thread[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

thread.exe
Size

68KB
MD5

1a1521fd6bcf797fcb7fcfbf6be6a62a
SHA1

72ccb520752e7ed6b39172b75140bacccc0ce164
SHA256

360fb82201d4a425e1cd0c43fad75df074be0a231d2c73197f34ce608f5d6af5
SHA512

260e5425dda97ea7b78d8da44070f88512ae16186c2e8fb8a7d08f2caf1ef0b00f8abb2f6b66761514510c6037b974acdbbf99a27ac470df611ccdacccc7d58e
SSDEEP

1536:/JUOUyGa9RLPGqkjhUxDCUiESsk1XWyNw:RU7ynPGqcq8rh3Nw

Score

N/A

Malware Config

Signatures

Files

thread.exe
.exe windows x86

7d053526de373248a57ccaf4e2c27ac2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateRemoteThread
Thread32First
TerminateThread
Sleep
FormatMessageW
Thread32Next
GetCurrentThread
GetProcAddress
QueueUserAPC
CreateToolhelp32Snapshot
CloseHandle
LocalFree
GetModuleHandleW
SleepEx
GetCurrentProcess
SetThreadContext
GetLastError
GetThreadContext
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
DecodePointer
EncodePointer
GetCommandLineW
HeapSetInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
WriteFile
GetStdHandle
GetModuleFileNameW
RaiseException
ExitProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
RtlUnwind
SetFilePointer
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
LoadLibraryW
IsProcessorFeaturePresent
FlushFileBuffers
LCMapStringW
GetStringTypeW
SetStdHandle
WriteConsoleW
CreateFileW

advapi32

ImpersonateLoggedOnUser
SetThreadToken
OpenThreadToken
OpenProcessToken
RevertToSelf

userenv

UnloadUserProfile

Sections

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7d053526de373248a57ccaf4e2c27ac2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

userenv

Sections

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 11KB

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 11KB

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 5KB - Virtual size: 5KB