b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a

General

Target

b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a
Size

299KB
MD5

7cc6a1e3e7de0d39690fb4db905ec070
SHA1

c169e091a7856665c69712c804d939917a90b9aa
SHA256

b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a
SHA512

67b1d64af29c1d79dfc7c8a661e10377725fbd07739e6ad76f05e837b111555c7c216a60c8cb9b0a55e68fb01980545dbfe60d801dfcb883ec14cc20b6323da4
SSDEEP

6144:wRhc2ty5PDJjDDU/5sAwQQL6a2tOSy0JEgtP6s8L+8eMx8jqZp8:2hc2taDJjDKsAw/SE0JEgtP6a+l8

Score

N/A

Malware Config

Signatures

Files

b154f98e9d7033298c3407de7c24c60a9a3a18150d0f26232a8978d1304bf95a
.exe windows x86

9f39a14dd50479310905d1d440d07bab

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReleaseMutex
GetLogicalDrives
lstrlenA
GetPrivateProfileSectionA
ReadConsoleA
GetLastError
ReadConsoleA
Sleep
HeapSize
TlsGetValue
CloseHandle
GetDriveTypeA
ReadConsoleA
SearchPathA
LoadLibraryW
GetStartupInfoA
DeleteFileW
FindAtomW
VirtualProtectEx
PulseEvent
GetStringTypeW

uxtheme

GetThemeTextMetrics
GetThemeTextExtent
IsThemeActive
GetWindowTheme
CloseThemeData
DrawThemeBackground
SetWindowTheme
GetThemeColor
DrawThemeEdge
GetThemeSysSize
OpenThemeData
CloseThemeData
GetThemeBool

gpedit

DllGetClassObject
ExportRSoPData
BrowseForGPO
DllCanUnloadNow

Sections

.text
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 289B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9f39a14dd50479310905d1d440d07bab

Headers

File Characteristics

Imports

kernel32

uxtheme

gpedit

Sections

.text Size: 1024B - Virtual size: 1024B

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 320B

.rsrc Size: 291KB - Virtual size: 291KB

.import Size: 512B - Virtual size: 289B

.orpc Size: 512B - Virtual size: 136B

.text
Size: 1024B - Virtual size: 1024B

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 320B

.rsrc
Size: 291KB - Virtual size: 291KB

.import
Size: 512B - Virtual size: 289B

.orpc
Size: 512B - Virtual size: 136B