be648a9b44410044064f8f26c99eb0de4b62aeddeb4a821f744d60c0f339dc9b

General

Target

be648a9b44410044064f8f26c99eb0de4b62aeddeb4a821f744d60c0f339dc9b
Size

108KB
MD5

667e55fd4fa5b79ad1d0c4b52080090b
SHA1

85b044b88862f680996dfa22761c119d408f5442
SHA256

be648a9b44410044064f8f26c99eb0de4b62aeddeb4a821f744d60c0f339dc9b
SHA512

ff006261d523d8645da9cc1d947621c558adb37825a7cd61159c8a81423732567e53aceca894c9d0c0974fc6701fb7ef66fb30a42cd3dac0687c6efe12d8e1c2
SSDEEP

3072:XVkBURutZw3zCCkJKk+jTXrPOyg7b7K2z+J:WuR0w3zCCZk+jTXzhWb22z+J

Score

N/A

Malware Config

Signatures

Files

be648a9b44410044064f8f26c99eb0de4b62aeddeb4a821f744d60c0f339dc9b
.exe windows x86

1777e1092af2e7a21f668f6a55b934ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetProcAddress
CreateThread
lstrcpyA
SwitchToThread
GetProcessHeap
WaitForSingleObject
HeapAlloc
CreateProcessW
SetErrorMode
ExitProcess
lstrlenA

ntdll

DbgPrint

user32

FindWindowA
CreateWindowExA
GetMessageW
DispatchMessageW
SetWindowPos
RegisterClassExA
SetFocus
TranslateMessage
ShowWindow
MessageBoxW
DefWindowProcW
MessageBoxA
UpdateWindow

ole32

CoInitialize

comctl32

ord17

powrprof

IsPwrShutdownAllowed
GetPwrCapabilities
IsPwrHibernateAllowed

wintrust

WintrustGetRegPolicyFlags

imagehlp

ImageEnumerateCertificates

Sections

CODE
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kyt
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1777e1092af2e7a21f668f6a55b934ce

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

user32

ole32

comctl32

powrprof

wintrust

imagehlp

Sections

CODE Size: 102KB - Virtual size: 102KB

.rdata Size: 1KB - Virtual size: 1KB

.kyt Size: 512B - Virtual size: 482B

DATA Size: 512B - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 80KB

CODE
Size: 102KB - Virtual size: 102KB

.rdata
Size: 1KB - Virtual size: 1KB

.kyt
Size: 512B - Virtual size: 482B

DATA
Size: 512B - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 80KB