abfddad950a7bae4ce23eafe9176a00d1465959249ec3134ea8af554fc3165e1

General

Target

abfddad950a7bae4ce23eafe9176a00d1465959249ec3134ea8af554fc3165e1
Size

496KB
MD5

20567834de23b263dd15b15c43e0039b
SHA1

3ede5c3a91b2d7fca304ac6559b484e3832e4361
SHA256

abfddad950a7bae4ce23eafe9176a00d1465959249ec3134ea8af554fc3165e1
SHA512

ebb7db84d52000d76e47abc57995a87a873ef4fce0f061c0dddf372c3757ff2058a89d338fad95a69a7ae7d97e1398c5702170902c37389cc7ee152a8756d854
SSDEEP

12288:0KY71Cw/rGvk+QdmAo4E5UqNAKk4Rb7Uh+7/K7al:JYJ5N3dh3EVN5NXj/3

Score

N/A

Malware Config

Signatures

Files

abfddad950a7bae4ce23eafe9176a00d1465959249ec3134ea8af554fc3165e1
.exe windows x86

9b4157691c208e07616ea90bf44575c6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DrawIcon
LoadImageA
LoadCursorA
CreateWindowExA
IsCharLowerA
DispatchMessageA
PostMessageA
GetWindowLongA
DialogBoxParamA
IsDialogMessageA
SetFocus
PeekMessageA

wtsapi32

WTSVirtualChannelOpen
WTSVirtualChannelWrite
WTSVirtualChannelClose
WTSWaitSystemEvent
WTSQuerySessionInformationA
WTSSetSessionInformationA
WTSQueryUserToken
WTSEnumerateServersA
WTSVirtualChannelPurgeInput
WTSOpenServerA
WTSEnumerateSessionsA

kernel32

GetProcessTimes
SetEndOfFile
GetTickCount
GetDiskFreeSpaceA
CloseHandle
GetBinaryTypeA
GetConsoleTitleA
CreateEventW
DeviceIoControl
GetProcessHeap
HeapValidate
GetDriveTypeA
GetCurrentDirectoryA
GetAtomNameA
OpenFileMappingW
InterlockedExchange
CreateNamedPipeA
CopyFileA
GetEnvironmentVariableA
GetLogicalDrives
GetSystemInfo
ReplaceFileW
FindResourceA
FileTimeToLocalFileTime
GetProcAddress
GetModuleHandleA
VirtualQueryEx
GetFileType
GetVolumePathNameW
CompareStringA
SetFileAttributesA
CreateMutexA
FormatMessageA
GetFullPathNameA
GetComputerNameW
CreateSemaphoreA
PurgeComm
lstrcpynA

cabinet

FDIIsCabinet
Extract
FCICreate
FCIAddFile
FCIDestroy

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 478KB - Virtual size: 478KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9b4157691c208e07616ea90bf44575c6

Headers

File Characteristics

Imports

user32

wtsapi32

kernel32

cabinet

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 478KB - Virtual size: 478KB

.data Size: 4KB - Virtual size: 96KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 478KB - Virtual size: 478KB

.data
Size: 4KB - Virtual size: 96KB

.reloc
Size: 2KB - Virtual size: 2KB