16eb4cbb62059dee58cf1665fbe2c0addf6679824a3dc20e05608e2e829b8b8a

Sharing

Copy URL

Twitter E-mail

General

Target

16eb4cbb62059dee58cf1665fbe2c0addf6679824a3dc20e05608e2e829b8b8a
Size

813KB
MD5

644509e87302d56ad755114afd1024c0
SHA1

a090960a158891bd2963d813d5026304a6f82f40
SHA256

16eb4cbb62059dee58cf1665fbe2c0addf6679824a3dc20e05608e2e829b8b8a
SHA512

5acbdaf246cd3ac508426eff53e76f47cf9018b13cfd47f7aee74fb10cac9eb7c3c665cbd0ba3d396d56f0e4744d0f86b1b738f915dbb5755c84800e48a5dab8
SSDEEP

24576:X2FD6qB6wNQmuHzvllkmnDdtOV1YozPMs3Am1k5vw9:X2FDIRPll9nuFMswmW5vw9

Score

N/A

Malware Config

Signatures

Files

16eb4cbb62059dee58cf1665fbe2c0addf6679824a3dc20e05608e2e829b8b8a
.exe windows x86

09322b025f1bfb5a65bc4fe6f4ae066e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntshrui

GetLocalPathFromNetResourceA
IsPathSharedW
GetNetResourceFromLocalPathA

dsprop

MsgBox
ErrMsg
FindSheet
ReportError

shell32

ShellAboutA
SHGetMalloc
ShellMessageBoxA
SHGetDataFromIDListA
SHGetDesktopFolder
SHCreateShellItem
DuplicateIcon
DragAcceptFiles
ExtractIconA

msctf

TF_GetInputScope
TF_InitSystem
TF_CreateLangBarMgr

uxtheme

GetThemeSysSize
GetWindowTheme
GetThemeTextMetrics
DrawThemeBackground
GetThemeEnumValue
GetThemeColor
OpenThemeData
DrawThemeEdge
SetWindowTheme

kernel32

InterlockedExchange
lstrcpynA
InterlockedDecrement
GetAtomNameA
SetFileAttributesA
DeviceIoControl
FindResourceA
OpenMutexA
VirtualQueryEx
GetPrivateProfileSectionA
DisconnectNamedPipe
GetProcAddress
VirtualProtectEx
LoadLibraryA
lstrcmpA
GetLogicalDrives
CreatePipe
GetModuleFileNameA
DecodeSystemPointer
GetEnvironmentVariableA
ConnectNamedPipe

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 795KB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

09322b025f1bfb5a65bc4fe6f4ae066e

Headers

DLL Characteristics

File Characteristics

Imports

ntshrui

dsprop

shell32

msctf

uxtheme

kernel32

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 4KB

.rsrc Size: 795KB - Virtual size: 2.2MB

.reloc Size: 1KB - Virtual size: 4KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 4KB

.rsrc
Size: 795KB - Virtual size: 2.2MB

.reloc
Size: 1KB - Virtual size: 4KB