da5c60a338771fbe42072653ee56bf2ef5d77dcaf729d6f0287626ae318be0f7

General

Target

da5c60a338771fbe42072653ee56bf2ef5d77dcaf729d6f0287626ae318be0f7
Size

80KB
MD5

84fc11de26e0a246f9b4f41e6a780d00
SHA1

663fa51827fec4ded953bf7c65a25e4a42dea210
SHA256

da5c60a338771fbe42072653ee56bf2ef5d77dcaf729d6f0287626ae318be0f7
SHA512

9d006b9140d74a1bacbb9043cb33dbb2cfad2dcf8b640ef0067e5d2d2664ccd6eb8d58cbe6f90bc36155ec93c73d5b384b810c55fe747b0f1bebec6d0e558b89
SSDEEP

1536:6TX2RqkWvK5+aqCoVwr0+9JgjVPu3CTrA19Ku:GXm0KxW+gjVPm9Ku

Score

N/A

Malware Config

Signatures

Files

da5c60a338771fbe42072653ee56bf2ef5d77dcaf729d6f0287626ae318be0f7
.exe windows x86

eb3f39216a620088488c3055fc57a624

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateEventA
RemoveDirectoryA
SetLastError
VirtualProtectEx
HeapFree
GlobalLock
GetFileAttributesW
CloseHandle
GetModuleHandleA
GetVersionExA
GetStdHandle
GetFileAttributesW
DeviceIoControl
GlobalFlags
CreateDirectoryW
GetCurrentProcess
GetPrivateProfileSectionA
GetStringTypeA
FindClose
GetPrivateProfileIntA
GetCurrentThread

shell32

SHFree
DuplicateIcon
SHGetMalloc
DragFinish
StrChrA
DragAcceptFiles
SHGetSettings
DragQueryFileA
ExtractIconA
ShellAboutA
ShellMessageBoxA
SHGetDiskFreeSpaceA
DllUnregisterServer

ntmarta

AccFreeIndexArray
AccGetExplicitEntries
AccConvertSDToAccess
AccConvertAclToAccess

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

eb3f39216a620088488c3055fc57a624

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 512B

.rsrc Size: 71KB - Virtual size: 70KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 512B

.rsrc
Size: 71KB - Virtual size: 70KB

.import
Size: 512B - Virtual size: 372B