82fcb5b84aef78a9668dbdab283b928400b2225bd1080c8d4d4b2abfc40f9b1d

General

Target

82fcb5b84aef78a9668dbdab283b928400b2225bd1080c8d4d4b2abfc40f9b1d
Size

220KB
MD5

0785e3f279c2e7a0192d35e7e90eff72
SHA1

3455453eaf4e531376f9e584a8af05459cc1fe91
SHA256

82fcb5b84aef78a9668dbdab283b928400b2225bd1080c8d4d4b2abfc40f9b1d
SHA512

8e81a26327de8df0002a6eff51e251162e1d6f58078309b9c21189820ec0e1e6478a3fce2d12be5bad690e3cf4d8a191a1f4b3da72405b0fa136e64c69e5af92
SSDEEP

3072:6qmLS/OhTnE64T8FBol3l3wxrBI7YFaa4HwoDBLcgZ+aFbwiOmrZyr8GmkYMmIP8:6OWeT8FGRCIEFHfgZtUFsZK8zSn8

Score

N/A

Malware Config

Signatures

Files

82fcb5b84aef78a9668dbdab283b928400b2225bd1080c8d4d4b2abfc40f9b1d
.exe windows x86

70cf51b8d75613228ce68e5e00f8bfb4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSOpenServerA
WTSLogoffSession
WTSEnumerateSessionsA
WTSCloseServer

msimg32

GradientFill
AlphaBlend
TransparentBlt

kernel32

GetCurrentThreadId
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
GetOEMCP
WriteConsoleA
VirtualProtect
GetLogicalDriveStringsA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
FatalAppExitA
VirtualAlloc
HeapReAlloc
IsBadWritePtr
GetCPInfo
GetACP

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 88KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 92KB - Virtual size: 468KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

70cf51b8d75613228ce68e5e00f8bfb4

Headers

File Characteristics

Imports

wtsapi32

msimg32

kernel32

Sections

.text Size: 36KB - Virtual size: 33KB

.rdata Size: 88KB - Virtual size: 86KB

.data Size: 92KB - Virtual size: 468KB

.text
Size: 36KB - Virtual size: 33KB

.rdata
Size: 88KB - Virtual size: 86KB

.data
Size: 92KB - Virtual size: 468KB