2914d1a7dd50b6b21967a053dd5ea47aeb3818783f715b7f3b816ca461dfeb5c

Sharing

Copy URL Twitter E-mail

General

Target

2914d1a7dd50b6b21967a053dd5ea47aeb3818783f715b7f3b816ca461dfeb5c
Size

1.8MB
MD5

7270faf5b07a0629155d5cd69f8062d1
SHA1

841599cd657485fe629947e9bbfce763f8a9d04d
SHA256

2914d1a7dd50b6b21967a053dd5ea47aeb3818783f715b7f3b816ca461dfeb5c
SHA512

5e16528a9cff7ef3bbded605b985ef74b452fafd4b910ff7da965ec6cea997dc48dcb307dbbeb2219e2a108bf44a33cac7f39a5bc7ad7d99d2d63a55013e4189
SSDEEP

49152:vKuaBBaEDLp4OIvhhBymR5IaDkOQh8IW7zODXqc7fvHDDDDDDDDYI:Sua6EDL+4mIaDVmW7gXdAI

Score

N/A

Malware Config

Signatures

Files

2914d1a7dd50b6b21967a053dd5ea47aeb3818783f715b7f3b816ca461dfeb5c
.exe windows x86

e467d649157897b0b353ded57853907e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FormatMessageA
DeviceIoControl
GetCurrentProcess
ReadConsoleA
SetEnvironmentVariableW
GetCurrentDirectoryA
GetAtomNameA
GetConsoleAliasW
CloseHandle
GetConsoleTitleA
CreateNamedPipeA
GetTimeFormatA
GetBinaryTypeA
lstrcpynA
UpdateResourceA
LoadLibraryA
lstrcmpiA
WaitForSingleObject
CompareStringA
GetProcAddress
HeapValidate
GetPrivateProfileIntA

rsaenh

CPCreateHash
CPEncrypt
CPGenKey
CPDecrypt
CPDeriveKey

msimg32

DllInitialize
vSetDdrawflag
GradientFill
TransparentBlt

modemui

drvGetDefaultCommConfigA
drvSetDefaultCommConfigA
CountryRunOnce
InvokeControlPanel
drvCommConfigDialogA

wtsapi32

WTSVirtualChannelOpen
WTSQuerySessionInformationA
WTSFreeMemory
WTSEnumerateSessionsW
WTSSetSessionInformationA
WTSVirtualChannelQuery
WTSEnumerateProcessesA
WTSVirtualChannelClose
WTSSendMessageA
WTSVirtualChannelPurgeInput
WTSLogoffSession

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e467d649157897b0b353ded57853907e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

rsaenh

msimg32

modemui

wtsapi32

Sections

.text Size: 27KB - Virtual size: 27KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 588B

.tls Size: 512B - Virtual size: 84B

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 27KB - Virtual size: 27KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 588B

.tls
Size: 512B - Virtual size: 84B

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

.reloc
Size: 5KB - Virtual size: 5KB