02cfc94edcf40cb62acc1ca0a107f3e343dd87a9dff29bb7d20c3abf38fa3b5a

General

Target

02cfc94edcf40cb62acc1ca0a107f3e343dd87a9dff29bb7d20c3abf38fa3b5a
Size

260KB
MD5

d99e78eb03eb022975375e90a51b3dff
SHA1

6a890548cb598f5680170fb7a3c914081c66ce43
SHA256

02cfc94edcf40cb62acc1ca0a107f3e343dd87a9dff29bb7d20c3abf38fa3b5a
SHA512

b6bff40513073072c40423d539d65f0aa39c331146d5bc1aeb23a2d154db21aaf150d4e14657ce0399ebb263641e5a28ed2ccee4429749b876dc4a0f8accdd60
SSDEEP

6144:ruP5xO2kzr0lUNy3EFEeV3V6TJ+/AngOAe4WKrf2BKGL64gl/8:Exkv0lF3EFEe5VsAInn4W0fDGp+8

Score

N/A

Malware Config

Signatures

Files

02cfc94edcf40cb62acc1ca0a107f3e343dd87a9dff29bb7d20c3abf38fa3b5a
.exe windows x86

45b485f966c9f840068425a9efdb430b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSOpenServerA
WTSLogoffSession
WTSCloseServer

msimg32

GradientFill
AlphaBlend
TransparentBlt

kernel32

FreeEnvironmentStringsA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoW
GetTimeZoneInformation
SetConsoleCtrlHandler
SetEndOfFile
WriteConsoleA
VirtualProtect
GetLogicalDriveStringsA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
InterlockedDecrement
InterlockedIncrement
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetCurrentThread
InitializeCriticalSection
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
SetFilePointer
WriteFile
HeapFree
CloseHandle
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
FatalAppExitA
Sleep
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetProcAddress
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
ReadFile

Sections

.text
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

45b485f966c9f840068425a9efdb430b

Headers

File Characteristics

Imports

wtsapi32

msimg32

kernel32

Sections

.text Size: 68KB - Virtual size: 67KB

.rdata Size: 92KB - Virtual size: 88KB

.data Size: 96KB - Virtual size: 158KB

.text
Size: 68KB - Virtual size: 67KB

.rdata
Size: 92KB - Virtual size: 88KB

.data
Size: 96KB - Virtual size: 158KB