b291a16c3500c093c5d03c91a777fce1e5dc748a754cf546f2bdf41e640b5f1c | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b291a16c3500c093c5d03c91a777fce1e5dc748a754cf546f2bdf41e640b5f1c
Size

36KB
MD5

381524352df73a684395f99d7fe9ec60
SHA1

fe4e1b2bb6d3ced0b26d7eb5f3c28dd1d0886f76
SHA256

b291a16c3500c093c5d03c91a777fce1e5dc748a754cf546f2bdf41e640b5f1c
SHA512

83d209aaef6fe6025fae73502da71a8fcb18ca8209d31575f7478a824bfb7a57a012e6e40c18eff2e256981c33e5f1934578d31dc6e62adc8b5c6cc4bef90dbe
SSDEEP

768:D+epX5J71sYDx9zmc0yajh3O3qht0veisKl4qR:yyX551jx9zp2mqhSveisKldR

Score

N/A

Malware Config

Signatures

Files

b291a16c3500c093c5d03c91a777fce1e5dc748a754cf546f2bdf41e640b5f1c
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE