bd689ca8479b7dfc5c4fb6fd1cf631784cc2f79a97a741f6b58447771dda90de

Sharing

Copy URL Twitter E-mail

General

Target

bd689ca8479b7dfc5c4fb6fd1cf631784cc2f79a97a741f6b58447771dda90de
Size

104KB
MD5

6fcfe0f28ee6d53e0c4a9ad3393c6150
SHA1

97a5c7aefaa18488a6b87250d900b4309d409940
SHA256

bd689ca8479b7dfc5c4fb6fd1cf631784cc2f79a97a741f6b58447771dda90de
SHA512

96be29a4b70ecfdb712480920715b3be288a03a862851e7a9b6d13c6e7f0d3ecc87807ae3ba8afc2c09322bbd6a34dae233c4c852faf7013eb968d01af388a00
SSDEEP

384:LfoTgyapLTrw2n/vn5Tgo4oDV9aG9y+p30dJHMziGbSrtMbjmeQW+YA:+bOLzVg6MML307M+W+tMbjoz

Score

N/A

Malware Config

Signatures

Files

bd689ca8479b7dfc5c4fb6fd1cf631784cc2f79a97a741f6b58447771dda90de
.exe windows x86

39be525feecb005ad3440c7707824ce4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSQueryUserToken
WTSFreeMemory
WTSEnumerateSessionsA
WTSRegisterSessionNotification
WTSVirtualChannelClose
WTSLogoffSession
WTSVirtualChannelQuery
WTSSendMessageA
WTSUnRegisterSessionNotification
WTSVirtualChannelOpen
WTSSetUserConfigW
WTSCloseServer
WTSQuerySessionInformationA
WTSOpenServerA
WTSEnumerateServersA

untfs

Recover
Format
FormatEx
Extend

shlwapi

UrlIsNoHistoryA
UrlCombineA
UrlCompareA
UrlIsOpaqueA
PathCombineA
UrlGetLocationA
UrlUnescapeA
UrlHashA
UrlCanonicalizeA
UrlIsA
UrlGetPartA
UrlEscapeA
PathCommonPrefixA
UrlCreateFromPathA

dbnmpntw

ConnectionVer
ConnectionWrite
ConnectionClose
ConnectionError
ConnectionRead

kernel32

GetCurrentThreadId
CreateDirectoryA
CompareStringW
CreateMutexA
TlsGetValue
CreateSemaphoreW
IsValidLocale
FoldStringW
HeapCreate
GetCurrentDirectoryA
WriteProcessMemory
GetDateFormatW
CreateNamedPipeW
GetConsoleAliasW
GetProcessHeap
GetTimeFormatA
GetNumberFormatA
LoadLibraryA
GetSystemInfo
SetEnvironmentVariableA
ExpandEnvironmentStringsA
GetEnvironmentVariableA
SleepEx
GetPrivateProfileIntA
GetTickCount
GetDiskFreeSpaceA
GetAtomNameA
CloseHandle
FormatMessageA
WriteFile
GetComputerNameA
CopyFileA
InterlockedExchange
CreateEventA

user32

DrawIcon
IsWindow
CreateWindowExW
GetCaretPos
CharToOemA
SetCursorPos
SetFocus
GetMessageA
LoadImageW
wsprintfA
DialogBoxParamW

authz

AuthzFreeResourceManager
AuthzFreeContext

Sections

.text
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39be525feecb005ad3440c7707824ce4

Headers

File Characteristics

Imports

wtsapi32

untfs

shlwapi

dbnmpntw

kernel32

user32

authz

Sections

.text Size: 64KB - Virtual size: 61KB

.data Size: 16KB - Virtual size: 12KB

.rsrc Size: 20KB - Virtual size: 17KB

.text
Size: 64KB - Virtual size: 61KB

.data
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 20KB - Virtual size: 17KB