825b6364c8973f73e54cfa9c1b48b00b57f0f6404d0957966f6da144e642977f | Triage

Sharing

Copy URL Twitter E-mail

General

Target

825b6364c8973f73e54cfa9c1b48b00b57f0f6404d0957966f6da144e642977f
Size

32KB
MD5

a077f3bae73a4fe083013bff97db5810
SHA1

737b1de65f22a6a1218eb56f064d433324fd0d75
SHA256

825b6364c8973f73e54cfa9c1b48b00b57f0f6404d0957966f6da144e642977f
SHA512

670790181199dca4c5b0ec6d34307f3a4edd6e62a96554f0acf7f9f6ab4ce007f017cccaa1c225cc654055821754d1e16398c1f2eb95d0f7a23f93d69c9af5bf
SSDEEP

768:FpcBmwzXaRgnVSZNWgs+Q2Zfa9jgSsXIHSNfXnJ:F20wzLnEPxQEia4HSNvJ

Score

N/A

Malware Config

Signatures

Files

825b6364c8973f73e54cfa9c1b48b00b57f0f6404d0957966f6da144e642977f
.exe windows x86

a1461efa6059dc6e158f18504743c166

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
PostMessageA
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
RegisterClassExA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
DispatchMessageA

kernel32

DeviceIoControl
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateFileA
ReadFile
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
CreateDirectoryA
TlsGetValue
GetProcessHeap
IsValidCodePage
SetEnvironmentVariableA

wtsapi32

WTSEnumerateProcessesA
WTSEnumerateServersA
WTSLogoffSession
WTSQuerySessionInformationA
WTSSetSessionInformationA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ