be39a3e87603f621d2ee5569d481698e0c86eef08c5fdf86dda9f16e88276015

Sharing

Copy URL Twitter E-mail

General

Target

be39a3e87603f621d2ee5569d481698e0c86eef08c5fdf86dda9f16e88276015
Size

608KB
MD5

a7e46e05b94822629c5d6f656c544587
SHA1

36ed8467761b88adf93f70927aba4412ca157d22
SHA256

be39a3e87603f621d2ee5569d481698e0c86eef08c5fdf86dda9f16e88276015
SHA512

fbbba7c43bb76cd7833fd93478e87fe88a9d62c94861055709c5a88cd16173fe77bbb681b6d1956f341b2e731dac6d5647bb6e8ea08a631a29689f8f079788c6
SSDEEP

6144:3LeWXUcZosPmPZcUF1qa3TO2HTuBsZMZ+0s6GaBop8CSIhrUZaBaKBRVzdQ4IxgO:bjZuXRydEVUUB1S8xlujhR6Zvy

Score

N/A

Malware Config

Signatures

Files

be39a3e87603f621d2ee5569d481698e0c86eef08c5fdf86dda9f16e88276015
.exe windows x86

93956db1a3688b21689acc677f6cf0e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetShortPathNameA
ResetEvent
GetAtomNameW
InterlockedExchange
CreateEventW
FindFirstFileA
FormatMessageW
GetLogicalDrives
GetComputerNameW
GetTickCount
GetFullPathNameA
SetStdHandle
InterlockedDecrement
GetProcAddress
CloseHandle
CompareStringW
GetEnvironmentVariableW
CreateNamedPipeW
GetDiskFreeSpaceA
CreateSemaphoreA
GetModuleHandleA
FileTimeToSystemTime
CreateMutexA
GetLocalTime
FindResourceA
GetLocaleInfoA
DeviceIoControl
DeleteFileA
OpenFileMappingA
GetStringTypeA

shlwapi

UrlHashA
UrlIsOpaqueW
UrlGetLocationA
PathCompactPathA
UrlIsA
UrlGetPartA
UrlIsNoHistoryA
PathCombineA
UrlEscapeA
UrlCombineA
UrlCanonicalizeA

authz

AuthzFreeResourceManager
AuthzAddSidsToContext

user32

IsCharLowerW
IsZoomed
LoadCursorA
GetCaretPos
IsDialogMessageA
GetWindowLongA
CreateWindowExA
PostMessageW
GetMessageW
GetWindowTextA
IsWindow
SetFocus

cfgmgr32

CMP_Report_LogOn
CMP_UnregisterNotification
CM_Add_Range

wtsapi32

WTSVirtualChannelClose
WTSEnumerateServersA
WTSVirtualChannelPurgeInput
WTSQuerySessionInformationA
WTSVirtualChannelWrite
WTSCloseServer
WTSEnumerateProcessesA
WTSOpenServerA
WTSSendMessageA
WTSWaitSystemEvent
WTSVirtualChannelRead
WTSEnumerateSessionsA

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 546KB - Virtual size: 600KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93956db1a3688b21689acc677f6cf0e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shlwapi

authz

user32

cfgmgr32

wtsapi32

Sections

.text Size: 49KB - Virtual size: 49KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 546KB - Virtual size: 600KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 49KB - Virtual size: 49KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 546KB - Virtual size: 600KB

.reloc
Size: 8KB - Virtual size: 7KB