285a80f278beadc98967749a83f6f7fa797f3c53f74f4198395bbf3b2cb75e49 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

285a80f278beadc98967749a83f6f7fa797f3c53f74f4198395bbf3b2cb75e49
Size

234KB
MD5

d9c1cded7e4a33202ef88d9e5f1936a0
SHA1

f00b545a8a7c2cee7eef46a77770b397e282c4dd
SHA256

285a80f278beadc98967749a83f6f7fa797f3c53f74f4198395bbf3b2cb75e49
SHA512

c87962c087d9417c7aae4abb347bbf44b9ec37fb490a129b8cf60a0e5f54be5d473795f7c2d32101d8579c23655c239362974ef8d4c0a59c0db563c3f9e4c323
SSDEEP

6144:sSBIkA+67TNXUZx3yQBIkA+67TNXUZx3yB:d+86tXWxJ+86tXWxa

Score

N/A

Malware Config

Signatures

Files

285a80f278beadc98967749a83f6f7fa797f3c53f74f4198395bbf3b2cb75e49
.exe windows x86

92bb4f885fc26d2817fc32b8b88775ac

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateMutexA
GetCommandLineA
GetLastError
GetStartupInfoA
ReleaseMutex
Sleep
CreateThread
GetSystemDirectoryA
MoveFileA
ExitProcess
WinExec
GetModuleFileNameA
SetFilePointer
ReadFile
GetTempPathA
GetTickCount
FindResourceA
LoadResource
CreateFileA
GetModuleHandleA
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
SizeofResource
WriteFile
GetLocalTime
lstrlenA
CloseHandle
FreeResource
CopyFileA

user32

DispatchMessageA
TranslateMessage
GetMessageA
UpdateWindow
ShowWindow
CreateWindowExA
RegisterClassExA
LoadIconA
wsprintfA
DefWindowProcA

advapi32

RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
RegCloseKey

msvcrt

_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
memset
??2@YAPAXI@Z
strlen
??3@YAXPAX@Z
memcpy
strchr
strstr
_except_handler3
realloc
malloc
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ