e59c844af65b08ebd2646f46018b06c2b9db98ad9d0933fab68034a7d42ad486

Sharing

Copy URL Twitter E-mail

General

Target

e59c844af65b08ebd2646f46018b06c2b9db98ad9d0933fab68034a7d42ad486
Size

41KB
MD5

ca657a84299a74c8abe6a4ac2d3b42bf
SHA1

3bedb50f4126ffaa2e26d896bb3848ab82e3f547
SHA256

e59c844af65b08ebd2646f46018b06c2b9db98ad9d0933fab68034a7d42ad486
SHA512

6081ec67663279647227d2591abda9348ef81b1dbe7bb2c0471ae951b51d28ae264a97bbe708447459f0a37feb6e4e1cd7d1e544403e93e9d920769b387c088b
SSDEEP

768:O2O42heHt3cqhITDLgHdRlI4Pot3yUSJ2yYi1ZKyxSVw37mjQc44n:bH4gt3vvHLlbot3yFnYiZlcY7mb4

Score

N/A

Malware Config

Signatures

Files

e59c844af65b08ebd2646f46018b06c2b9db98ad9d0933fab68034a7d42ad486
.exe windows x86

3d4452cf8ce5210afb03570fec92f92b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

CredIsMarshaledCredentialW
CredFree
CredUnmarshalCredentialW
CredGetSessionTypes
RegQueryValueExW
CredDeleteW
CredWriteW
CredEnumerateW
RegOpenKeyExW
RegCloseKey

kernel32

SetThreadUILanguage
FormatMessageW
GetVersionExW
GetLastError
HeapSetInformation
LocalFree
GetModuleHandleW
WriteFile
WideCharToMultiByte
WriteConsoleW
GetConsoleOutputCP
GetStdHandle
GetFileType
GetCommandLineW
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetTickCount
InterlockedCompareExchange
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
Sleep

msvcrt

?terminate@@YAXXZ
_controlfp
_except_handler4_common
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_resetstkoflw
malloc
free
_wcsicmp
__p__commode
memset

credui

CredUICmdLinePromptForCredentialsW

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 29KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

wpiilid
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3d4452cf8ce5210afb03570fec92f92b

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

msvcrt

credui

Sections

.text Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 3KB

.idata Size: 2KB - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 28KB - Virtual size: 29KB

wpiilid Size: - Virtual size: 4KB

.text
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 3KB

.idata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 28KB - Virtual size: 29KB

wpiilid
Size: - Virtual size: 4KB