159af51174d2c9a115cb7e8c5a054c65405f5ea5bedcd34b07368a2e992cd5a2 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

159af51174d2c9a115cb7e8c5a054c65405f5ea5bedcd34b07368a2e992cd5a2
Size

37KB
MD5

26ce1f93d0023266bb75bd6d2811a115
SHA1

5339c0ce9f5702b5d33b44276fd1562c40c78b59
SHA256

159af51174d2c9a115cb7e8c5a054c65405f5ea5bedcd34b07368a2e992cd5a2
SHA512

c10e9f4b066d31e4c6de316c561de07dff45b06c449fcc9d049de64a107d692a77decff88c2f8b974ce1c4a629165462563690947ed2fa1b6734fd8124c8bc49
SSDEEP

768:XgQkYItDn0dXfeGXHizJq4sZN18pXvnemTrIavNrLg87sBJ8:w/RVnSX2GCJqtDeeOIah988

Score

N/A

Malware Config

Signatures

Files

159af51174d2c9a115cb7e8c5a054c65405f5ea5bedcd34b07368a2e992cd5a2
.exe windows x86

95509c7785bea1420c6c0be56b5f50d7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcessHeap
ExitProcess
GetProcAddress
LoadLibraryA
HeapFree
HeapAlloc

user32

GetWindowTextLengthA
GetParent
SetParent
GetTopWindow
GetLastActivePopup
ShowWindowAsync
AnyPopup
wsprintfA
IsZoomed
RegisterClassA

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 478B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE