99d6306b3dedff7452c98caeee2a1dd401a85c727335a567ec901eb0f320ec76 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

99d6306b3dedff7452c98caeee2a1dd401a85c727335a567ec901eb0f320ec76
Size

11KB
MD5

9232791fa6803ca761f259184a7051cd
SHA1

efef717c23de56c23db8acbec215a81fec96a328
SHA256

99d6306b3dedff7452c98caeee2a1dd401a85c727335a567ec901eb0f320ec76
SHA512

2289e0a135c0396dce21ef72d36c1da49080f411c458b41b40463f05e6d3e88187b2d0aa4817fbad3d237aa6d32c06e1312b64bcdb621663337e2f68de70e9b2
SSDEEP

192:uOPs2QQZWgsO2IzJhZYHH8zjylY1rOuU4hpaV2PVqRCqfCZyFflRQ1912yccE/ut:uOhQQZWgsO2oJh2H8el2MF6MflRFzciK

Score

N/A

Malware Config

Signatures

Files

99d6306b3dedff7452c98caeee2a1dd401a85c727335a567ec901eb0f320ec76
.exe windows x86

51d63738a5d8d12757a067e34368561a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

OpenProcess
lstrcatA
lstrcmpiA
GetProcAddress
CopyFileA
SetFileAttributesA
VirtualAllocEx
LoadLibraryA
CreateRemoteThread
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
CreateToolhelp32Snapshot
CloseHandle
LocalFree
WriteProcessMemory
ExpandEnvironmentStringsA
Process32First
Process32Next
lstrlenA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 690B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE