ebe83e7a78bab092b155d5d3000e8cb2bfaeafe9bbac8f9de3365a8168f779cf

General

Target

ebe83e7a78bab092b155d5d3000e8cb2bfaeafe9bbac8f9de3365a8168f779cf
Size

54KB
MD5

7901b829fb33d302b99f6921e3646bd1
SHA1

c465cda46915541da262bd458d7f37b7ac75f592
SHA256

ebe83e7a78bab092b155d5d3000e8cb2bfaeafe9bbac8f9de3365a8168f779cf
SHA512

4896683f63f3556390645e9c14ab7b6891db5a6009594de0a84f966ca7f9bf8fbaf5c13b3579c9ee2a078f86cf9a68402883389c009dd534827d70056f3657e3
SSDEEP

1536:o7myQxWnHPGebLmkouispdkW3YQlCxLFMnm8Fmi:PwnvX6UiMdkYBCxZMnmY

Score

N/A

Malware Config

Signatures

Files

ebe83e7a78bab092b155d5d3000e8cb2bfaeafe9bbac8f9de3365a8168f779cf
.exe windows x86

d5aca88000591a100988d6b5b1add336

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
_except_handler3
_acmdln
exit
_cexit
_XcptFilter
_controlfp
swprintf
__getmainargs
_exit
_c_exit
wcscpy
wcscat

advapi32

OpenProcessToken
LogonUserW
DuplicateTokenEx
SetThreadToken
StartServiceCtrlDispatcherW

kernel32

GetTickCount
QueryPerformanceCounter
GetCurrentProcess
GetCurrentThreadId
GetProcAddress
CreateThread
GetCurrentProcessId
GetSystemTimeAsFileTime
CloseHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoA
HeapAlloc
GetProcessHeap
SetEvent
CreateEventW
OpenEventW
GetModuleHandleW
LoadLibraryW
Sleep

user32

wsprintfW
MessageBoxW

ole32

CoImpersonateClient

wtsapi32

WTSQueryUserToken

sbiedll

SbieApi_Log
_SbieDll_Hook@12

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d5aca88000591a100988d6b5b1add336

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

advapi32

kernel32

user32

ole32

wtsapi32

sbiedll

Sections

.text Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 920B

.rsrc Size: 47KB - Virtual size: 48KB

.text
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 920B

.rsrc
Size: 47KB - Virtual size: 48KB