WTSEnumerateSessionsA

kernel32

GetProcessTimes
SetEndOfFile
GetTickCount
GetDiskFreeSpaceA
CloseHandle
GetBinaryTypeA
GetConsoleTitleA
CreateEventW
DeviceIoControl
GetProcessHeap
HeapValidate
GetDriveTypeA
GetCurrentDirectoryA
GetAtomNameA
OpenFileMappingW
InterlockedExchange
CreateNamedPipeA
CopyFileA
GetEnvironmentVariableA
GetLogicalDrives
GetSystemInfo
ReplaceFileW
FindResourceA
FileTimeToLocalFileTime
GetProcAddress
GetModuleHandleA
VirtualQueryEx
GetFileType
GetVolumePathNameW
CompareStringA
SetFileAttributesA
CreateMutexA
FormatMessageA
GetFullPathNameA
GetComputerNameW
CreateSemaphoreA
PurgeComm
lstrcpynA

cabinet

FDIIsCabinet
Extract
FCICreate
FCIAddFile
FCIDestroy

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b4157691c208e07616ea90bf44575c6

Headers

File Characteristics

Imports

user32

wtsapi32

kernel32

cabinet

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 478KB - Virtual size: 478KB

.data Size: 4KB - Virtual size: 96KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 478KB - Virtual size: 478KB

.data
Size: 4KB - Virtual size: 96KB

.reloc
Size: 2KB - Virtual size: 2KB