a454c83344166a11e3e8ccbc1ba41b0719d4366d6fb586eaac2748a9316c39de

General

Target

a454c83344166a11e3e8ccbc1ba41b0719d4366d6fb586eaac2748a9316c39de
Size

62KB
MD5

13bcf3215f2608d644b907dbf21593dd
SHA1

f8629da99b6ab0889123b4de96f96fdda0d1c0fc
SHA256

a454c83344166a11e3e8ccbc1ba41b0719d4366d6fb586eaac2748a9316c39de
SHA512

49c35649d10fe4cbab740b8ccf88416c832f046154fd350a973ad6bb78ba31bc3f91afff702f58de4b01f7fefb20c2d47370812483dad132ba1273a8d1020a2c
SSDEEP

1536:7e1RsalBI+UnRiy4MdD5Gt59IcPLs4zgK7trcqeIhuEJ2:7e1RsalBYnRiJ+5GzPLsjK7Bc/jEJ2

Score

N/A

Malware Config

Signatures

Files

a454c83344166a11e3e8ccbc1ba41b0719d4366d6fb586eaac2748a9316c39de
.exe windows x86

62f79304970d5c002874c36315662023

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
MultiByteToWideChar
ExpandEnvironmentStringsW
VirtualAlloc
WideCharToMultiByte
lstrcpynW
GetModuleHandleA
GetModuleFileNameW
SystemTimeToFileTime
lstrcmpiA
EnterCriticalSection
GetFileAttributesA
CopyFileW
FindNextFileW
LoadLibraryA
GetVersionExW
FindFirstFileW
lstrlenW
GetFileSize
SetFileTime
GetLastError

user32

OpenDesktopA
OpenWindowStationA
SendMessageA
GetKeyState
GetDlgItemTextA
EndDialog
GetClassNameA
PeekMessageA
GetWindowThreadProcessId
GetCursorPos
GetMessageA
DispatchMessageA
GetKeyboardState
ToUnicode
DrawIcon
GetForegroundWindow
LoadCursorA
GetIconInfo
SetProcessWindowStation
CharLowerBuffA

shlwapi

PathFileExistsW
wnsprintfA
SHDeleteKeyA
PathRemoveFileSpecW
wvnsprintfA
PathCombineW
StrCmpNIA
wvnsprintfW
StrCmpNIW
PathFindFileNameW
wnsprintfW
PathMatchSpecW

advapi32

RegEnumKeyExA
CryptDestroyHash
RegQueryValueExA
CryptAcquireContextW
GetUserNameW
CryptReleaseContext
CryptCreateHash
RegCreateKeyExA
DuplicateTokenEx
CryptGetHashParam
CryptHashData

Sections

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

62f79304970d5c002874c36315662023

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shlwapi

advapi32

Sections

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: - Virtual size: 20KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: - Virtual size: 20KB