a42a116093b1bae539014280f356128f85e63233d2b2a73c6d87204118a1e887

General

Target

a42a116093b1bae539014280f356128f85e63233d2b2a73c6d87204118a1e887
Size

496KB
MD5

f3ae7da83924b7d68738cadc195e6efd
SHA1

c872de1fcc306294f81c7705eb8ff8aa84fd5339
SHA256

a42a116093b1bae539014280f356128f85e63233d2b2a73c6d87204118a1e887
SHA512

9f21eba16420543bc47dc793af97ee30c88243ec308e0969a21b31dc3a38cc9f629ca8540214ddcb2d6ffac38cd0b786f8e724b702daefa490540e9adb99ed43
SSDEEP

12288:XKY71Cw/rGvk+QdmAo4E5UqNAKk4Rb7Uh+7/K7al:aYJ5N3dh3EVN5NXj/3

Score

N/A

Malware Config

Signatures

Files

a42a116093b1bae539014280f356128f85e63233d2b2a73c6d87204118a1e887
.exe windows x86

9b4157691c208e07616ea90bf44575c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIcon
LoadImageA
LoadCursorA
CreateWindowExA
IsCharLowerA
DispatchMessageA
PostMessageA
GetWindowLongA
DialogBoxParamA
IsDialogMessageA
SetFocus
PeekMessageA

wtsapi32

WTSVirtualChannelOpen
WTSVirtualChannelWrite
WTSVirtualChannelClose
WTSWaitSystemEvent
WTSQuerySessionInformationA
WTSSetSessionInformationA
WTSQueryUserToken
WTSEnumerateServersA
WTSVirtualChannelPurgeInput
WTSOpenServerA
WTSEnumerateSessionsA

kernel32

GetProcessTimes
SetEndOfFile
GetTickCount
GetDiskFreeSpaceA
CloseHandle
GetBinaryTypeA
GetConsoleTitleA
CreateEventW
DeviceIoControl
GetProcessHeap
HeapValidate
GetDriveTypeA
GetCurrentDirectoryA
GetAtomNameA
OpenFileMappingW
InterlockedExchange
CreateNamedPipeA
CopyFileA
GetEnvironmentVariableA
GetLogicalDrives
GetSystemInfo
ReplaceFileW
FindResourceA
FileTimeToLocalFileTime
GetProcAddress
GetModuleHandleA
VirtualQueryEx
GetFileType
GetVolumePathNameW
CompareStringA
SetFileAttributesA
CreateMutexA
FormatMessageA
GetFullPathNameA
GetComputerNameW
CreateSemaphoreA
PurgeComm
lstrcpynA

cabinet

FDIIsCabinet
Extract
FCICreate
FCIAddFile
FCIDestroy

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b4157691c208e07616ea90bf44575c6

Headers

File Characteristics

Imports

user32

wtsapi32

kernel32

cabinet

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 478KB - Virtual size: 478KB

.data Size: 4KB - Virtual size: 96KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 478KB - Virtual size: 478KB

.data
Size: 4KB - Virtual size: 96KB

.reloc
Size: 2KB - Virtual size: 2KB