a5d915e5608423f95b80afc96a870024821cced20cdb96526fa65ad863ceea23

Sharing

Copy URL Twitter E-mail

General

Target

a5d915e5608423f95b80afc96a870024821cced20cdb96526fa65ad863ceea23
Size

68KB
MD5

0c305cf45097d3edeeaf7dc6622e1cf0
SHA1

4beb4ea1877860f8198be6f464d62ca3c9a9022b
SHA256

a5d915e5608423f95b80afc96a870024821cced20cdb96526fa65ad863ceea23
SHA512

b00ba2db5070ff4bc13ce9a4198398ce2e1fa2f20b0dbeafe7534f1ab8640a10cf36bc94fe651b76918b958d3bd9bc46ee4b0bb500ba248996cb7ecc9b1ce275
SSDEEP

768:2yzhr8jSQQDFj1jVZY4NiB9w5vNugrKkrYdkJF2t+x4BFBQwejlvrSlWV:25jSQaFj1jVVvceJwtgMPejxSl+

Score

N/A

Malware Config

Signatures

Files

a5d915e5608423f95b80afc96a870024821cced20cdb96526fa65ad863ceea23
.exe windows x86

709ece4b117ce9a3cd5a589884548948

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
GetOverlappedResult
CreateEventA
FreeLibrary
lstrcmpiA
lstrcpynA
GetProcAddress
LoadLibraryA
LocalFree
FormatMessageA
GetSystemDirectoryA
FindFirstFileA
Sleep
WinExec
CopyFileA
GetModuleFileNameA
GetModuleHandleA
GetVersion
ProcessIdToSessionId
GetCurrentProcessId
ExitThread
ResetEvent
CreateThread
DeviceIoControl
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
HeapCreate
LCMapStringW
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileA
GetLastError
LCMapStringA
GetVersionExA
GetStartupInfoA
GetCommandLineA
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA

user32

ShowWindow
GetSystemMetrics
KillTimer
SendMessageA
FindWindowA
DispatchMessageA
MessageBeep
PostQuitMessage
DefWindowProcA
CreateWindowExA
LoadAcceleratorsA
PostMessageA
UpdateWindow
SetTimer
RegisterClassA
wsprintfA
GetMessageA
TranslateMessage

wtsapi32

WTSRegisterSessionNotification

version

GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyExA

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

709ece4b117ce9a3cd5a589884548948

Headers

File Characteristics

Imports

kernel32

user32

wtsapi32

version

advapi32

Sections

.text Size: 32KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 4KB - Virtual size: 5KB

.rsrc Size: 24KB - Virtual size: 24KB

.text
Size: 32KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 4KB - Virtual size: 5KB

.rsrc
Size: 24KB - Virtual size: 24KB