c5a5d51523ea1f7cf6e9a8c65150e55254770fc57cf0c564ad9aaa85349d10c4

General

Target

c5a5d51523ea1f7cf6e9a8c65150e55254770fc57cf0c564ad9aaa85349d10c4
Size

252KB
MD5

42399d59af1946bd7b9bc9f47b9a6354
SHA1

d3ecde58213ff0899dd2f2ed3273af802086ed14
SHA256

c5a5d51523ea1f7cf6e9a8c65150e55254770fc57cf0c564ad9aaa85349d10c4
SHA512

d540dbd43c6a0907f8cb22ea5727cbb588353c5b9edc87880a3e4f0f529898f07e435366bfe5de56bb77d7fde87ff085f313e39785f1073b967a0392e379ffa0
SSDEEP

6144:u3OqhXJKazbUJ2cf74GyTjysli1vDfwpv/Ciqqqqqqi:2ZPHUwcMWxIp

Score

N/A

Malware Config

Signatures

Files

c5a5d51523ea1f7cf6e9a8c65150e55254770fc57cf0c564ad9aaa85349d10c4
.exe windows x86

c06424d193ada09ecd83cdf4c193d373

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetAtomNameA
GetProcessId
GetExitCodeProcess
WaitForSingleObject
GetCurrentProcess
GetConsoleAliasA
GetGeoInfoW
GetDateFormatW
EncodePointer
LoadLibraryA
MapViewOfFile
GetModuleHandleA

nddeapi

NDdeShareGetInfoA
NDdeShareSetInfoA
NDdeShareAddA
NDdeShareDelA
NDdeShareEnumA

user32

LoadMenuW
GetMessageW
DialogBoxParamA
LoadIconA
GetDlgItemTextW
IsWindow
IsDialogMessageW
FlashWindow
LoadBitmapA
PostMessageW
InsertMenuA
GetClassLongA
wsprintfA
GetPropW
DispatchMessageW

wtsapi32

WTSVirtualChannelQuery
WTSVirtualChannelRead
WTSRegisterSessionNotification
WTSVirtualChannelOpen
WTSEnumerateSessionsW
WTSOpenServerW
WTSEnumerateServersA
WTSWaitSystemEvent
WTSSetUserConfigW
WTSSetSessionInformationW
WTSFreeMemory
WTSVirtualChannelPurgeInput
WTSQuerySessionInformationA
WTSUnRegisterSessionNotification

Sections

.text
Size: 204KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c06424d193ada09ecd83cdf4c193d373

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

nddeapi

user32

wtsapi32

Sections

.text Size: 204KB - Virtual size: 203KB

.data Size: 16KB - Virtual size: 12KB

.rsrc Size: 28KB - Virtual size: 25KB

.text
Size: 204KB - Virtual size: 203KB

.data
Size: 16KB - Virtual size: 12KB

.rsrc
Size: 28KB - Virtual size: 25KB