9fbcf51d33b49891d9e214369a5137c13524543b7b46c0c00e7f996a08ff844d

General

Target

9fbcf51d33b49891d9e214369a5137c13524543b7b46c0c00e7f996a08ff844d
Size

941KB
MD5

b2212d446b4d3e915ec0de4060f2ca68
SHA1

703cc9441515c0c52fe048d96c85b4dd1d6b1d9f
SHA256

9fbcf51d33b49891d9e214369a5137c13524543b7b46c0c00e7f996a08ff844d
SHA512

2c9a87a1467e64628a8afa078b38c2d4d1abaab3363d654032ce9deaf357d6b10335f81414f684e3ba4fee89e41bf12aa68eb07e4dc93977582e47a2ec4e5b39
SSDEEP

24576://mkoc5T2DYq4w2HeMuu5vRqJZ1JfhQ5V:G1c4DYq0HjqJBwV

Score

N/A

Malware Config

Signatures

Files

9fbcf51d33b49891d9e214369a5137c13524543b7b46c0c00e7f996a08ff844d
.exe windows x86

2cf769fe3e99da58cd1653296bdae376

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

wsprintfA
GetMessageW
PostMessageA
DialogBoxParamA
CreateWindowExA
LoadImageA
SetFocus
IsZoomed
DrawIcon
GetWindowTextA
SetCursorPos

certcli

CACloseCA
CAEnumFirstCA

kernel32

lstrcmpiA
FileTimeToLocalFileTime
GetLocaleInfoA
GetProcessHeap
GetProcAddress
QueryDosDeviceA
ResetEvent
GetVersionExA
InterlockedExchange
DeviceIoControl
OpenMutexA
GetSystemInfo
SetStdHandle
VirtualQuery
GetFullPathNameA
GetTickCount
lstrcpynA
GetModuleHandleA
FormatMessageA
GetLastError
CreateNamedPipeW
GetComputerNameW
GetEnvironmentVariableW
GetCurrentDirectoryW
CreateMutexA
GetCurrentProcess
GetShortPathNameA

wtsapi32

WTSOpenServerA
WTSSetSessionInformationA
WTSQueryUserToken
WTSVirtualChannelOpen
WTSVirtualChannelWrite
WTSFreeMemory
WTSSendMessageA
WTSQuerySessionInformationA
WTSSetUserConfigA
WTSEnumerateSessionsA
WTSWaitSystemEvent
WTSLogoffSession
WTSCloseServer
WTSVirtualChannelClose
WTSUnRegisterSessionNotification
WTSVirtualChannelRead
WTSRegisterSessionNotification

Sections

.text
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 904KB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2cf769fe3e99da58cd1653296bdae376

Headers

File Characteristics

Imports

user32

certcli

kernel32

wtsapi32

Sections

.text Size: 29KB - Virtual size: 28KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 904KB - Virtual size: 2.4MB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 29KB - Virtual size: 28KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 904KB - Virtual size: 2.4MB

.reloc
Size: 3KB - Virtual size: 2KB