083bb021513a0f033008bb7a10186413c6b351e68575f2e0473246b1d7dab6ad

Sharing

Copy URL Twitter E-mail

General

Target

083bb021513a0f033008bb7a10186413c6b351e68575f2e0473246b1d7dab6ad
Size

153KB
MD5

40636cd362ffb70b98bdd94719d4b599
SHA1

7e3014a444cfbc14e68e0d61f33f75e3e90febfa
SHA256

083bb021513a0f033008bb7a10186413c6b351e68575f2e0473246b1d7dab6ad
SHA512

a05e12a5a900c4b8b3a2611864a1a8fb42f4cfc9af6f48451a99d3ee3ad7b98807f9e6cfd4a692424e366dbddd119d2b82ed38c15c2b9dec897ee44246813899
SSDEEP

3072:Ze6cAFUMMnMMMMMX7I7Dvm7qFa1xmS5s36qfClbNzn/wdTICXKi9YEws:k9pMMnMMMMMavsqU5gMK3XKpEH

Score

N/A

Malware Config

Signatures

Files

083bb021513a0f033008bb7a10186413c6b351e68575f2e0473246b1d7dab6ad
.exe windows x86

b5f3c0fa0678c75c01db0a8c820e4f3c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtSuspendProcess
RtlAddAccessAllowedObjectAce
RtlAdjustPrivilege
NtQuerySemaphore

uxtheme

GetThemeMargins
CloseThemeData
GetThemeFont
OpenThemeData
DrawThemeBackground
IsAppThemed
DrawThemeParentBackground
GetThemeAppProperties
GetThemeMetric
GetThemeBackgroundContentRect
IsThemeActive
GetThemeBackgroundExtent
SetWindowTheme
GetThemePartSize
GetThemeColor

shell32

SHGetPathFromIDListA
SHGetFolderPathW
SHGetPathFromIDListW
SHFileOperationW
ShellExecuteW
SHCreateShellItem
ExtractAssociatedIconExW
SHBindToParent
SHGetSpecialFolderPathW
ShellExecuteA
SHChangeNotify
SHPathPrepareForWriteW
SHGetDataFromIDListW
SHAppBarMessage
ExtractIconExW
SHBrowseForFolderW
Shell_NotifyIconW
SHGetSpecialFolderLocation
ShellAboutW
SHGetFileInfoW
SHGetInstanceExplorer
DragQueryFileW
ExtractIconW
SHGetDesktopFolder
SHSetLocalizedName
SHGetFolderPathAndSubDirW
ShellExecuteExW
Shell_NotifyIconA
SHGetFolderLocation

kernel32

VirtualAlloc

psapi

GetProcessImageFileNameW

rtutils

TraceDumpExA
RouterLogEventStringA
LogErrorW
RouterLogRegisterA
RouterGetErrorStringW
RouterLogEventExA

ddraw

DirectDrawCreate

Sections

.text
Size: 1024B - Virtual size: 996B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b5f3c0fa0678c75c01db0a8c820e4f3c

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

uxtheme

shell32

kernel32

psapi

rtutils

ddraw

Sections

.text Size: 1024B - Virtual size: 996B

.rsrc Size: 26KB - Virtual size: 26KB

.data Size: 2KB - Virtual size: 40KB

.idata Size: 2KB - Virtual size: 1KB

.rdata Size: 12KB - Virtual size: 11KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 1024B - Virtual size: 996B

.rsrc
Size: 26KB - Virtual size: 26KB

.data
Size: 2KB - Virtual size: 40KB

.idata
Size: 2KB - Virtual size: 1KB

.rdata
Size: 12KB - Virtual size: 11KB

.text
Size: 108KB - Virtual size: 108KB