01686d9cd8215009a79d625c181606839281b6c83d90367f205dedb8674e7016

Sharing

Copy URL Twitter E-mail

General

Target

01686d9cd8215009a79d625c181606839281b6c83d90367f205dedb8674e7016
Size

195KB
MD5

cf1280e9258d4a0a48aaafb760f5104d
SHA1

c87013e297a455c23250fc9ef2a8b4c9364368c8
SHA256

01686d9cd8215009a79d625c181606839281b6c83d90367f205dedb8674e7016
SHA512

8ee9f60b3085bc29f8eac0fa63ea5e26d66fd68cd12bcb7b98d1fbb8a744c9a839feed412de4ed553cd284f51a42989b8749a1d890bf1fcd72a0f8ad48fc4e92
SSDEEP

3072:dHtk954o+cNFeOa5enhRXQJwUUNFeOaVwlx:O9Mknh1xHMV

Score

N/A

Malware Config

Signatures

Files

01686d9cd8215009a79d625c181606839281b6c83d90367f205dedb8674e7016
.exe windows x86

33eb594910f5479830fd228cce84e60b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

ctl3d32

Ctl3dGetVer
Ctl3dEnabled
Ctl3dUnregister
Ctl3dRegister
Ctl3dCtlColor

wtsapi32

WTSQueryUserToken
WTSSetUserConfigW
WTSVirtualChannelWrite
WTSFreeMemory
WTSUnRegisterSessionNotification
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSSetSessionInformationW
WTSEnumerateServersA
WTSOpenServerW
WTSVirtualChannelQuery
WTSVirtualChannelPurgeInput
WTSQuerySessionInformationA

cryptdll

MD5Init
MD5Update
MD5Final
CDBuildVect
CDLocateRng

advapi32

RegEnumKeyW
CreateServiceW
RegOpenKeyA
RegSaveKeyA
LogonUserW
RegLoadKeyA
GetUserNameW
RegRestoreKeyA
RegUnLoadKeyW
CryptSignHashW
ReadEventLogW
OpenEventLogW
RegDeleteValueA

user32

MessageBoxW
IsWindow
InsertMenuW
MessageBoxExA
GetMessageW
DispatchMessageA
GetDlgItemTextA
FindWindowA
LoadMenuA
CharToOemW
CreateDesktopA
DrawStateW
IsDialogMessageW
GetClassLongW

kernel32

WriteFile
LoadLibraryExA
GetProcessHeap
OpenMutexW
GetLogicalDriveStringsA
lstrlenA
InitializeCriticalSection
SleepEx
CreateMutexW
GetCommandLineA
GetModuleHandleA
GetStringTypeW
GetConsoleAliasA
lstrcatA
HeapFree
CreateFileW
GetACP
GetProcAddress

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 972B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33eb594910f5479830fd228cce84e60b

Headers

DLL Characteristics

File Characteristics

Imports

ctl3d32

wtsapi32

cryptdll

advapi32

user32

kernel32

Sections

.text Size: 159KB - Virtual size: 158KB

Size: 15KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 972B

.rsrc Size: 18KB - Virtual size: 18KB

.text
Size: 159KB - Virtual size: 158KB

.data
Size: 1024B - Virtual size: 972B

.rsrc
Size: 18KB - Virtual size: 18KB