ff07f961a8afcd7354f711b69015db9b2c3cec4f7cf5eef0113032e0c1042599

General

Target

ff07f961a8afcd7354f711b69015db9b2c3cec4f7cf5eef0113032e0c1042599
Size

409KB
MD5

63440cd637a6d6c3d8ed0543458ba163
SHA1

7b3ffff28346b69f80a970106ee9bccecd47bd8d
SHA256

ff07f961a8afcd7354f711b69015db9b2c3cec4f7cf5eef0113032e0c1042599
SHA512

025395cceae7e7c7e575358be37144eb64eb2d92e0560962e283ef6c63e27c45555e4ea089f38559dfc7aea5231ab61e0cc83603b7824a3eca582e6a058b1011
SSDEEP

6144:0US5tOURzNMWr3Q5NTIdR2vFFwuqkIHv+JhPxRed0PssRic/qDAGxXfP+A8/aD3t:0t5bNMpN8Tc0uqky+zPxMQ3CXxX+8Df

Score

N/A

Malware Config

Signatures

Files

ff07f961a8afcd7354f711b69015db9b2c3cec4f7cf5eef0113032e0c1042599
.exe windows x86

1fcad92c412036c86019893749aed054

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetFileAttributesW
GetPrivateProfileIntA
GetModuleHandleA
CloseHandle
GetPrivateProfileSectionA
HeapFree
FindClose
GlobalLock
CreateEventA
GetCurrentProcess
GetFileAttributesW
GetStringTypeA
CreateDirectoryW
GlobalFlags
RemoveDirectoryA
GetStdHandle
DeviceIoControl
SetLastError
GetCurrentThread
GetVersionExA
VirtualProtectEx

shell32

SHGetSettings
DuplicateIcon
SHGetDiskFreeSpaceA
SHFree
ShellAboutA
ExtractIconA
SHGetMalloc
DragFinish
StrChrA
ShellMessageBoxA
DllUnregisterServer
DragQueryFileA
DragAcceptFiles

ntmarta

AccConvertAclToAccess
AccConvertSDToAccess
AccGetExplicitEntries
AccFreeIndexArray

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 400KB - Virtual size: 872KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1fcad92c412036c86019893749aed054

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 512B

.rsrc Size: 400KB - Virtual size: 872KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 512B

.rsrc
Size: 400KB - Virtual size: 872KB

.import
Size: 512B - Virtual size: 372B