f0df467b28e2aee3ad7e438e661031f41706f9a3e3de1055a73c19949c013cf6

General

Target

f0df467b28e2aee3ad7e438e661031f41706f9a3e3de1055a73c19949c013cf6
Size

54KB
MD5

efe4089fac17bb505d3476e54d7c3f67
SHA1

b2853917d4f036704f9071459dd4e6ed19bddd3c
SHA256

f0df467b28e2aee3ad7e438e661031f41706f9a3e3de1055a73c19949c013cf6
SHA512

cf653cb7ca2b31a9ecb8fefa47972b0b59d4dc9fde0da9b71421b0f008b2ea41218e446c0a5ed671d500bb427177cb930b940994e8ed18192191897bfa60147f
SSDEEP

1536:nkn/zpGl69z8t6m8PSRH65RH6GPMOcEPWk5c:k/zEA58htRQEiMdEPWk5

Score

N/A

Malware Config

Signatures

Files

f0df467b28e2aee3ad7e438e661031f41706f9a3e3de1055a73c19949c013cf6
.exe windows x86

b75d1e1bdbc58befdf2da9b2b9eff8fa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
GlobalLock
GetModuleHandleA
GetDriveTypeA
ExitThread
GetEnvironmentVariableW
MapViewOfFile
GetFileTime
FindVolumeClose
ReadFile
CloseHandle
IsBadReadPtr
SetFileAttributesW
FindVolumeClose
FindClose
GetCommandLineA
LocalSize
HeapCreate
GetCommandLineW
lstrlenA
EnterCriticalSection
HeapFree
GetFileType
GetCurrentDirectoryW
WaitForMultipleObjects

uxtheme

CloseThemeData
GetThemeBool
DrawThemeEdge
GetThemeEnumValue
OpenThemeData
IsThemeActive
SetWindowTheme
CloseThemeData
GetThemeColor
DrawThemeBackground
GetThemeTextExtent
GetWindowTheme
GetThemeTextMetrics

dmocx

DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

jihucns
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b75d1e1bdbc58befdf2da9b2b9eff8fa

Headers

File Characteristics

Imports

kernel32

uxtheme

dmocx

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 47KB - Virtual size: 75KB

jihucns Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 47KB - Virtual size: 75KB

jihucns
Size: - Virtual size: 4KB