aa2ebb9abf516d6a530683727d18aea01fab4698d908904fc8e622fec00a8aca

General

Target

aa2ebb9abf516d6a530683727d18aea01fab4698d908904fc8e622fec00a8aca
Size

97KB
MD5

0912d7f53812a0ab61e0c1001eb107f0
SHA1

a9f1039a88b5ccd210c9dbf227ea23bcb562993d
SHA256

aa2ebb9abf516d6a530683727d18aea01fab4698d908904fc8e622fec00a8aca
SHA512

aa21ee7607c8d928550ef9cd47638f65ecade923629d072fe91bd9a0a6e23853eb585d75917273ef7104e91f2da032db736764d3d1f09124e2bec92332049f7f
SSDEEP

3072:7W+EGGxgfhI/5KOEwvDRRVkT6KsRPKfXE:7NhyuhIBpRRVgsRP2

Score

N/A

Malware Config

Signatures

Files

aa2ebb9abf516d6a530683727d18aea01fab4698d908904fc8e622fec00a8aca
.exe windows x86

b37123a8f0e688db4ac07e23d05cf182

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSEnumerateSessionsA
WTSWaitSystemEvent
WTSFreeMemory
WTSVirtualChannelPurgeInput
WTSEnumerateProcessesA
WTSLogoffSession
WTSSendMessageA
WTSOpenServerA
WTSCloseServer
WTSEnumerateServersA
WTSQuerySessionInformationA
WTSRegisterSessionNotification
WTSQueryUserToken

kernel32

CopyFileA
IsBadStringPtrW
OpenJobObjectA
GetDiskFreeSpaceA
Heap32First
GetNumberFormatA
WriteFile
GetFileSize
QueryDosDeviceA
CreateMutexW
GetProcAddress
FileTimeToSystemTime
GetStartupInfoA
CloseHandle
CreateFileA
ReplaceFileA
ReadFile
WaitForSingleObjectEx
OpenMutexA
CreateHardLinkA
GetProcessHeap
GetExpandedNameA
InterlockedDecrement
GetTickCount
DeleteFileW
MoveFileExW
GetLogicalDriveStringsA
OpenEventW
GetLocaleInfoA
TlsGetValue
SetEnvironmentVariableA
GetSystemDirectoryA
GetModuleHandleA
CompareStringW
CreateDirectoryA

eappcfg

EapHostPeerConfigBlob2Xml
EapHostPeerConfigXml2Blob

Sections

.text
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 432B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b37123a8f0e688db4ac07e23d05cf182

Headers

File Characteristics

Imports

wtsapi32

kernel32

eappcfg

Sections

.text Size: 89KB - Virtual size: 88KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 432B

.text
Size: 89KB - Virtual size: 88KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 432B