58996dc3da790c147f688f9f1b488fdda07a161a95938be94b31ec07984717d9

Sharing

Copy URL Twitter E-mail

General

Target

58996dc3da790c147f688f9f1b488fdda07a161a95938be94b31ec07984717d9
Size

810KB
MD5

85fc58e9eb51a7439b9863cb7507df3c
SHA1

fe3c221e62a7a141380eefc586525242ce875d97
SHA256

58996dc3da790c147f688f9f1b488fdda07a161a95938be94b31ec07984717d9
SHA512

59e429f1592221d477072eb9d83a8b51ccc2c149eaa57ff026bf6bb2ea064c44820660f5d1b7641b42dc6dca4052cc5e30086554eda914b96569e3a4b35e3188
SSDEEP

24576:QFnlVZu76wd+U3w6CaqPObvq4vwK1hfX:Q7HuWS+SN8Obvq4vwq

Score

N/A

Malware Config

Signatures

Files

58996dc3da790c147f688f9f1b488fdda07a161a95938be94b31ec07984717d9
.exe windows x86

e1fdfae4ca5ac42d560920be4d520ebe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DecodeSystemPointer
IsBadStringPtrA
IsBadWritePtr
lstrcmpA
GetPrivateProfileSectionA
CreateSemaphoreA
lstrcmpiA
GetProcAddress
FormatMessageA
FileTimeToLocalFileTime
GetModuleFileNameA
CreateTimerQueue
VirtualProtectEx
LoadLibraryA
SetFileAttributesA
MoveFileA
GetProcessHeap
SetCurrentDirectoryA

msctf

TF_CreateThreadMgr
TF_GetInputScope

clbcatq

ComPlusMigrate
DllGetClassObject
SetSetupSave
CheckMemoryGates

dsprop

ReportError
MsgBox
FindSheet
CheckADsError
ErrMsg

shell32

DllUnregisterServer
StrChrA
SHCreateShellItem
FindExecutableA
SHGetMalloc

wtsapi32

WTSEnumerateProcessesA
WTSQueryUserConfigA
WTSSendMessageA
WTSSetUserConfigA
WTSCloseServer
WTSVirtualChannelWrite
WTSVirtualChannelOpen
WTSRegisterSessionNotification
WTSFreeMemory
WTSVirtualChannelRead

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e1fdfae4ca5ac42d560920be4d520ebe

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msctf

clbcatq

dsprop

shell32

wtsapi32

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 795KB - Virtual size: 2.2MB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 795KB - Virtual size: 2.2MB

.reloc
Size: 1KB - Virtual size: 4KB