06e455d94b45573f946ab70dba66a1b9a13e004bb0db858b7f654dea353f6c1b

General

Target

06e455d94b45573f946ab70dba66a1b9a13e004bb0db858b7f654dea353f6c1b
Size

47KB
MD5

13081669a72d5ab0d8670019d83e41a0
SHA1

a1389245d0b190cebcd5aa0ec196140bec5e7902
SHA256

06e455d94b45573f946ab70dba66a1b9a13e004bb0db858b7f654dea353f6c1b
SHA512

d469b8e86d8786200101ad12a8a0075141a9ed142226c8cdd704741ba171f239583d78d211240761b5c4ab37a7dca04c75915e883c0c43daf8f55ec0d0c456f5
SSDEEP

768:X1SBgBvwFV6vBGVEW+kn/9Gr37gwIXLgQk6nRJuIwjjyaFKKEP9:XwBys48VL5/9o5rQk6nyh8b1

Score

N/A

Malware Config

Signatures

Files

06e455d94b45573f946ab70dba66a1b9a13e004bb0db858b7f654dea353f6c1b
.exe windows x86

26ea26e0912b623481c7efe946ae76b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winsta

WinStationShutdownSystem
WinStationEnumerateW
WinStationFreeMemory
WinStationOpenServerW
WinStationSendMessageW

user32

CharToOemW
LoadStringW

ntdll

_wcslwr
memmove
_wcsnicmp
wcscmp
VerSetConditionMask
wcsncpy
wcstol
vsprintf
wcscat
_ultoa
wcschr
wcscpy
wcstoul
iswctype
_snwprintf
wcslen

msvcrt

vfwprintf
vswprintf
printf
free
_c_exit
_exit
_XcptFilter
_cexit
exit
__initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_except_handler3
malloc
fprintf
setlocale
_iob
fwprintf
_wcsdup

kernel32

GetLastError
SleepEx
Sleep
FreeLibrary
LoadLibraryW
SetLastError
WriteConsoleW
GetFileType
GetStdHandle
GetModuleHandleA
FindFirstFileW
FindNextFileW
GetFileAttributesW
GetCommandLineW
VerifyVersionInfoW
LocalAlloc
LocalFree
GetOEMCP
GetACP
FormatMessageW
GetModuleHandleW
MultiByteToWideChar

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

26ea26e0912b623481c7efe946ae76b9

Headers

DLL Characteristics

File Characteristics

Imports

winsta

user32

ntdll

msvcrt

kernel32

Sections

.text Size: 10KB - Virtual size: 10KB

.data Size: 1024B - Virtual size: 6KB

.rsrc Size: 35KB - Virtual size: 36KB

.text
Size: 10KB - Virtual size: 10KB

.data
Size: 1024B - Virtual size: 6KB

.rsrc
Size: 35KB - Virtual size: 36KB