dc4daf81075e840bbe3572f4365c18441d675c2703d098692ea05e2259860fc3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dc4daf81075e840bbe3572f4365c18441d675c2703d098692ea05e2259860fc3
Size

176KB
MD5

003217a4c2480d410f99262b6e6d021e
SHA1

0075c3fc12932e61427fc7bf3828874801e5b177
SHA256

dc4daf81075e840bbe3572f4365c18441d675c2703d098692ea05e2259860fc3
SHA512

296ede2809aead68fe5ff99f2a8c47437dd0a2402090542adf134bdd843260abba72d002de684e05ae9ad72c6e9f3cd0f0fe9bc2de66b1635b2fb63640d133c0
SSDEEP

3072:CtVhNoOFk+d7GP2zPIyD7XTJ2EM/35b76faaaaaaaO0zhZ3ZWeoo+nnUGX74Gj+r:IVIw7DJF87YxMGj+yy

Score

N/A

Malware Config

Signatures

Files

dc4daf81075e840bbe3572f4365c18441d675c2703d098692ea05e2259860fc3
.exe windows x86

4fab6fbacefee3724b358e17f92548a7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LoadLibraryA
CloseHandle
ExitProcess
GetCurrentProcess
CreateFileA
LCMapStringA

user32

CharLowerBuffA
CloseWindow
CreateWindowExA
wsprintfA
SetWindowLongA

advapi32

RegEnumValueA
RegCreateKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegSetValueA

Sections

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ