f2a2b83b3284e58e877c1736cf1f782dbffea2dc0a2eeb2382c1b76d32c05a8a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

f2a2b83b3284e58e877c1736cf1f782dbffea2dc0a2eeb2382c1b76d32c05a8a
Size

296KB
MD5

fd38985e6430c88187fbdcf22f21c75c
SHA1

bc8a31829d4bdd7f4b09975442bd3d6ad9c420d2
SHA256

f2a2b83b3284e58e877c1736cf1f782dbffea2dc0a2eeb2382c1b76d32c05a8a
SHA512

61e0c1a8af58890f8cdb20f45582ca497dc4388df067af34258902b0e74640c7f24caef62be289bd532853e745787f2f12b74e2107ffc8673f3e7ca5176a32aa
SSDEEP

6144:v/BuzrDXP3PHBfP3HLp3PH01cWSNoWc5unBjI0VgxbJ8YEFfEKeLaYfCFasBtSC:v5uzrD/3PHBfP3HLp3PH0aoG5I7dmcD2

Score

N/A

Malware Config

Signatures

Files

f2a2b83b3284e58e877c1736cf1f782dbffea2dc0a2eeb2382c1b76d32c05a8a
.exe windows x86

debe7004f5af0657f3a1977770d9c440

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcpyW
CloseHandle
GetLastError
LoadLibraryA
VirtualQuery
GetDiskFreeSpaceA
GetPrivateProfileIntA
HeapReAlloc
SetEnvironmentVariableA
ReadFileEx
HeapCreate
DeviceIoControl
GetDiskFreeSpaceA
CreateEventW
GetStringTypeW
lstrcatW
ReadConsoleA
FindResourceA
InterlockedDecrement
InterlockedIncrement
Heap32First

adsldpc

ADsCloseSearchHandle
ADsDeleteClassDefinition
ADsExecuteSearch
ADsEnumAttributes

uxtheme

IsThemeActive
OpenThemeData
DrawThemeEdge
DrawThemeBackground
CloseThemeData
SetWindowTheme
GetThemeTextExtent
GetThemeTextMetrics
GetThemeBool
GetWindowTheme
CloseThemeData
GetThemeSysSize
GetThemeColor
SetWindowTheme

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 292KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ