9c982452d0c27774dbd391f57601563150dc44bd66f8b32fa247c8647414363a

General

Target

9c982452d0c27774dbd391f57601563150dc44bd66f8b32fa247c8647414363a
Size

57KB
MD5

4b8dfbc2342d9e7659c04b7785267040
SHA1

2eae4441178745e1e0c564f564c51a66b538df20
SHA256

9c982452d0c27774dbd391f57601563150dc44bd66f8b32fa247c8647414363a
SHA512

35026526ac650df0af4af1eaaf10985d581c5e4e0affe76cdcb842696883307899c185a7d72cbce649724454e2284ba3a652289f37d605df8faefd37e3118867
SSDEEP

768:RaI/C5TmILIMTAZD4/WNDrJzEhN1EicI0izTR06wlf7C6MRC98CaUPD4WIzpR:RaAGvPq7fzEhIizTRE2zRCq8b4

Score

N/A

Malware Config

Signatures

Files

9c982452d0c27774dbd391f57601563150dc44bd66f8b32fa247c8647414363a
.exe windows x86

398695d892d2053a8c0f16fd562c8d6b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer

kernel32

HeapCreate
GetWindowsDirectoryA
TlsFree
SizeofResource
_lopen
FindClose
GetACP
_lread
TlsFree
TlsFree
EnumSystemGeoID
GetConsoleTitleA
GlobalFree
DeleteAtom
CreateHardLinkA
DuplicateHandle
EncodePointer
GlobalFree
CreateSocketHandle
EnterCriticalSection
RtlUnwind
IsBadReadPtr
SetStdHandle
ExitVDM
GetFileTime
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
Beep
GetWriteWatch
EncodePointer
HeapWalk
LCMapStringW
LCMapStringA

Sections

.text
Size: 512B - Virtual size: 463B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

398695d892d2053a8c0f16fd562c8d6b

Headers

File Characteristics

Imports

wtsapi32

kernel32

Sections

.text Size: 512B - Virtual size: 463B

.rdata Size: 2KB - Virtual size: 4KB

.data Size: 2KB - Virtual size: 10KB

.rsrc Size: 51KB - Virtual size: 52KB

.DATA Size: 512B - Virtual size: 4KB

.text
Size: 512B - Virtual size: 463B

.rdata
Size: 2KB - Virtual size: 4KB

.data
Size: 2KB - Virtual size: 10KB

.rsrc
Size: 51KB - Virtual size: 52KB

.DATA
Size: 512B - Virtual size: 4KB