220643a29edb19fbbbcbc168755b766ca91575c8c5562a6ef561d1fd598d9e8b

Sharing

Copy URL Twitter E-mail

General

Target

220643a29edb19fbbbcbc168755b766ca91575c8c5562a6ef561d1fd598d9e8b
Size

17KB
MD5

a36ccfa9dab69aa745c8023331dcf0b6
SHA1

03f200ac9b5d91e1e679639c4a2658d1b20e6da3
SHA256

220643a29edb19fbbbcbc168755b766ca91575c8c5562a6ef561d1fd598d9e8b
SHA512

72de3a04db487dfcec91d9f4acf46cbbf3e06d45fb8f460f9da07bbd4a7cdef5bea308452d6c3dd6dbeb698b9fddecb85ae6fb4fd8d5cfb2c7181a389648243c
SSDEEP

384:NJyUsvy1fkj+3I6v//npWAdSzc2Z8vMk1wx8ZjOAqRwjHzkAn7:mUsI13I6v//npvqclkJxKppl7

Score

N/A

Malware Config

Signatures

Files

220643a29edb19fbbbcbc168755b766ca91575c8c5562a6ef561d1fd598d9e8b
.zip
unharboured.scr
.exe windows x86

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
CreateDirectoryA
GetPrivateProfileStructW
WaitForSingleObject
WriteConsoleA
GetConsoleTitleA
UpdateResourceA
GetTimeFormatA
LoadLibraryA
DeviceIoControl
GetNumberFormatW
GetCurrentDirectoryA
CloseHandle
SetFilePointer
GetTickCount
GetBinaryTypeA
SetCurrentDirectoryW
lstrcpynA
CompareStringA
GetProcAddress
CreateNamedPipeA
GetProcessHeap
GetDateFormatA
GetSystemTimeAsFileTime
GetComputerNameA
SetEnvironmentVariableW
GetCurrentProcess
GetPrivateProfileIntA
HeapValidate
GetConsoleAliasW
GetProcessId

nddeapi

NDdeShareEnumA
NDdeShareGetInfoA
NDdeShareDelA
NDdeShareSetInfoA
NDdeShareAddA

shlwapi

UrlIsOpaqueA
UrlIsNoHistoryW
UrlGetPartA
UrlIsA
PathCompactPathA
UrlGetLocationA
UrlCreateFromPathA
UrlHashA
PathCommonPrefixA
UrlCompareA
UrlEscapeA
UrlUnescapeA
PathCombineA

wtsapi32

WTSEnumerateServersA
WTSUnRegisterSessionNotification
WTSFreeMemory
WTSVirtualChannelRead
WTSWaitSystemEvent
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSSetUserConfigW
WTSEnumerateProcessesA
WTSEnumerateSessionsW
WTSSendMessageA
WTSVirtualChannelWrite
WTSVirtualChannelPurgeInput
WTSQueryUserToken
WTSQuerySessionInformationA
WTSSetSessionInformationW
WTSVirtualChannelQuery

msimg32

DllInitialize
AlphaBlend
GradientFill
TransparentBlt
vSetDdrawflag

user32

wsprintfA
GetWindowTextA
DrawIcon
DialogBoxParamA
IsZoomed
SetCursorPos
GetMessageA
PeekMessageA
CreateWindowExA
GetPropA
GetWindowLongA
PostMessageA
IsWindow
GetCaretPos
IsCharLowerW
DispatchMessageA
CharToOemA

modemui

CountryRunOnce
InvokeControlPanel

certcli

CACloseCA
CACloseCertType
CAEnumFirstCA
CAEnumNextCA

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

39dbc9bb8e435aa4a792b6f8d9ba63b9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

nddeapi

shlwapi

wtsapi32

msimg32

user32

modemui

certcli

Sections

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 1024B - Virtual size: 626B

.rsrc Size: 13KB - Virtual size: 13KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 1024B - Virtual size: 626B

.rsrc
Size: 13KB - Virtual size: 13KB

.reloc
Size: 2KB - Virtual size: 2KB