c2d49b82b1bd3de12e9e9effc01b274efd41a97034e6a06d2b6aa3992195b198 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

c2d49b82b1bd3de12e9e9effc01b274efd41a97034e6a06d2b6aa3992195b198
Size

56KB
MD5

4020060750b619b3fdb41cffdbc35869
SHA1

b9af13914ca78d3ae482612399f77bbf02e6f14f
SHA256

c2d49b82b1bd3de12e9e9effc01b274efd41a97034e6a06d2b6aa3992195b198
SHA512

da8f7599c104541fbe604f5e35aa55e219d1db26c71a37068533c59fdbb352fcaa54dd67d9852a7998a3faa912e67992ddf8d3e055b35921d0fc4d535559247a
SSDEEP

1536:9OhCVsQyKMfwM2ae8F78Pw4ASDVIIpyaxfC:9zVsQqOyo49UUaRC

Score

N/A

Malware Config

Signatures

Files

c2d49b82b1bd3de12e9e9effc01b274efd41a97034e6a06d2b6aa3992195b198
.exe windows x86

bc7f55ac68ec87ba4c12bbda44183faf

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetTempPathA
ReadFile
VirtualAlloc
GetFileSize
WriteFile
GetModuleFileNameA
WinExec
Sleep
GetTickCount
VirtualFree
GetCurrentProcess
CloseHandle
GetProcAddress
GetLastError
LoadLibraryA
CreateFileA
GetStringTypeA
RtlUnwind
LCMapStringW
LCMapStringA
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapAlloc
GetProcessHeap
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

advapi32

AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
RegCreateKeyA
RegSetValueExA
RegCloseKey

user32

wsprintfA
MessageBoxW
wvsprintfA

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE