994f1d3651f6282b34b184d1400425804a761ab44ce935d80f101dbb2ee6c726 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

994f1d3651f6282b34b184d1400425804a761ab44ce935d80f101dbb2ee6c726
Size

32KB
MD5

910b6ff3e32afe9f96d4335fb41692a0
SHA1

fea9040aa8766d7c515287a8f196170e55c6503b
SHA256

994f1d3651f6282b34b184d1400425804a761ab44ce935d80f101dbb2ee6c726
SHA512

342bd07ace249eee8167083f67a69c673710bf4e1e3824828c32515b1d0e9db0f6e28c772d7a0a9224c97590f485d76f7eaf81f69a93218d295378e89e562f2c
SSDEEP

768:GZ3d/80VXroNu6Zkr01m+ujglsXqoKrXn:WtE0h+yr6cF6oKD

Score

N/A

Malware Config

Signatures

Files

994f1d3651f6282b34b184d1400425804a761ab44ce935d80f101dbb2ee6c726
.exe windows x86

a1461efa6059dc6e158f18504743c166

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
PostMessageA
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
RegisterClassExA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
DispatchMessageA

kernel32

DeviceIoControl
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateFileA
ReadFile
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
CreateDirectoryA
TlsGetValue
GetProcessHeap
IsValidCodePage
SetEnvironmentVariableA

wtsapi32

WTSEnumerateProcessesA
WTSEnumerateServersA
WTSLogoffSession
WTSQuerySessionInformationA
WTSSetSessionInformationA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ