ad53e86df442254bf4633e521129dcb08a5b460b5dd6aed7167ce8e8549e43dc | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ad53e86df442254bf4633e521129dcb08a5b460b5dd6aed7167ce8e8549e43dc
Size

288KB
MD5

1134e82a037088f56d890a9d478b3061
SHA1

7640f7a717d93a8530e1b9280a83f7973519fec5
SHA256

ad53e86df442254bf4633e521129dcb08a5b460b5dd6aed7167ce8e8549e43dc
SHA512

c322dcd52d2dfcfbe0e0a7a270a07313a1de6223020cb4a92ba17ee9c366dbb08b69ae269a16c96e0700ea517805b55516edd6881948c4e47eb00dcc49f7096e
SSDEEP

3072:hUp80auH+NaKwtPEHzyWPOStaAXYSqJL0Y+imnn91Zx5jr+xzTuDyyAsAHQUq7iy:htNaWPJXqyrhZx5vmwy0AHXoxn9j1se

Score

N/A

Malware Config

Signatures

Files

ad53e86df442254bf4633e521129dcb08a5b460b5dd6aed7167ce8e8549e43dc
.exe windows x86

0d2e4bdccd9c4de6c408fa6ed4f00797

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
LoadLibraryA
GetCurrentProcess
CreateFileA
CloseHandle

user32

wsprintfA
CharLowerBuffA
CloseWindow
CreateWindowExA
SetWindowLongA

advapi32

RegOpenKeyA
RegEnumKeyA
RegSetValueA
RegEnumValueA
RegCloseKey
RegDeleteKeyA
RegCreateKeyA
RegQueryValueA
RegDeleteValueA

Sections

.text
Size: 268KB - Virtual size: 272KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ