30576594eb39fd0a870536012cb8da35b9203c0371d3ae22a16523b95ad0eb44

General

Target

30576594eb39fd0a870536012cb8da35b9203c0371d3ae22a16523b95ad0eb44
Size

108KB
MD5

0572e02ad60b2ee4d104c243df490fa1
SHA1

9e7126fc694ae04fa52ad8cfb1b34654b123f7cb
SHA256

30576594eb39fd0a870536012cb8da35b9203c0371d3ae22a16523b95ad0eb44
SHA512

57609079505b78be3069eace0434efa31eae1a7d5965935ba3f0c61de903225bb552db7d2ff8e51fa3da213266f1a27d2edf2e3a227c83f65b517a2ad7f682f3
SSDEEP

3072:pVkBURutZw3zCCkJKk+jTXrPOyg7b7K2z+J:4uR0w3zCCZk+jTXzhWb22z+J

Score

N/A

Malware Config

Signatures

Files

30576594eb39fd0a870536012cb8da35b9203c0371d3ae22a16523b95ad0eb44
.exe windows x86

1777e1092af2e7a21f668f6a55b934ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetProcAddress
CreateThread
lstrcpyA
SwitchToThread
GetProcessHeap
WaitForSingleObject
HeapAlloc
CreateProcessW
SetErrorMode
ExitProcess
lstrlenA

ntdll

DbgPrint

user32

FindWindowA
CreateWindowExA
GetMessageW
DispatchMessageW
SetWindowPos
RegisterClassExA
SetFocus
TranslateMessage
ShowWindow
MessageBoxW
DefWindowProcW
MessageBoxA
UpdateWindow

ole32

CoInitialize

comctl32

ord17

powrprof

IsPwrShutdownAllowed
GetPwrCapabilities
IsPwrHibernateAllowed

wintrust

WintrustGetRegPolicyFlags

imagehlp

ImageEnumerateCertificates

Sections

CODE
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kyt
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1777e1092af2e7a21f668f6a55b934ce

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

user32

ole32

comctl32

powrprof

wintrust

imagehlp

Sections

CODE Size: 102KB - Virtual size: 102KB

.rdata Size: 1KB - Virtual size: 1KB

.kyt Size: 512B - Virtual size: 482B

DATA Size: 512B - Virtual size: 8KB

.rsrc Size: 512B - Virtual size: 80KB

CODE
Size: 102KB - Virtual size: 102KB

.rdata
Size: 1KB - Virtual size: 1KB

.kyt
Size: 512B - Virtual size: 482B

DATA
Size: 512B - Virtual size: 8KB

.rsrc
Size: 512B - Virtual size: 80KB