70a83ee7a3ce98dd3000ccab17a4e7d40541aaade0a7f848a4ebedd7c610764e

Sharing

Copy URL Twitter E-mail

General

Target

70a83ee7a3ce98dd3000ccab17a4e7d40541aaade0a7f848a4ebedd7c610764e
Size

507KB
MD5

427dd8f090525db6995e3f6810ddc460
SHA1

4b974f2bc8f23e631c3ac01b79dddc5c51e2b2c8
SHA256

70a83ee7a3ce98dd3000ccab17a4e7d40541aaade0a7f848a4ebedd7c610764e
SHA512

c295bc7f4d4ed7b75d60d9c59c2e3cc4699f6d3fceb446e28dcdc16d6bb12b363f5055b7341f15d7e825ef5b0e0add4a7300d78d159131d2fbf866931a665685
SSDEEP

12288:mz68Rl5bRw0ZZViWwzs+7wUyvYu3e5zycECheX9H:LYl5qyZ6IfvjYnbsH

Score

N/A

Malware Config

Signatures

Files

70a83ee7a3ce98dd3000ccab17a4e7d40541aaade0a7f848a4ebedd7c610764e
.exe windows x86

06aa352ff4847b99b8870b5dd201b78b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

DragFinish
StrChrA
DllUnregisterServer
FindExecutableA
DragQueryFileA
SHGetFileInfoA
SHFree
DragQueryPoint
DragAcceptFiles
ShellAboutA

msctf

TF_GetInputScope
TF_CreateThreadMgr
TF_InitSystem
TF_CreateLangBarMgr
TF_UninitSystem

kernel32

GetCPInfo
InterlockedExchange
VirtualQuery
MoveFileA
FileTimeToSystemTime
SetFileAttributesA
GetConsoleAliasA
IsBadCodePtr
IsBadStringPtrA
GetEnvironmentVariableA
FileTimeToLocalFileTime
GetModuleFileNameA
HeapCreate
GetModuleHandleA
CancelIo
QueryDosDeviceA
CopyFileA
InterlockedDecrement
GetPrivateProfileSectionA
IsBadWritePtr
CreateMutexA
EncodeSystemPointer
OpenMutexA

dsprop

ReportError
MsgBox
CheckADsError
FindSheet

wtsapi32

WTSEnumerateSessionsA
WTSVirtualChannelOpen
WTSQueryUserConfigA
WTSUnRegisterSessionNotification
WTSQuerySessionInformationA
WTSVirtualChannelRead
WTSCloseServer
WTSLogoffSession
WTSVirtualChannelWrite
WTSSendMessageA
WTSOpenServerA
WTSRegisterSessionNotification

ntshrui

IsPathSharedA
GetLocalPathFromNetResourceA
IsPathSharedW
IsFolderPrivateForUser

crypt32

CertDuplicateStore
CertFindAttribute
CryptFindOIDInfo
CertDeleteCRLFromStore
CertOpenStore
CertFindChainInStore
CertCreateCRLContext
CertAlgIdToOID
CertFreeCRLContext
CertCreateContext

clbcatq

SetSetupSave
DllGetClassObject
SetupOpen
ComPlusMigrate
CheckMemoryGates

Sections

.text
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 782B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 492KB - Virtual size: 1008KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

06aa352ff4847b99b8870b5dd201b78b

Headers

File Characteristics

Imports

shell32

msctf

kernel32

dsprop

wtsapi32

ntshrui

crypt32

clbcatq

Sections

.text Size: 10KB - Virtual size: 10KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 1024B - Virtual size: 782B

.rsrc Size: 492KB - Virtual size: 1008KB

.text
Size: 10KB - Virtual size: 10KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 1024B - Virtual size: 782B

.rsrc
Size: 492KB - Virtual size: 1008KB