aa14b1851a765261caa7107b0b9da5dc3a5b5c3bc041e1c28dd8a8834c197c82

General

Target

aa14b1851a765261caa7107b0b9da5dc3a5b5c3bc041e1c28dd8a8834c197c82
Size

299KB
MD5

5beca234d5bbb699925b9b4b0d29b250
SHA1

45654882a012110021e9d87feb476c0470488f65
SHA256

aa14b1851a765261caa7107b0b9da5dc3a5b5c3bc041e1c28dd8a8834c197c82
SHA512

5d4a26f078b1b689b320af007c288d3c29a98fc98018ddb26526cc8d4095645b8ae3633b649ff965c6b2043942895916e09a974b2bf214d8ea6592c6393b834e
SSDEEP

6144:5GXQkdQXKdygv0Gww261gIi+2Ejor01bvKuK3j/yE+9Z+lhzgJ08Ie:5GgUQ6NvBw/D+2EfvBm6j9oX8yNe

Score

N/A

Malware Config

Signatures

Files

aa14b1851a765261caa7107b0b9da5dc3a5b5c3bc041e1c28dd8a8834c197c82
.exe windows x86

ddb6d69834c4009ea02be9ba7e4e0f5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

ReadConsoleA
FindAtomW
GetLastError
PulseEvent
ReadConsoleA
LoadLibraryW
GetDriveTypeA
VirtualProtectEx
GetPrivateProfileSectionA
SearchPathA
ReleaseMutex
ReadConsoleA
lstrlenA
GetStringTypeW
GetStartupInfoA
Sleep
DeleteFileW
CloseHandle
GetLogicalDrives
TlsGetValue
HeapSize

uxtheme

GetThemeColor
CloseThemeData
DrawThemeEdge
GetThemeTextExtent
CloseThemeData
IsThemeActive
SetWindowTheme
OpenThemeData
GetThemeSysSize
DrawThemeBackground
GetWindowTheme
GetThemeTextMetrics
GetThemeBool

gpedit

ExportRSoPData
DllGetClassObject
DllCanUnloadNow
BrowseForGPO

Sections

.text
Size: 1024B - Virtual size: 772B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 320B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 291KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.orpc
Size: 512B - Virtual size: 170B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

ddb6d69834c4009ea02be9ba7e4e0f5f

Headers

File Characteristics

Imports

kernel32

uxtheme

gpedit

Sections

.text Size: 1024B - Virtual size: 772B

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 512B - Virtual size: 320B

.rsrc Size: 291KB - Virtual size: 291KB

.import Size: 512B - Virtual size: 136B

.orpc Size: 512B - Virtual size: 170B

.text
Size: 1024B - Virtual size: 772B

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 512B - Virtual size: 320B

.rsrc
Size: 291KB - Virtual size: 291KB

.import
Size: 512B - Virtual size: 136B

.orpc
Size: 512B - Virtual size: 170B