b4cde4c4a4df4d2241744e385583977e450f5332c0709f504d813f17f484a0ab

General

Target

b4cde4c4a4df4d2241744e385583977e450f5332c0709f504d813f17f484a0ab
Size

284KB
MD5

6c0378eadb60999cc7ea41bc72085e91
SHA1

ea2e3f0f1dfa82c4cbce703311552521ed09d9b4
SHA256

b4cde4c4a4df4d2241744e385583977e450f5332c0709f504d813f17f484a0ab
SHA512

bc8cedf4861d0e3bf29dbf54cfec0dab7730b27ce99598e5a711cd702fc04022c2991fc641f2270d6ac5a4eb18dac842b309b1b054bb807c52b74b65bd0da076
SSDEEP

3072:kRstYyVAyPhTgpBBnUL30WgV6HpCLe+m59X+mRj1/bTdndC2RhRsN:kySyVrEtUL3PG2pCK+mLHDTdfRhyN

Score

N/A

Malware Config

Signatures

Files

b4cde4c4a4df4d2241744e385583977e450f5332c0709f504d813f17f484a0ab
.exe windows x86

0f41fc3f082d1052d3a08b394b3ebdca

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

IsDialogMessageW
GetPropW
LoadBitmapA
PostMessageW
LoadMenuW
DispatchMessageW
LoadIconA
DrawStateA
CreateDesktopW
CharToOemA
GetClassLongA
wsprintfA
IsIconic
InsertMenuA
PeekMessageW

kernel32

EncodePointer
CompareStringA
VirtualProtectEx
GetAtomNameA
GetModuleHandleA
CreateFileMappingA
WaitForSingleObject
HeapAlloc
GetTimeFormatW
LoadLibraryW
GetGeoInfoW
WriteConsoleW

uxtheme

GetThemeBool
GetThemeSysSize
GetThemeRect
GetThemeColor
GetThemeTextMetrics
SetWindowTheme
GetThemeFilename
OpenThemeData
GetThemeTextExtent
DrawThemeEdge
CloseThemeData
IsThemeActive
GetWindowTheme

wtsapi32

WTSEnumerateSessionsW
WTSFreeMemory
WTSSetSessionInformationW
WTSEnumerateServersA
WTSVirtualChannelRead
WTSOpenServerW
WTSRegisterSessionNotification
WTSLogoffSession
WTSUnRegisterSessionNotification
WTSWaitSystemEvent
WTSVirtualChannelClose
WTSEnumerateProcessesA
WTSVirtualChannelWrite
WTSVirtualChannelOpen

Sections

.text
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f41fc3f082d1052d3a08b394b3ebdca

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

uxtheme

wtsapi32

Sections

.text Size: 232KB - Virtual size: 231KB

.data Size: 24KB - Virtual size: 21KB

.rsrc Size: 24KB - Virtual size: 22KB

.text
Size: 232KB - Virtual size: 231KB

.data
Size: 24KB - Virtual size: 21KB

.rsrc
Size: 24KB - Virtual size: 22KB