1e7236eca43830405625196e7d8742dcc3e2322b9f63b30612cd2eedc04632a4

General

Target

1e7236eca43830405625196e7d8742dcc3e2322b9f63b30612cd2eedc04632a4
Size

54KB
MD5

078979532529e2f0b5d3904423f30956
SHA1

504ce0a1dd084ed5d31a27e4fe4792f007b855a4
SHA256

1e7236eca43830405625196e7d8742dcc3e2322b9f63b30612cd2eedc04632a4
SHA512

4ca2eeb9e916c266c889f8f543acf7c917fc744455a99e697101eafa7a8ce4fb4306b561032387e550168abfad365207cd41c6a2c9324aeee796f4375746a04f
SSDEEP

768:JYvYqsI6ph5gl69z8bmi6m8+/U0te9nzjAJMcGhDWIO2GmZLfHIOOM59:R1Gl69z8t6m8Dzc2WIVL

Score

N/A

Malware Config

Signatures

Files

1e7236eca43830405625196e7d8742dcc3e2322b9f63b30612cd2eedc04632a4
.exe windows x86

6b47b6225f53231a8f13a4cbaff85fec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
GetCurrentDirectoryW
LocalSize
GetDriveTypeA
SetFileAttributesW
ReadFile
MapViewOfFile
GetEnvironmentVariableW
CloseHandle
FindVolumeClose
GetModuleHandleA
GetCommandLineA
GetFileAttributesA
GlobalLock
FindVolumeClose
GetFileTime
lstrlenA
HeapCreate
GetFileType
HeapFree
GetCommandLineW
EnterCriticalSection
FindClose
WaitForMultipleObjects
ExitThread

uxtheme

GetThemeColor
SetWindowTheme
OpenThemeData
CloseThemeData
GetThemeTextMetrics
CloseThemeData
IsThemeActive
DrawThemeBackground
GetWindowTheme
GetThemeEnumValue
DrawThemeEdge
GetThemeBool
GetThemeTextExtent

dmocx

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

yywvpev
Size: - Virtual size: 80KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6b47b6225f53231a8f13a4cbaff85fec

Headers

File Characteristics

Imports

kernel32

uxtheme

dmocx

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 47KB - Virtual size: 75KB

yywvpev Size: - Virtual size: 80KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 47KB - Virtual size: 75KB

yywvpev
Size: - Virtual size: 80KB