da5137443a831e1499e36eaa76563621994266e5575508f77ad7126fdfb355d2

Sharing

Copy URL Twitter E-mail

General

Target

da5137443a831e1499e36eaa76563621994266e5575508f77ad7126fdfb355d2
Size

168KB
MD5

07b51ee837f4ddb8591ddf0cc9d481c9
SHA1

24f7ecd788f4205cf85e543505a173c059251af0
SHA256

da5137443a831e1499e36eaa76563621994266e5575508f77ad7126fdfb355d2
SHA512

ed40728916c46fa963315e88aab29092c4c7881ef785ba1708dff229e5434e3663f6932d63df4cc7fdd39daf4646ccd35c8848651e238dd00a9babd62619e5c5
SSDEEP

3072:X7Qrtq2FlraKtDoycU6aw3fa8UJ7ulBHMnv/j9uW3Ag:X7Z2FlDtDvcUIy8UobsnHj9uMn

Score

N/A

Malware Config

Signatures

Files

da5137443a831e1499e36eaa76563621994266e5575508f77ad7126fdfb355d2
.exe windows x86

020de0d2e57f06525656d41feeff5846

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

PathAppendW
PathIsUNCServerShareW

ole32

CoGetClassVersion

kernel32

VirtualAlloc

cryptui

CryptUIDlgSelectCertificateW
CryptUIDlgViewCertificateW

credui

CredUIParseUserNameW
CredUIInitControls

shell32

ILFindLastID

dsprop

ADsPropCreateNotifyObj
ADsPropSetHwnd
ADsPropGetInitInfo
ADsPropSendErrorMessage
ADsPropShowErrorDialog
FindSheet
ADsPropSetHwndWithTitle

ntdll

RtlSubAuthorityCountSid
RtlInitUnicodeString
RtlSubAuthoritySid
NtQuerySystemTime
RtlNtStatusToDosError
RtlIdentifierAuthoritySid

gdi32

CreateHatchBrush

Sections

.text
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

020de0d2e57f06525656d41feeff5846

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

ole32

kernel32

cryptui

credui

shell32

dsprop

ntdll

gdi32

Sections

.text Size: 512B - Virtual size: 396B

.rdata Size: 96KB - Virtual size: 96KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 512B - Virtual size: 28B

.data Size: 29KB - Virtual size: 848KB

.idata Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 396B

.rdata
Size: 96KB - Virtual size: 96KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 512B - Virtual size: 28B

.data
Size: 29KB - Virtual size: 848KB

.idata
Size: 1KB - Virtual size: 1KB