ac17e49bfc785b0ee12bc2af0e229c00aff47fffb266e1f2410cd0678882e503

General

Target

ac17e49bfc785b0ee12bc2af0e229c00aff47fffb266e1f2410cd0678882e503
Size

264KB
MD5

e28368993f4b50f171304624e837d120
SHA1

2a62102e9f79e78d3bea281cafe2b4584ef053e9
SHA256

ac17e49bfc785b0ee12bc2af0e229c00aff47fffb266e1f2410cd0678882e503
SHA512

e4fea820c0f14e87e81b1b25b7cd62151bf3635be04a3e764e2494c7f2d15d5ef4c346ee364ea7ac92c2162291d8e6675ca31a076b26c96ddc77ead492337b31
SSDEEP

6144:5CsLcMg6K0rvHCV5W5z53MghbTr4wi0shJ9D3H0O:5Csvg6trv5zWghbQwiJJ9QO

Score

N/A

Malware Config

Signatures

Files

ac17e49bfc785b0ee12bc2af0e229c00aff47fffb266e1f2410cd0678882e503
.exe windows x86

5503cca5e5230b64b445be62cb15110e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wtsapi32

WTSUnRegisterSessionNotification
WTSEnumerateSessionsW
WTSFreeMemory
WTSQuerySessionInformationW
WTSRegisterSessionNotification

msimg32

TransparentBlt

oleacc

LresultFromObject
AccessibleObjectFromEvent

kernel32

GetSystemTimeAsFileTime
GetStdHandle
GetACP
lstrlenW
UnhandledExceptionFilter
GetSystemTime
HeapAlloc
HeapFree
InterlockedExchange
HeapReAlloc
LoadLibraryExW
InterlockedCompareExchange
Sleep
RaiseException
MultiByteToWideChar
lstrlenA
GetModuleHandleA
GetCurrentProcess
HeapSize
LocalAlloc
GetTickCount
HeapFree
GetCurrentThreadId
GetStartupInfoA
WideCharToMultiByte
EnumResourceTypesW
GetProcessHeap
HeapDestroy
SystemTimeToFileTime
LoadLibraryW
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
LZOpenFileA
GetThreadLocale
QueryPerformanceCounter
CreateFileW
CreateProcessA
GetCurrentProcessId
GetLocaleInfoA
CloseHandle
GetEnvironmentVariableA
WriteFile
lstrcpynW

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5503cca5e5230b64b445be62cb15110e

Headers

File Characteristics

Imports

wtsapi32

msimg32

oleacc

kernel32

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 2KB - Virtual size: 141KB

.data Size: 203KB - Virtual size: 202KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 2KB - Virtual size: 141KB

.data
Size: 203KB - Virtual size: 202KB

.rsrc
Size: 512B - Virtual size: 4KB