042583cf9b9cac737a6c886028c7291f5d44da9185c1edc627b206625799e83d

General

Target

042583cf9b9cac737a6c886028c7291f5d44da9185c1edc627b206625799e83d
Size

287KB
MD5

0d78b1b4a4dc16457d418296ed9cfe20
SHA1

fbd969bec2d5fb5c94e947121f1a3a8676f9af4c
SHA256

042583cf9b9cac737a6c886028c7291f5d44da9185c1edc627b206625799e83d
SHA512

629537f4138d1ae34d2099b9deb4dc92129c904eb876e38f1364d30f08cc3791b5c6891c3f4d0f77b6cfceb06fb1db99c09e3ca30a47beb88283d0b620459422
SSDEEP

6144:EpLqTpOwTlUIOKcAX+Dly/IlI9wqKdaVyxLvjUTF7Cflyc/wSg:2q1OwRv+8/IcwBxLvwx7CtyKa

Score

N/A

Malware Config

Signatures

Files

042583cf9b9cac737a6c886028c7291f5d44da9185c1edc627b206625799e83d
.exe windows x86

6885931a738a0029dd4fde4eb10859dd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DispatchMessageA
IsCharLowerW
GetDlgItemTextA
GetCaretPos
LoadMenuA
CreateDesktopA
LoadCursorA
EnableWindow
LoadImageW
IsDialogMessageA
DialogBoxParamA

dsprop

CrackName
ErrMsg

msimg32

DllInitialize
vSetDdrawflag
AlphaBlend

kernel32

GetTimeFormatA
lstrcpynA
GetProcessHeap
GetFullPathNameA
GetAtomNameA
GetLogicalDriveStringsA
LoadLibraryW
CreateNamedPipeA
UpdateResourceA
WaitForSingleObjectEx
CompareStringA
CreateDirectoryA
CloseHandle
GetDateFormatW
VirtualAlloc
GetCurrentDirectoryA
ReadConsoleA
WriteConsoleA
CreateFileA
FormatMessageA
GetNumberFormatW
GetConsoleAliasW
GetModuleHandleA
GetCommandLineA

wtsapi32

WTSWaitSystemEvent
WTSFreeMemory
WTSOpenServerW
WTSEnumerateProcessesA
WTSVirtualChannelRead
WTSVirtualChannelClose
WTSUnRegisterSessionNotification
WTSVirtualChannelOpen
WTSEnumerateSessionsW
WTSQuerySessionInformationA
WTSRegisterSessionNotification
WTSEnumerateServersW
WTSQueryUserToken
WTSSetUserConfigW

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6885931a738a0029dd4fde4eb10859dd

Headers

DLL Characteristics

File Characteristics

Imports

user32

dsprop

msimg32

kernel32

wtsapi32

Sections

.text Size: 193KB - Virtual size: 192KB

.data Size: 5KB - Virtual size: 4KB

.rsrc Size: 88KB - Virtual size: 88KB

.text
Size: 193KB - Virtual size: 192KB

.data
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 88KB - Virtual size: 88KB