8544415732f70ffe99827cc85caed4ebdeeb0b9e709e1831f5ca9ea65b372bdb

General

Target

8544415732f70ffe99827cc85caed4ebdeeb0b9e709e1831f5ca9ea65b372bdb
Size

311KB
MD5

52bea63da953467306a0b6477107f050
SHA1

aab868fe8ccf351267c2e3cc146d54eee7e7554b
SHA256

8544415732f70ffe99827cc85caed4ebdeeb0b9e709e1831f5ca9ea65b372bdb
SHA512

5db1b98b46eddba6d12c78bc2be9e1092ca2729234f6aea2111dd73fae0bce39c45eb24e05b64b4b5d9459c4ff72e996ad67ceadcd015bde3873787596f00bf5
SSDEEP

6144:T5YMRrbmdKI623za+Hn7Izcr8sKNiwxnkAkE5YyiTT2lHZfu0IGaq:1ZNKKI62OK7IzC7wOEziTT2ls

Score

N/A

Malware Config

Signatures

Files

8544415732f70ffe99827cc85caed4ebdeeb0b9e709e1831f5ca9ea65b372bdb
.exe windows x86

0a176bafa61c090bcf5e1ae08002da48

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetCurrentProcess
GetFileAttributesW
RemoveDirectoryA
CreateEventA
DeviceIoControl
GetVersionExA
GlobalLock
VirtualProtectEx
GetCurrentThread
GetModuleHandleA
GlobalFlags
GetPrivateProfileSectionA
CreateDirectoryW
HeapFree
FindClose
GetStringTypeA
GetPrivateProfileIntA
SetLastError
GetStdHandle
GetFileAttributesW
CloseHandle

shell32

DuplicateIcon
DragQueryFileA
StrChrA
ShellMessageBoxA
DragAcceptFiles
SHGetMalloc
ExtractIconA
DragFinish
SHGetSettings
DllUnregisterServer
ShellAboutA
SHFree
SHGetDiskFreeSpaceA

ntmarta

AccGetExplicitEntries
AccConvertSDToAccess
AccConvertAclToAccess
AccFreeIndexArray

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0a176bafa61c090bcf5e1ae08002da48

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 512B

.rsrc Size: 302KB - Virtual size: 301KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 512B

.rsrc
Size: 302KB - Virtual size: 301KB

.import
Size: 512B - Virtual size: 372B