78f506dd8427b568a7a65caf8736ed24acfbf8eff04bf952dbeb142a2e05a5b4 | Triage

Sharing

General

Target

78f506dd8427b568a7a65caf8736ed24acfbf8eff04bf952dbeb142a2e05a5b4
Size

3KB
MD5

6b70367b3f67cadc66e9d6f4feaa2c10
SHA1

f701417dc09c3b84bed655b40909b0c50173af69
SHA256

78f506dd8427b568a7a65caf8736ed24acfbf8eff04bf952dbeb142a2e05a5b4
SHA512

3299be081ed8261a23807ac994e8838ea6874367730946cab9f1ae17787d3985b1177161e1a8ce6cec0a2956f76eedfb0e1ea5156244116285b358c264900122

Score

N/A

Malware Config

Signatures

Files

78f506dd8427b568a7a65caf8736ed24acfbf8eff04bf952dbeb142a2e05a5b4
.exe windows x86

b6256050feacb53921708912f8250e01

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileA
GetLastError
GetProcAddress
FindClose
LoadLibraryA
Process32Next
GetModuleFileNameA
FindNextFileA
CreateDirectoryA
CloseHandle
CreateThread
lstrcpyA
ExitProcess
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
lstrcatA
CreateEventA
lstrlenA
Sleep
TerminateThread
OpenProcess
SetEvent
WaitForSingleObject
Process32First
FreeLibrary
CreateToolhelp32Snapshot

advapi32

StartServiceCtrlDispatcherA
RegCloseKey
RevertToSelf
SetServiceStatus
ImpersonateLoggedOnUser
RegOpenKeyExA
RegQueryValueExA
RegisterServiceCtrlHandlerA
OpenProcessToken
CreateProcessAsUserA

user32

FindWindowA

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE