f7885a47e783b0f25865db4f8c9c5803979dd35868f41d6d4df7f942bf38fafe

General

Target

f7885a47e783b0f25865db4f8c9c5803979dd35868f41d6d4df7f942bf38fafe
Size

807KB
MD5

71325366d5c9d8aadc4c8692ce417800
SHA1

ae122dd636881580fd08d3f62603069af7e0953c
SHA256

f7885a47e783b0f25865db4f8c9c5803979dd35868f41d6d4df7f942bf38fafe
SHA512

5aab7994a3a1ee12d32d190ba161d04e74c8a302e0b5df13bab1867cb9b1d91c0dd63fd6126e824b99f60465dfc8be33362f81535946b77f8460d78ae13013b2
SSDEEP

12288:n+U6Y/ywhpZ/pD74GU5fV/ZvVge4CprfzaUPon1cxm3ouJ9xRW9XoCYPSSMQpE5B:n+UBywhb/pDExw80oiGXCPSSMKEf

Score

N/A

Malware Config

Signatures

Files

f7885a47e783b0f25865db4f8c9c5803979dd35868f41d6d4df7f942bf38fafe
.exe windows x86

13c4938226d8d2c0ad36edc37bb3048a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadConsoleA
SearchPathA
ReadConsoleA
ReadConsoleA
VirtualProtectEx
CloseHandle
DeleteFileW
PulseEvent
GetStringTypeW
GetDriveTypeA
GetLogicalDrives
FindAtomW
GetPrivateProfileSectionA
ReleaseMutex
GetLastError
Sleep
HeapSize
GetStartupInfoA
LoadLibraryW
TlsGetValue
lstrlenA

uxtheme

CloseThemeData
CloseThemeData
GetThemeTextMetrics
GetThemeSysSize
DrawThemeBackground
GetWindowTheme
IsThemeActive
GetThemeColor
DrawThemeEdge
GetThemeBool
SetWindowTheme
OpenThemeData
GetThemeTextExtent

gpedit

ExportRSoPData
DllGetClassObject
BrowseForGPO
DllCanUnloadNow

Sections

.text
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 1.4MB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 802KB - Virtual size: 801KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 512B - Virtual size: 73B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

13c4938226d8d2c0ad36edc37bb3048a

Headers

File Characteristics

Imports

kernel32

uxtheme

gpedit

Sections

.text Size: 1024B - Virtual size: 784B

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 1.4MB

.rsrc Size: 802KB - Virtual size: 801KB

.import Size: 512B - Virtual size: 136B

.orpc Size: 512B - Virtual size: 73B

.text
Size: 1024B - Virtual size: 784B

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 1.4MB

.rsrc
Size: 802KB - Virtual size: 801KB

.import
Size: 512B - Virtual size: 136B

.orpc
Size: 512B - Virtual size: 73B