Spark Activator 2[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Spark Activator 2.0.exe
Size

2.8MB
MD5

f64c80e45498b08a43b2233f879a3461
SHA1

e95588fd2ad95df20149ec1308f5f80f846047ee
SHA256

c7ef4744b9668ccb635746f2bc9218e9c5a712d64593b969ed3b28aa585f4c00
SHA512

af7960fdbdad3a25c6196060350abb354e482394a2bbbbaa5550d759dcead9aa605ed30871de301fd8726b2607daae3fdfbf5fbd3d028a4f2af6dd0e33f21c8e
SSDEEP

49152:9wSVDIRC9eIUZRYfR1KRZE1z3Jp2n74X6YSEtvfqbvxrI6H3hnkL3W:9LUMI9ZqDK0rp2nMF62Ypk7W

Score

N/A

Malware Config

Signatures

Files

Spark Activator 2.0.exe
.exe windows x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ