265290b75d2fcaf2193616185c944275f2ce8ebabd2959a655276fe52ba606a1

General

Target

265290b75d2fcaf2193616185c944275f2ce8ebabd2959a655276fe52ba606a1
Size

9KB
MD5

0b581484900edf278b6a5108ef1ab3fc
SHA1

700165ceae7b422f7bbb0c04ae8598fc39566bd5
SHA256

265290b75d2fcaf2193616185c944275f2ce8ebabd2959a655276fe52ba606a1
SHA512

1a446fbd44e84f0e963a0619475fb3ffa8c23300f7f7b98a1946e2814e3fd557085989789b1999c64f19248b71b76f5cab5ecd8d910f343c8ecf9fb9ea45fdcd
SSDEEP

96:5BWToa/ytmpcdiPQP3ti35Fl1H7H45a/I+fk7WJJnKe3muFimcWEasKCOkuI3q:5BWTHTcdspH1HM5aR3K8imjEashOI3

Score

N/A

Malware Config

Signatures

Files

265290b75d2fcaf2193616185c944275f2ce8ebabd2959a655276fe52ba606a1
.dll windows x86

8a941cdb24f9399e4f1a8fff0f39a389

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ExitProcess
FreeLibrary
GetCurrentProcess
GetEnvironmentStringsA
GetModuleHandleA
GetProcAddress
GetVersionExA
LoadLibraryA
RtlUnwind
WideCharToMultiByte
lstrlenA

user32

wsprintfW

crtdll

_fdopen
_open_osfhandle
fclose
_cexit
malloc
memset
raise
setbuf
sprintf
strcmp
strcpy

Exports

Exports

WlxActivateUserShell
WlxDisplayLockedNotice
WlxDisplaySASNotice
WlxDisplayStatusMessage
WlxGetConsoleSwitchCredentials
WlxGetStatusMessage
WlxInitialize
WlxIsLockOk
WlxIsLogoffOk
WlxLoggedOnSAS
WlxLoggedOutSAS
WlxLogoff
WlxNegotiate
WlxNetworkProviderLoad
WlxRemoveStatusMessage
WlxScreenSaverNotify
WlxShutdown
WlxStartApplication
WlxWkstaLockedSAS

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 240B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 844B - Virtual size: 844B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 344B - Virtual size: 344B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE

.edata
Size: 616B - Virtual size: 616B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8a941cdb24f9399e4f1a8fff0f39a389

Headers

File Characteristics

Imports

kernel32

user32

crtdll

Exports

Exports

Sections

.text Size: 3KB - Virtual size: 3KB

.bss Size: - Virtual size: 240B

.data Size: 1KB - Virtual size: 1KB

.idata Size: 844B - Virtual size: 844B

.reloc Size: 344B - Virtual size: 344B

.edata Size: 616B - Virtual size: 616B

.text
Size: 3KB - Virtual size: 3KB

.bss
Size: - Virtual size: 240B

.data
Size: 1KB - Virtual size: 1KB

.idata
Size: 844B - Virtual size: 844B

.reloc
Size: 344B - Virtual size: 344B

.edata
Size: 616B - Virtual size: 616B