7aaacc9637b67bb9dbab8491b18c8fbd4651780d719fef5ae89b820d137d6761

Sharing

Copy URL Twitter E-mail

General

Target

7aaacc9637b67bb9dbab8491b18c8fbd4651780d719fef5ae89b820d137d6761
Size

288KB
MD5

805988ed2295cd5411e33052631c59af
SHA1

d1c173b6fc469b46b8f1b5464f4505fbde8f497c
SHA256

7aaacc9637b67bb9dbab8491b18c8fbd4651780d719fef5ae89b820d137d6761
SHA512

d8147f1154b94f2251ef81a79500c3fa04566ea6d54adce7a1840126a6979dceae027e9ec27eab0509d649f95b03fb147a816f4a833e25b57935d35ab0cee2a7
SSDEEP

6144:BwGyWi5KBVmSBll/infu4jS5Ka2z+VZ64:BdhWKBUalMnfljS5+z+VE4

Score

N/A

Malware Config

Signatures

Files

7aaacc9637b67bb9dbab8491b18c8fbd4651780d719fef5ae89b820d137d6761
.exe windows x86

089f56c929cd68bc67266beccf981710

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

qutil

AllocFixupInfo
FreeFixupInfo

uxtheme

GetThemeSysSize
GetThemeTextMetrics
GetThemeFilename
GetThemeRect
IsThemeActive
OpenThemeData
DrawThemeEdge
GetWindowTheme
GetThemeInt
SetWindowTheme

modemui

CountryRunOnce
InvokeControlPanel

cfgmgr32

CM_Add_IDA
CM_Add_Range
CM_Add_Empty_Log_Conf
CMP_Report_LogOn
CMP_Init_Detection

kernel32

GetPrivateProfileIntA
SleepEx
ReadConsoleA
lstrcpynA
GetCurrentProcess
GetEnvironmentVariableA
GetProcessId
GetConsoleTitleW
CreateFileW
LoadLibraryW
GetModuleHandleA
VirtualProtect
GetNumberFormatW

wtsapi32

WTSFreeMemory
WTSQuerySessionInformationA
WTSVirtualChannelClose
WTSQueryUserToken
WTSWaitSystemEvent
WTSVirtualChannelPurgeInput
WTSVirtualChannelWrite
WTSOpenServerW
WTSRegisterSessionNotification
WTSSetUserConfigW
WTSEnumerateSessionsW
WTSEnumerateServersA
WTSLogoffSession
WTSEnumerateProcessesA

ctl3d32

Ctl3dUnregister
Ctl3dGetVer
Ctl3dCtlColor
Ctl3dRegister
Ctl3dEnabled

shell32

SHGetDesktopFolder
SHGetDataFromIDListA
ShellAboutA
SHChangeNotify
ShellMessageBoxA
DragFinish
StrChrA
SHGetDiskFreeSpaceA
SHCreateShellItem
DuplicateIcon
DragQueryFileA
SHGetFileInfoA
SHFileOperationA
SHFree
DragQueryPoint
SHGetMalloc
DragAcceptFiles

Sections

.text
Size: 208KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

089f56c929cd68bc67266beccf981710

Headers

DLL Characteristics

File Characteristics

Imports

qutil

uxtheme

modemui

cfgmgr32

kernel32

wtsapi32

ctl3d32

shell32

Sections

.text Size: 208KB - Virtual size: 204KB

.data Size: 48KB - Virtual size: 46KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 208KB - Virtual size: 204KB

.data
Size: 48KB - Virtual size: 46KB

.rsrc
Size: 28KB - Virtual size: 25KB