4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf

General

Target

4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf
Size

311KB
MD5

71c73618cbc9f4028e2eb58c7f42c210
SHA1

1af7b8dfa5308ca2d0094ddefd41a7e221996b92
SHA256

4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf
SHA512

e8287ca02f299c90c830b8dec2b2b73e8929a65855d45d4d2f0d5f0258e00ee7fd6c6aa162620b8f74ad8945de660c19bdcfc71d393ce039d8db9313609b92c2
SSDEEP

6144:PRULJRlzz3liP8eBWxzHzwhpAZvcOU0aACzCbQjMUmWmi:POLJRlzz3CpwzHMhpGdWGb2MUf

Score

N/A

Malware Config

Signatures

Files

4414383368e48d24a6ac79ed8b3929b7f610e089612453a00145891aa1ab7ecf
.exe windows x86

458f0c14974a0795bbfe6213b0577497

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GlobalLock
GetPrivateProfileIntA
FindVolumeClose
CreateEventA
GetStdHandle
LoadLibraryA
GetVersionExA
GetStringTypeA
RemoveDirectoryA
CreateDirectoryW
GetPrivateProfileSectionA
GetFileAttributesW
CloseHandle
GetCurrentThread
GlobalFlags
VirtualProtectEx
DeviceIoControl
GetFileAttributesW
HeapFree
GetCurrentProcess
GetDriveTypeA

shell32

DragFinish
DragQueryFileA
DllUnregisterServer
ExtractIconA
DragAcceptFiles
SHGetSettings
DllUnregisterServer
SHFree
StrChrA
ShellAboutA
ShellMessageBoxA
SHGetMalloc
DuplicateIcon

ntmarta

AccConvertAclToAccess
AccConvertSDToAccess
AccGetExplicitEntries
AccFreeIndexArray

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

458f0c14974a0795bbfe6213b0577497

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 508B

.rsrc Size: 302KB - Virtual size: 301KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 508B

.rsrc
Size: 302KB - Virtual size: 301KB

.import
Size: 512B - Virtual size: 372B