1aa43d09ff18efcc2d95b38478578bd8c6fa97c60e95d5191e79024beb6824f7

General

Target

1aa43d09ff18efcc2d95b38478578bd8c6fa97c60e95d5191e79024beb6824f7
Size

228KB
MD5

924ff852ae27c9eef98639d1d2765e12
SHA1

2c360060e69b12753382dd4fcaffe04a07916a81
SHA256

1aa43d09ff18efcc2d95b38478578bd8c6fa97c60e95d5191e79024beb6824f7
SHA512

c4dc529390b06fc647244a326ec155737f5eeaa5d8787050bf895e77ab9739bbe6461ab635120e31f49cdc29d7d75bad7a062cb3ae2bbdf7bf2c07adf868f221
SSDEEP

3072:cfEIGcGyUgtEHPbBDk86zHenGd/UFA+dfbpN35WjrG2MU6MFfmWSYE1G:99pgt41k7z+nGd/41hWXhM9OZSYE1

Score

N/A

Malware Config

Signatures

Files

1aa43d09ff18efcc2d95b38478578bd8c6fa97c60e95d5191e79024beb6824f7
.exe windows x86

c8d8712e2cc7a808565a55508f211046

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

cfgmgr32

CM_Add_Empty_Log_Conf
CM_Add_Range
CMP_Report_LogOn
CM_Add_IDA

shell32

SHGetDiskFreeSpaceA
SHFree
SHChangeNotify
SHGetDesktopFolder
ShellMessageBoxA
SHFileOperationA
SHCreateShellItem
SHGetMalloc
ExtractIconA
DragQueryFileA
DragAcceptFiles
FindExecutableA
ShellAboutA

qutil

AllocConnections
AllocFixupInfo
FreeConnections
FreeFixupInfo

uxtheme

GetThemeBool
SetWindowTheme
GetWindowTheme
GetThemeFilename
DrawThemeBackground
GetThemeTextExtent
OpenThemeData
CloseThemeData
GetThemeColor
GetThemeInt
GetThemeSysSize
GetThemeTextMetrics
GetThemeRect
DrawThemeEdge

kernel32

LoadLibraryW
GetConsoleTitleW
SetEnvironmentVariableW
GetModuleHandleA
GetCurrentProcess
GetCurrentDirectoryA
CreateFileW
lstrcpynA
Sleep
HeapAlloc
VirtualProtect
HeapSize
CreateDirectoryA
SetCurrentDirectoryW

user32

IsDialogMessageW
DispatchMessageW
CreateDesktopW
LoadMenuW
GetDlgItemTextW
LoadBitmapA
GetClassLongA
InsertMenuA
LoadCursorA
LoadIconA
wsprintfA

dbnmpntw

ConnectionWrite
ConnectionClose
ConnectionRead
ConnectionVer

msimg32

AlphaBlend
vSetDdrawflag
TransparentBlt
DllInitialize
GradientFill

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 172KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8d8712e2cc7a808565a55508f211046

Headers

DLL Characteristics

File Characteristics

Imports

cfgmgr32

shell32

qutil

uxtheme

kernel32

user32

dbnmpntw

msimg32

Sections

.text Size: 32KB - Virtual size: 28KB

.data Size: 20KB - Virtual size: 18KB

.rsrc Size: 172KB - Virtual size: 169KB

.text
Size: 32KB - Virtual size: 28KB

.data
Size: 20KB - Virtual size: 18KB

.rsrc
Size: 172KB - Virtual size: 169KB