252bd4be8cc20b9ba7efe2146fc4246cc159f7d5afcc9ac7aa22ebc1faf3e16d

Sharing

Copy URL Twitter E-mail

General

Target

252bd4be8cc20b9ba7efe2146fc4246cc159f7d5afcc9ac7aa22ebc1faf3e16d
Size

29KB
MD5

9221df8b7531ff46e4b8e87ee10e6490
SHA1

8ff34b2f50d4c0e7a2ae82fa7ee3aacf10dbed00
SHA256

252bd4be8cc20b9ba7efe2146fc4246cc159f7d5afcc9ac7aa22ebc1faf3e16d
SHA512

2516de8e02e6fc66be2cb94535cb45a5c4debd2b503ace06a3d92cb84f260c5f91572700799549f12e637854e565f5f04a626e25103b0ae94ac2800cd84001b3
SSDEEP

384:LvVbGfXrY45es0Ql72neq1wNbam9KZMI6xELvQpRGOzCT1Vw:bVbKXrpestwC8mlELvQpa

Score

N/A

Malware Config

Signatures

Files

252bd4be8cc20b9ba7efe2146fc4246cc159f7d5afcc9ac7aa22ebc1faf3e16d
.exe windows x86

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
CreateDirectoryA
GetPrivateProfileStructW
WaitForSingleObject
WriteConsoleA
GetConsoleTitleA
UpdateResourceA
GetTimeFormatA
LoadLibraryA
DeviceIoControl
GetNumberFormatW
GetCurrentDirectoryA
CloseHandle
SetFilePointer
GetTickCount
GetBinaryTypeA
SetCurrentDirectoryW
lstrcpynA
CompareStringA
GetProcAddress
CreateNamedPipeA
GetProcessHeap
GetDateFormatA
GetSystemTimeAsFileTime
GetComputerNameA
SetEnvironmentVariableW
GetCurrentProcess
GetPrivateProfileIntA
HeapValidate
GetConsoleAliasW
GetProcessId

nddeapi

NDdeShareEnumA
NDdeShareGetInfoA
NDdeShareDelA
NDdeShareSetInfoA
NDdeShareAddA

shlwapi

UrlIsOpaqueA
UrlIsNoHistoryW
UrlGetPartA
UrlIsA
PathCompactPathA
UrlGetLocationA
UrlCreateFromPathA
UrlHashA
PathCommonPrefixA
UrlCompareA
UrlEscapeA
UrlUnescapeA
PathCombineA

wtsapi32

WTSEnumerateServersA
WTSUnRegisterSessionNotification
WTSFreeMemory
WTSVirtualChannelRead
WTSWaitSystemEvent
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSSetUserConfigW
WTSEnumerateProcessesA
WTSEnumerateSessionsW
WTSSendMessageA
WTSVirtualChannelWrite
WTSVirtualChannelPurgeInput
WTSQueryUserToken
WTSQuerySessionInformationA
WTSSetSessionInformationW
WTSVirtualChannelQuery

msimg32

DllInitialize
AlphaBlend
GradientFill
TransparentBlt
vSetDdrawflag

user32

wsprintfA
GetWindowTextA
DrawIcon
DialogBoxParamA
IsZoomed
SetCursorPos
GetMessageA
PeekMessageA
CreateWindowExA
GetPropA
GetWindowLongA
PostMessageA
IsWindow
GetCaretPos
IsCharLowerW
DispatchMessageA
CharToOemA

modemui

CountryRunOnce
InvokeControlPanel

certcli

CACloseCA
CACloseCertType
CAEnumFirstCA
CAEnumNextCA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

nddeapi

shlwapi

wtsapi32

msimg32

user32

modemui

certcli

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 626B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 626B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB