3fbfd5e3314a32afb0649d2ef3a4905dd6a9847426eca0f96ef88127c5613919

General

Target

3fbfd5e3314a32afb0649d2ef3a4905dd6a9847426eca0f96ef88127c5613919
Size

96KB
MD5

574e573ab890d799ea26136c693c2fc0
SHA1

2c14351d2b8a0fda8b9b6ce0090500b0f690567c
SHA256

3fbfd5e3314a32afb0649d2ef3a4905dd6a9847426eca0f96ef88127c5613919
SHA512

586a3251022130d75ee0914f88584082b30a7ff8568f87c9dd21e68cd2e851afc181f6fa7e32643388ce63cf3f2299b5e3f36c65acdc897113ea43a701fe28d5
SSDEEP

384:bGbzjvr3hIiIvFPjTHyFwQlalQOIsViLG4PjR93Aevr3hIiIvLwzidGzqUl0+Jl:i7GiEFPjq8MsVAVjR9LGiELw+Kl5

Score

N/A

Malware Config

Signatures

Files

3fbfd5e3314a32afb0649d2ef3a4905dd6a9847426eca0f96ef88127c5613919
.exe windows x86

5238b79aa5b561b19ffe8af82628a89a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSSendMessageA
WTSVirtualChannelRead
WTSSetUserConfigW
WTSQuerySessionInformationA
WTSWaitSystemEvent
WTSUnRegisterSessionNotification
WTSCloseServer
WTSVirtualChannelOpen
WTSEnumerateServersA
WTSRegisterSessionNotification
WTSEnumerateSessionsA

authz

AuthzFreeAuditEvent
AuthzAddSidsToContext

crypt32

CryptFindOIDInfo
CertFindExtension
CertFreeCRLContext
CryptEncodeObject
CertGetNameStringA
CertDuplicateCRLContext
CertFindCRLInStore
CryptEnumOIDInfo
CertCompareCertificate
CertOpenStore

untfs

FormatEx
Recover
Format

kernel32

GetPrivateProfileIntA
GetDiskFreeSpaceA
WriteProcessMemory
GetConsoleAliasW
GetTimeFormatA
GetDateFormatW
SetEnvironmentVariableA
ExpandEnvironmentStringsA
GetCurrentProcess
LoadLibraryA
GetAtomNameA
SetLastError
SleepEx
FindResourceExA
CreateDirectoryA
FoldStringW
GetNumberFormatA
FormatMessageA
CreateEventA
GetProcessHeap
GetCurrentDirectoryA
WriteFile
HeapCreate
GetComputerNameA
QueryDosDeviceA

user32

IsDialogMessageA
DispatchMessageA
GetCaretPos
SetFocus
CreateWindowExW
CharToOemA
PostMessageA
SetCursorPos
IsCharLowerA
wsprintfA
IsWindow
LoadCursorA
GetWindowTextA
PeekMessageA
DialogBoxParamW
LoadImageW
DrawIcon

Sections

.text
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5238b79aa5b561b19ffe8af82628a89a

Headers

File Characteristics

Imports

wtsapi32

authz

crypt32

untfs

kernel32

user32

Sections

.text Size: 52KB - Virtual size: 48KB

.data Size: 20KB - Virtual size: 16KB

.rsrc Size: 20KB - Virtual size: 18KB

.text
Size: 52KB - Virtual size: 48KB

.data
Size: 20KB - Virtual size: 16KB

.rsrc
Size: 20KB - Virtual size: 18KB