d0a734148cbc085b01da7e32967f671d82e56cc573a6ce1f032a343d286e0921 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

d0a734148cbc085b01da7e32967f671d82e56cc573a6ce1f032a343d286e0921
Size

32KB
MD5

84d2c868e54c78997d39c5072be3e580
SHA1

b1e0fb19277c1143ac3b36ce62bddd604ca742b8
SHA256

d0a734148cbc085b01da7e32967f671d82e56cc573a6ce1f032a343d286e0921
SHA512

354ebef6e8db23d989412108a893d888879d728d74c7c3f1c0161b0c4405d8e40a3ecc3869924d567c5fcd9a7ec657daeb05fff606f51452316e558ce457d972
SSDEEP

768:3bd4OriuQaoINWcUpjjifzqjgSsXcH86SXng4:3p4OmuQaNCj+uaMH86KV

Score

N/A

Malware Config

Signatures

Files

d0a734148cbc085b01da7e32967f671d82e56cc573a6ce1f032a343d286e0921
.exe windows x86

a1461efa6059dc6e158f18504743c166

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SetFocus
PostMessageA
SendMessageA
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
DefWindowProcA
CreateWindowExA
LoadCursorA
RegisterClassExA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
DispatchMessageA

kernel32

DeviceIoControl
HeapFree
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
CreateFileA
ReadFile
FileTimeToSystemTime
GetFullPathNameA
LoadLibraryA
CreateDirectoryA
TlsGetValue
GetProcessHeap
IsValidCodePage
SetEnvironmentVariableA

wtsapi32

WTSEnumerateProcessesA
WTSEnumerateServersA
WTSLogoffSession
WTSQuerySessionInformationA
WTSSetSessionInformationA

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ