04f8e100cd4b79ffbdb9881dc4d04a4f0dff46bab770a6f2603adadec3380779

General

Target

04f8e100cd4b79ffbdb9881dc4d04a4f0dff46bab770a6f2603adadec3380779
Size

32KB
MD5

24a0f42480a3237713db40280703dde8
SHA1

e23aef7b96e678d4dfd0ac81c0bde7c088122f8c
SHA256

04f8e100cd4b79ffbdb9881dc4d04a4f0dff46bab770a6f2603adadec3380779
SHA512

cf1cec0a0254e2de501dd18fcdab7ba50e0818ac67a4eea7cfc700ca222b0bdc92c378628742c220c79efd4a7abb556185696e8e2cdcbc082a1dec2bae20f811
SSDEEP

768:aNK1Q/pFakHr4O2qlQTCRBUpisc2pR+hAQfN:aNK1exEX2RBOUAR+Pl

Score

N/A

Malware Config

Signatures

Files

04f8e100cd4b79ffbdb9881dc4d04a4f0dff46bab770a6f2603adadec3380779
.exe windows x86

406c823817f4bfaf61e3479665358c0b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

ReadConsoleA
GetConsoleTitleA
GetCurrentDirectoryA
HeapValidate
FormatMessageA
GetGeoInfoA
GetPrivateProfileIntA
WaitForSingleObject
CreateDirectoryA
GetAtomNameA
UpdateResourceA
GetProcessHeap
CompareStringA
CreateNamedPipeA
GetBinaryTypeA
GetConsoleAliasW
GetProcessTimes
LoadLibraryA
GetFullPathNameA
SetFileAttributesW
GetComputerNameA
GetProcAddress
lstrcpynW
GetCurrentProcess

mprapi

MprInfoBlockFind
MprAdminConnectionEnum
MprAdminDeviceEnum
MprAdminBufferFree

msimg32

AlphaBlend
vSetDdrawflag
TransparentBlt
GradientFill
DllInitialize

certcli

CACloseCA
CAEnumFirstCA
CACloseCertType
CAEnumNextCA

advapi32

RegCloseKey
CreateProcessAsUserA
CreateServiceA
RegSaveKeyA
IsValidSid
RegEnumKeyA
InitializeSid
RegDeleteValueA
IsTextUnicode
IsValidSecurityDescriptor

modemui

CountryRunOnce
InvokeControlPanel

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 147B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

406c823817f4bfaf61e3479665358c0b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

mprapi

msimg32

certcli

advapi32

modemui

Sections

.text Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 147B

.rsrc Size: 21KB - Virtual size: 21KB

.text
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 147B

.rsrc
Size: 21KB - Virtual size: 21KB