c275342115b86832964fa13c24bc0ceed44974f82232d2bfe2ce94979a479808

General

Target

c275342115b86832964fa13c24bc0ceed44974f82232d2bfe2ce94979a479808
Size

100KB
MD5

43565ca35abbcb7fba48f125f69e2e40
SHA1

114b355d3237129a9996798de8e301efba6a4c52
SHA256

c275342115b86832964fa13c24bc0ceed44974f82232d2bfe2ce94979a479808
SHA512

ab876dc6f7625d6a468eff2f31463570391e6a22d6538718f6c38f854e1e0b0aad4254d36a76e168789a352fe64b2d42f2e2bf763ed6210938c67e20a46f3697
SSDEEP

1536:5WUBQwqEJ8mFDpVfCMROmWy5WFukxaUuBddq6rs2Y1atG4jJBGIuWViclwreT0o:5VBnqEDVKMR5BSuXd9shIt9jKI9ViJvo

Score

N/A

Malware Config

Signatures

Files

c275342115b86832964fa13c24bc0ceed44974f82232d2bfe2ce94979a479808
.exe windows x86

d04f74099eafbf2121a918c2b103369f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

VirtualProtectEx
GlobalFlags
GetFileAttributesW
GetVersionExA
CreateEventA
CloseHandle
GetPrivateProfileIntA
SetLastError
GetFileAttributesW
GlobalLock
HeapFree
GetPrivateProfileSectionA
GetCurrentProcess
RemoveDirectoryA
CreateDirectoryW
DeviceIoControl
GetCurrentThread
GetStdHandle
FindClose
GetStringTypeA
GetModuleHandleA

shell32

DragQueryFileA
ShellAboutA
DllUnregisterServer
ExtractIconA
SHGetDiskFreeSpaceA
SHGetMalloc
StrChrA
DragAcceptFiles
SHGetSettings
SHFree
ShellMessageBoxA
DragFinish
DuplicateIcon

ntmarta

AccFreeIndexArray
AccConvertAclToAccess
AccGetExplicitEntries
AccConvertSDToAccess

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d04f74099eafbf2121a918c2b103369f

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 512B

.rsrc Size: 302KB - Virtual size: 301KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 512B

.rsrc
Size: 302KB - Virtual size: 301KB

.import
Size: 512B - Virtual size: 372B