b53d16d26ee0da359bd893c8a9e6cd2f6eb538e0eddf9ffd7f6a0257fb0ca2e7

General

Target

b53d16d26ee0da359bd893c8a9e6cd2f6eb538e0eddf9ffd7f6a0257fb0ca2e7
Size

389KB
MD5

0f292140228a356f237d361ef4520378
SHA1

b1235934e89d83376abae031bbde14f74d8ed0a3
SHA256

b53d16d26ee0da359bd893c8a9e6cd2f6eb538e0eddf9ffd7f6a0257fb0ca2e7
SHA512

bc3399014fc54420eae121c4cfce2c940c25bb40791bf18fc0f9f6fd19e0c427ecbc4b967d2a207c30d59d33c2ca3efbf7f44ac84468f16390a681f463055826
SSDEEP

6144:5OLYbgnpJGseASRaPNi8BbrTrWLUpo8zZTLShT2RBrmLWp/3H4zxMGy:2nrLeCNigbrTrpo8zx+NSB6Wl3Hu/

Score

N/A

Malware Config

Signatures

Files

b53d16d26ee0da359bd893c8a9e6cd2f6eb538e0eddf9ffd7f6a0257fb0ca2e7
.exe windows x86

870cf9d70b856a36b26500476a375912

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSCloseServer
WTSCloseServer
WTSCloseServer

kernel32

HeapCreate
GetWindowsDirectoryW
TlsFree
SizeofResource
_lopen
FindClose
GetACP
LZRead
TlsFree
TlsFree
GetMailslotInfo
GetConsoleTitleA
GlobalFree
DeleteAtom
DuplicateConsoleHandle
DuplicateHandle
EncodePointer
GlobalFree
DeleteFiber
EnterCriticalSection
RtlUnwind
IsBadReadPtr
SetStdHandle
GlobalFix
EncodeSystemPointer
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
Beep
ConvertFiberToThread
EncodePointer
HeapWalk
LCMapStringW
LCMapStringA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 496KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 380KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

870cf9d70b856a36b26500476a375912

Headers

File Characteristics

Imports

wtsapi32

kernel32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 496KB

.rsrc Size: 380KB - Virtual size: 384KB

.DATA Size: 512B - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 496KB

.rsrc
Size: 380KB - Virtual size: 384KB

.DATA
Size: 512B - Virtual size: 4KB