9628a0451f36ef7bf12b0d51d20bab3274ca9bc4021234d7aba2dd25a0a110f5 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

9628a0451f36ef7bf12b0d51d20bab3274ca9bc4021234d7aba2dd25a0a110f5
Size

197KB
MD5

01b183f924b5573efba844fbbcae4205
SHA1

66d23675703ed777859f70f1a8ba2e6cefa97ced
SHA256

9628a0451f36ef7bf12b0d51d20bab3274ca9bc4021234d7aba2dd25a0a110f5
SHA512

b626970b2bfd2d8ef44b846f3de8bc24589f5ed2bfee4df891ed216176e740474dfca8183e7d41fc705a2524639dc4d96a9555e7f9fe6eb50a9308d6a65b81ed
SSDEEP

6144:Ooca7XLE9CEZNu0DZippf/OkQEqcnfl8ZUpagN:ODCIwwNu0tEpuExN8rA

Score

N/A

Malware Config

Signatures

Files

9628a0451f36ef7bf12b0d51d20bab3274ca9bc4021234d7aba2dd25a0a110f5
.exe windows x86

dea89328b8ff4032f0ae3ce2c6436366

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess
ExitProcess
LCMapStringA

user32

SetWindowLongA
wsprintfA
CreateWindowExA
CharLowerBuffA
CloseWindow

advapi32

RegCloseKey
RegEnumKeyA
RegDeleteValueA
RegOpenKeyA
RegQueryValueA
RegCreateKeyA
RegDeleteKeyA
RegEnumValueA
RegSetValueA

Sections

.text
Size: 154KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ