3d47cd4a11961771a5b247174f72ea6d84db34d5fc1734742e0f111900df78b4

General

Target

3d47cd4a11961771a5b247174f72ea6d84db34d5fc1734742e0f111900df78b4
Size

799KB
MD5

5b8eb6842b8a2f269cc2880b9563eb60
SHA1

b2d8a5572967044e5d04c173fedc96fefc9d2d2d
SHA256

3d47cd4a11961771a5b247174f72ea6d84db34d5fc1734742e0f111900df78b4
SHA512

55b62e46ce991957327a93469b5155b652b88a83c48b3f47b2eba6db1b3a0358906957daf67057465a2edfad52b56d32a4e32233c6d6c43b041f80817f6a96ae
SSDEEP

12288:6u0Ixwt5tNvrKTP9KmAoTsovCXFnjCP/gUrVKBAURQM745yQp9Yj+LkK:6uNwtlv49X4ovCBjbUrVK6URQS4E0UK

Score

N/A

Malware Config

Signatures

Files

3d47cd4a11961771a5b247174f72ea6d84db34d5fc1734742e0f111900df78b4
.exe windows x86

0b3c51a9a6c01856cbc304766a3d79a7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetDriveTypeA
GetPrivateProfileSectionA
CreateEventA
RemoveDirectoryA
GetStringTypeA
GetCurrentProcess
HeapFree
LoadLibraryA
CreateDirectoryW
GetFileAttributesW
GetVersionExA
GlobalFlags
GetFileAttributesW
GetStdHandle
FindVolumeClose
VirtualProtectEx
CloseHandle
GlobalLock
GetPrivateProfileIntA
DeviceIoControl
GetCurrentThread

shell32

DragAcceptFiles
DuplicateIcon
ExtractIconA
DllUnregisterServer
DllUnregisterServer
ShellMessageBoxA
SHGetSettings
SHFree
StrChrA
DragFinish
SHGetMalloc
ShellAboutA
DragQueryFileA

ntmarta

AccConvertSDToAccess
AccConvertAclToAccess
AccGetExplicitEntries
AccFreeIndexArray

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 789KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0b3c51a9a6c01856cbc304766a3d79a7

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 508B

.rsrc Size: 789KB - Virtual size: 2.1MB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 508B

.rsrc
Size: 789KB - Virtual size: 2.1MB

.import
Size: 512B - Virtual size: 372B