a1a5acd9ee861d15ab4e6c75164bbc51fdfa09f316dbb9f984449015818e0f40

General

Target

a1a5acd9ee861d15ab4e6c75164bbc51fdfa09f316dbb9f984449015818e0f40
Size

60KB
MD5

3b01c2c7838ac8d43afb09e04ed831ba
SHA1

ceea24dcda371e283c293edb2cd6f3cfd8f4f7b4
SHA256

a1a5acd9ee861d15ab4e6c75164bbc51fdfa09f316dbb9f984449015818e0f40
SHA512

2b8bb8481ee25c2cb8faf61a290c8969cb2cc448a4222a93743fbaa9e47b1823096d99a7c73e7c1df89cf7a9563d1212cfc3f8709f851599bcf6eb2f91e9ffd6
SSDEEP

1536:RNEIwgBc2fVZgRAi7SDg7PiIyPHlfdsK:twgS29ZkAkSjIMHlfdX

Score

N/A

Malware Config

Signatures

Files

a1a5acd9ee861d15ab4e6c75164bbc51fdfa09f316dbb9f984449015818e0f40
.exe windows x86

870cf9d70b856a36b26500476a375912

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSDisconnectSession
WTSEnumerateProcessesA
WTSEnumerateProcessesW
WTSEnumerateServersA
WTSCloseServer
WTSCloseServer
WTSCloseServer
WTSCloseServer

kernel32

HeapCreate
GetWindowsDirectoryW
TlsFree
SizeofResource
_lopen
FindClose
GetACP
LZRead
TlsFree
TlsFree
GetMailslotInfo
GetConsoleTitleA
GlobalFree
DeleteAtom
DuplicateConsoleHandle
DuplicateHandle
EncodePointer
GlobalFree
DeleteFiber
EnterCriticalSection
RtlUnwind
IsBadReadPtr
SetStdHandle
GlobalFix
EncodeSystemPointer
FreeEnvironmentStringsA
UnhandledExceptionFilter
ExitProcess
Beep
ConvertFiberToThread
EncodePointer
HeapWalk
LCMapStringW
LCMapStringA

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

870cf9d70b856a36b26500476a375912

Headers

File Characteristics

Imports

wtsapi32

kernel32

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 2KB - Virtual size: 3KB

.data Size: 3KB - Virtual size: 8KB

.rsrc Size: 51KB - Virtual size: 52KB

.DATA Size: 512B - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 2KB - Virtual size: 3KB

.data
Size: 3KB - Virtual size: 8KB

.rsrc
Size: 51KB - Virtual size: 52KB

.DATA
Size: 512B - Virtual size: 4KB