8a128f5122d32a4d6780644a13d3ac81cd85895ca025c5fb6e8bb12e94aa5f94

Sharing

Copy URL

Twitter E-mail

General

Target

8a128f5122d32a4d6780644a13d3ac81cd85895ca025c5fb6e8bb12e94aa5f94
Size

703KB
MD5

521bd488a5de44d84e9d145d3eb8a238
SHA1

a9086094ba2eaa8dc6ff046788ccd441136ad692
SHA256

8a128f5122d32a4d6780644a13d3ac81cd85895ca025c5fb6e8bb12e94aa5f94
SHA512

e34ca05dca5745ba7e38f7414ce5c14407e31e28a3653408be5a9db411f4a1ae1c9f6e637d5147198e32c997bcd38698ac50f7397fa0696db039dce0a458f45b
SSDEEP

12288:Eq24RXH8L52vF+k9/WUqWb+6GqOwGhPcb/ruGe/2DUrkVH1:WmX8L5xk9+f6GqpGRcPuGQmPVH

Score

N/A

Malware Config

Signatures

Files

8a128f5122d32a4d6780644a13d3ac81cd85895ca025c5fb6e8bb12e94aa5f94
.exe windows x86

29c82575239d0cbda27caa574f73b609

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

nddeapi

NDdeShareGetInfoA
NDdeShareDelA
NDdeShareSetInfoA

modemui

drvCommConfigDialogA
InvokeControlPanel
CountryRunOnce

wtsapi32

WTSSetSessionInformationW
WTSVirtualChannelRead
WTSLogoffSession
WTSQuerySessionInformationA
WTSEnumerateServersA
WTSFreeMemory
WTSEnumerateProcessesA
WTSVirtualChannelOpen
WTSVirtualChannelClose
WTSWaitSystemEvent
WTSRegisterSessionNotification
WTSQueryUserToken
WTSOpenServerW
WTSUnRegisterSessionNotification
WTSSetUserConfigW

kernel32

GetPrivateProfileSectionA
ReadConsoleA
FormatMessageA
GetConsoleAliasW
GetStringTypeA
GetModuleHandleA
GetCommandLineA
SetEnvironmentVariableW
GetAtomNameA
WaitForSingleObject
CompareStringA
GetTickCount
SetCurrentDirectoryW
GetTimeFormatA
WriteConsoleA
GetPrivateProfileStructW
GetTickCount
ReadFile
GetCurrentDirectoryA
GetProcessId
GetNumberFormatW
VirtualAllocEx
GetGeoInfoA
SetFilePointer
GetDateFormatA

msimg32

DllInitialize
vSetDdrawflag
AlphaBlend
TransparentBlt

shlwapi

PathCommonPrefixA
UrlUnescapeA
UrlEscapeA
UrlCompareA
UrlGetPartA
UrlGetLocationA
UrlCombineA
UrlIsA
PathCompactPathA
UrlIsNoHistoryW

user32

GetPropA
DrawIcon
GetCaretPos
wsprintfA
GetMessageA
PeekMessageA
IsWindow
PostMessageA
SetCursorPos
IsZoomed
DialogBoxParamA
IsDialogMessageA
DispatchMessageA
LoadCursorA
GetWindowLongA
CreateWindowExA
IsCharLowerW

advapi32

RegCloseKey
RegEnumValueA
OpenServiceA
IsValidSecurityDescriptor
ClearEventLogA
IsValidAcl
RegOpenKeyExA
CreateProcessAsUserA
RegEnumKeyA
IsTextUnicode
RegCreateKeyA
ControlService
CreateServiceA
RegSaveKeyA
RegDeleteKeyA
IsValidSid
RegFlushKey

Sections

.text
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 676KB - Virtual size: 675KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

29c82575239d0cbda27caa574f73b609

Headers

DLL Characteristics

File Characteristics

Imports

nddeapi

modemui

wtsapi32

kernel32

msimg32

shlwapi

user32

advapi32

Sections

.text Size: 23KB - Virtual size: 23KB

.data Size: 2KB - Virtual size: 2KB

.rsrc Size: 676KB - Virtual size: 675KB

.text
Size: 23KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 676KB - Virtual size: 675KB