aed0ce6d96e1d683fb1558322e2a71494028f5322ef15f9495acb3a4927f4b5b

General

Target

aed0ce6d96e1d683fb1558322e2a71494028f5322ef15f9495acb3a4927f4b5b
Size

119KB
MD5

a23a68c2a14fbdfa746c2341e82444c0
SHA1

536315f9783723acd70d4d5da6a5f6b440006b21
SHA256

aed0ce6d96e1d683fb1558322e2a71494028f5322ef15f9495acb3a4927f4b5b
SHA512

1c1ad1cac2ae44ebf6340697ab4eb4170b33fe3b83ad539c4a2cae16b2e2800bfdfae9edb70c646c5cbcfe6ecb18b7b260d8f567f4dde6bcafcffe72e0811f23
SSDEEP

3072:lGmS7nfE64BCVr8BsGiyJiZKjrqMyqbuiJkKnxAL+htGOcig8:p6fuBC1KJEZwmMyqKizxxGAg8

Score

N/A

Malware Config

Signatures

Files

aed0ce6d96e1d683fb1558322e2a71494028f5322ef15f9495acb3a4927f4b5b
.exe windows x86

fc4918bdfa9e15f039aa95f4afbe2855

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetLogicalDrives
PulseEvent
DeleteFileW
HeapSize
TlsGetValue
lstrlenA
FindAtomW
VirtualProtectEx
LoadLibraryW
CloseHandle
Sleep
ReadConsoleA
GetPrivateProfileSectionA
GetStringTypeW
GetDriveTypeA
ReadConsoleA
GetStartupInfoA
ReadConsoleA
GetLastError
SearchPathA
ReleaseMutex

uxtheme

DrawThemeEdge
SetWindowTheme
DrawThemeBackground
GetWindowTheme
GetThemeBool
IsThemeActive
GetThemeSysSize
GetThemeTextExtent
OpenThemeData
GetThemeColor
CloseThemeData
CloseThemeData
GetThemeTextMetrics

gpedit

BrowseForGPO
DllCanUnloadNow
DllGetClassObject
ExportRSoPData

Sections

.text
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 288B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fc4918bdfa9e15f039aa95f4afbe2855

Headers

File Characteristics

Imports

kernel32

uxtheme

gpedit

Sections

.text Size: 1024B - Virtual size: 772B

.data Size: 1KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 288B

.rsrc Size: 114KB - Virtual size: 114KB

.import Size: 512B - Virtual size: 136B

.orpc Size: 512B - Virtual size: 170B

.text
Size: 1024B - Virtual size: 772B

.data
Size: 1KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 288B

.rsrc
Size: 114KB - Virtual size: 114KB

.import
Size: 512B - Virtual size: 136B

.orpc
Size: 512B - Virtual size: 170B