d8b31c3723b52ee355d80fec1eb37344e8d2c895463a74c72e662ff1556f894e

Sharing

Copy URL Twitter E-mail

General

Target

d8b31c3723b52ee355d80fec1eb37344e8d2c895463a74c72e662ff1556f894e
Size

851KB
MD5

52f541c7093efe5505a7eaf08daef769
SHA1

8c84239125c0a52997761e123ba76dc219d6cdfa
SHA256

d8b31c3723b52ee355d80fec1eb37344e8d2c895463a74c72e662ff1556f894e
SHA512

2672c33d6dc5126eb09fd4774dd7d3fafede1d86feaf1c836adbcddcb87a89d600fad2df19e55a740768bfc106c0bb1c6816f7bb024d4b1cd55855bb99c3e948
SSDEEP

24576:1v1ZE/sPIn2dDwqJf9UtJipVRK6NceyGwodx:5tI2ttfitJQV86J5wod

Score

N/A

Malware Config

Signatures

Files

d8b31c3723b52ee355d80fec1eb37344e8d2c895463a74c72e662ff1556f894e
.exe windows x86

040f3af72778f7abbae3b9499f8cac92

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcirt

??_8stdiostream@@7Bistream@@@
?sunk_with_stdio@ios@@0HA
??0ofstream@@QAE@HPADH@Z
?sgetc@streambuf@@QAEHXZ
?text@filebuf@@2HB
?sputc@streambuf@@QAEHH@Z
??4ostrstream@@QAEAAV0@ABV0@@Z
??6ostream@@QAEAAV0@J@Z
?setbuf@streambuf@@UAEPAV1@PADH@Z
??0stdiostream@@QAE@PAU_iobuf@@@Z
?write@ostream@@QAEAAV1@PBDH@Z
?setf@ios@@QAEJJ@Z
??0strstreambuf@@QAE@ABV0@@Z
??0strstreambuf@@QAE@PAEH0@Z
?unbuffered@streambuf@@IAEXH@Z
?tie@ios@@QBEPAVostream@@XZ
?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ
??6ostream@@QAEAAV0@N@Z
??_Eistrstream@@UAEPAXI@Z

wtsapi32

WTSTerminateProcess
WTSSendMessageA
WTSQuerySessionInformationA
WTSEnumerateProcessesA
WTSVirtualChannelOpen
WTSSendMessageW
WTSVirtualChannelPurgeOutput
WTSQueryUserToken
WTSVirtualChannelClose
WTSVirtualChannelRead
WTSUnRegisterSessionNotification
WTSCloseServer
WTSLogoffSession
WTSQuerySessionInformationW
WTSOpenServerA
WTSEnumerateSessionsW
WTSEnumerateServersW
WTSVirtualChannelQuery
WTSVirtualChannelPurgeInput
WTSShutdownSystem
WTSSetSessionInformationA
WTSSetSessionInformationW
WTSQueryUserConfigA
WTSEnumerateServersA

kernel32

ReadFileScatter
BaseUpdateAppcompatCache
PulseEvent
QueryPerformanceCounter
GetConsoleHardwareState
GetCommandLineA
GetConsoleCommandHistoryLengthW
TransmitCommChar
ReadConsoleInputExW
SetLastError
GetLargestConsoleWindowSize
GetCurrentThread
CreateNamedPipeA
ReadConsoleA
VirtualAlloc
GetComPlusPackageInstallStatus
GetPriorityClass
GetStartupInfoA
SetFileTime
DebugBreak
LoadLibraryA

user32

SetWindowStationUser
SetWindowTextA
VkKeyScanExA
CallMsgFilter
LoadCursorA
SetActiveWindow
LookupIconIdFromDirectory
GetClipboardSequenceNumber
CharPrevA
FlashWindow
DdeQueryStringW
EnumClipboardFormats
GetClassWord
DdeKeepStringHandle
IsWinEventHookInstalled
GetMenuItemID
SetCapture
ExcludeUpdateRgn
CreateAcceleratorTableA
GetWindowModuleFileNameA

Sections

.text
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

040f3af72778f7abbae3b9499f8cac92

Headers

DLL Characteristics

File Characteristics

Imports

msvcirt

wtsapi32

kernel32

user32

Sections

.text Size: 736KB - Virtual size: 735KB

.rdata Size: 107KB - Virtual size: 107KB

.data Size: 4KB - Virtual size: 1.5MB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 736KB - Virtual size: 735KB

.rdata
Size: 107KB - Virtual size: 107KB

.data
Size: 4KB - Virtual size: 1.5MB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB