f5798b1f201629d192ae8fb6fd0dfe68e18db142bcdd4ca0a7efa719e09e719b

General

Target

f5798b1f201629d192ae8fb6fd0dfe68e18db142bcdd4ca0a7efa719e09e719b
Size

83KB
MD5

92fd2d8bd844bf50492c34e09c7c5480
SHA1

639555d2849095decc2b6c04c234a82a8d60a81e
SHA256

f5798b1f201629d192ae8fb6fd0dfe68e18db142bcdd4ca0a7efa719e09e719b
SHA512

bb36fbdb766240d6c638506e7553a8e270e9f07a6abcc1913577cabe53a9fdf979e54f6c03f48c5f1a184e5578e395d759bda40661509d8dbfdf6a9a4de2b652
SSDEEP

768:mixEKEPfPRt9cEuyMUyOXf7yQqOSPUcGVAhdOAWfwRMyMIeuULK/Ug3I6ctSAV:miW/htRuyMYvDqOSMGhdjWAj8fC7MSu

Score

N/A

Malware Config

Signatures

Files

f5798b1f201629d192ae8fb6fd0dfe68e18db142bcdd4ca0a7efa719e09e719b
.exe windows x86

a81cbae5cf44b48c1b7fe09b799bca2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CloseHandle
GetCurrentProcess
GetFileAttributesW
GetPrivateProfileIntA
GetCurrentThread
CreateDirectoryW
CreateEventA
GetVersionExA
GetStringTypeA
GlobalFlags
HeapFree
LoadLibraryA
GetDriveTypeA
RemoveDirectoryA
GetStdHandle
GetFileAttributesW
GetPrivateProfileSectionA
VirtualProtectEx
DeviceIoControl
FindVolumeClose
GlobalLock

shell32

ExtractIconA
DragFinish
SHGetSettings
SHGetMalloc
DragQueryFileA
ShellAboutA
ShellMessageBoxA
SHFree
DuplicateIcon
DllUnregisterServer
StrChrA
DllUnregisterServer
DragAcceptFiles

ntmarta

AccConvertAclToAccess
AccConvertSDToAccess
AccGetExplicitEntries
AccFreeIndexArray

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a81cbae5cf44b48c1b7fe09b799bca2f

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 508B

.rsrc Size: 73KB - Virtual size: 73KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 508B

.rsrc
Size: 73KB - Virtual size: 73KB

.import
Size: 512B - Virtual size: 372B