bd70ccf870b4450969768c5e2747e52b38a38fcbde788b0a77b203d4304fbccc

General

Target

bd70ccf870b4450969768c5e2747e52b38a38fcbde788b0a77b203d4304fbccc
Size

799KB
MD5

7bb302c4028b46522825822b97a55610
SHA1

3b076f48932d2f68a03248fdeffe954ec8f17abf
SHA256

bd70ccf870b4450969768c5e2747e52b38a38fcbde788b0a77b203d4304fbccc
SHA512

7ca4d85f5ef4884db5e79d1c867e94d03495bdd209b857d90df43c6c4fcf7aca9208f6281958115a1d557f0293c7a3011eadb5dd544935cccd360a6eceb959c5
SSDEEP

24576:otAYCc7RX9oJi5j8AP73MeTboa00SsgDPbLjA:otjztogjNoa0Lj3L

Score

N/A

Malware Config

Signatures

Files

bd70ccf870b4450969768c5e2747e52b38a38fcbde788b0a77b203d4304fbccc
.exe windows x86

cb67f50c4e99af4281740c3bc88eb933

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalFlags
GetStringTypeA
SetLastError
GetVersionExA
GetStdHandle
CreateDirectoryW
RemoveDirectoryA
GlobalLock
VirtualProtectEx
GetFileAttributesW
GetModuleHandleA
HeapFree
CloseHandle
CreateEventA
GetCurrentProcess
GetPrivateProfileIntA
GetPrivateProfileSectionA
FindClose
GetFileAttributesW
GetCurrentThread
DeviceIoControl

shell32

DllUnregisterServer
StrChrA
DuplicateIcon
SHGetSettings
DragQueryFileA
DllUnregisterServer
SHGetMalloc
DragAcceptFiles
ExtractIconA
ShellMessageBoxA
SHFree
DragFinish
ShellAboutA

ntmarta

AccGetExplicitEntries
AccFreeIndexArray
AccConvertAclToAccess
AccConvertSDToAccess

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 789KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb67f50c4e99af4281740c3bc88eb933

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 508B

.rsrc Size: 789KB - Virtual size: 2.1MB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 508B

.rsrc
Size: 789KB - Virtual size: 2.1MB

.import
Size: 512B - Virtual size: 372B