5a3b7b5166a66f1783b931093166e3b71ede21a1129be059d88820faef176d67

General

Target

5a3b7b5166a66f1783b931093166e3b71ede21a1129be059d88820faef176d67
Size

131KB
MD5

0f47263ccc91fd9f12a60f94ccf47bc9
SHA1

fdd2baf1c9a56442106ef3f20f2e123cefae3e74
SHA256

5a3b7b5166a66f1783b931093166e3b71ede21a1129be059d88820faef176d67
SHA512

85bbeed691ea6d640c16ce221760ef8d187e25cfe2cd1721384323d15c6c21c3a75fd23573612b3fd0dae68cba511189bb667b96d264d9dcb14a1c73949eba3c
SSDEEP

3072:Y9omm3eOgvqnLsv596IfCyLJsP1joUvK4vf:woPeOyUYrfXcGU53

Score

N/A

Malware Config

Signatures

Files

5a3b7b5166a66f1783b931093166e3b71ede21a1129be059d88820faef176d67
.exe windows x86

43a3b57a7b17e1eecacf8574a803a63d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

CreateEventA
LoadLibraryA
DeviceIoControl
RemoveDirectoryA
GetCurrentProcess
GetDriveTypeA
GetCurrentThread
GetStringTypeA
GlobalFlags
FindVolumeClose
GetPrivateProfileIntA
CloseHandle
HeapFree
GetVersionExA
GetPrivateProfileSectionA
GetStdHandle
GlobalLock
GetFileAttributesW
GetFileAttributesW
CreateDirectoryW
VirtualProtectEx

shell32

DragFinish
SHGetSettings
DragQueryFileA
DllUnregisterServer
SHFree
DuplicateIcon
StrChrA
DragAcceptFiles
DllUnregisterServer
ShellAboutA
SHGetMalloc
ExtractIconA
ShellMessageBoxA

ntmarta

AccFreeIndexArray
AccConvertSDToAccess
AccGetExplicitEntries
AccConvertAclToAccess

uxtheme

CloseThemeData

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.import
Size: 512B - Virtual size: 372B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

43a3b57a7b17e1eecacf8574a803a63d

Headers

File Characteristics

Imports

kernel32

shell32

ntmarta

uxtheme

Sections

.text Size: 3KB - Virtual size: 3KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 508B

.rsrc Size: 121KB - Virtual size: 121KB

.import Size: 512B - Virtual size: 372B

.text
Size: 3KB - Virtual size: 3KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 508B

.rsrc
Size: 121KB - Virtual size: 121KB

.import
Size: 512B - Virtual size: 372B