190a71fd28128d5f98d0c6c67f3d3d0ae77cbd29d7ebc608d600730ee0dc358e

General

Target

190a71fd28128d5f98d0c6c67f3d3d0ae77cbd29d7ebc608d600730ee0dc358e
Size

848KB
MD5

0cd91224c66182179c489d26a28185e0
SHA1

b98f83155fac120f8b2d776389ff2d3744d43c27
SHA256

190a71fd28128d5f98d0c6c67f3d3d0ae77cbd29d7ebc608d600730ee0dc358e
SHA512

a31ab989ad29a3674593a07ef8cc99858d710a05b58e9529673940b2a5428d89f0b6969d7947f8bdbf2b59775e000d753cd1f7701c65cc9da2aa02453cdcb774
SSDEEP

12288:FbK1BMWa6EB+7ai6nl4h7SVCt9yGNmewii7oY0D9sDNmhQJdD9aAfITe:FbQBe1B+0nluTt9yGNmliip0DiNmGDM

Score

N/A

Malware Config

Signatures

Files

190a71fd28128d5f98d0c6c67f3d3d0ae77cbd29d7ebc608d600730ee0dc358e
.exe windows x86

08776ff7c702f4dbdf030927ee3b520b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

dsprop

ErrMsg
CheckADsError

wtsapi32

WTSOpenServerA
WTSVirtualChannelWrite
WTSQuerySessionInformationA
WTSSendMessageA
WTSQueryUserConfigA
WTSWaitSystemEvent
WTSVirtualChannelOpen

kernel32

GetPrivateProfileSectionA
GetLogicalDrives
lstrcmpiA
GetBinaryTypeA
EncodePointer
SetFileAttributesA
HeapCreate
DisconnectNamedPipe
CreateEventA
GetProcAddress
CreateTimerQueue
InterlockedDecrement
GetModuleFileNameA
FindResourceA
FormatMessageA
GetEnvironmentVariableA
LoadLibraryA
IsBadWritePtr
GetComputerNameA
VirtualQueryEx
CopyFileA
CreateNamedPipeA
SetCurrentDirectoryA

clbcatq

ComPlusMigrate
DllGetClassObject

msasn1

ASN1BERDecCharString
ASN1BERDecBool

ntshrui

GetNetResourceFromLocalPathA
IsPathSharedW
IsPathSharedA
GetLocalPathFromNetResourceA
IsFolderPrivateForUser

crypt32

CertDeleteCRLFromStore
CertFindAttribute
CertCompareCertificate
CertCreateCRLContext
CertCloseStore

uxtheme

CloseThemeData
GetThemeInt
GetThemeTextMetrics
GetThemeEnumValue
SetWindowTheme
OpenThemeData
IsThemeActive
GetThemeColor
DrawThemeEdge

Sections

.code
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 805KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

08776ff7c702f4dbdf030927ee3b520b

Headers

DLL Characteristics

File Characteristics

Imports

dsprop

wtsapi32

kernel32

clbcatq

msasn1

ntshrui

crypt32

uxtheme

Sections

.code Size: 42KB - Virtual size: 41KB

.rsrc Size: 805KB - Virtual size: 2.2MB

.code
Size: 42KB - Virtual size: 41KB

.rsrc
Size: 805KB - Virtual size: 2.2MB