4bce341a4ab67bc29d8ac39330537280abf394cec88461477b3fdf3af7fcecb4 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

4bce341a4ab67bc29d8ac39330537280abf394cec88461477b3fdf3af7fcecb4
Size

112KB
MD5

601db1f6c02140bb271b6749adc669c6
SHA1

cc7d81165905d74321efb74fc1bf4741792b037c
SHA256

4bce341a4ab67bc29d8ac39330537280abf394cec88461477b3fdf3af7fcecb4
SHA512

988e0fa06b99268849338aa31918d54a976b2154a84ecfdf5167d063c5317a1336bba977b50da8d129cc0c46ebe2c2e40e94635ba7ef22cf4b56efe35d6555fc
SSDEEP

3072:W8fWrojvy8i2tNHIkSDADeak7dJHB/AdGW:lJvy8ftVSsQLH5Ad7

Score

N/A

Malware Config

Signatures

Files

4bce341a4ab67bc29d8ac39330537280abf394cec88461477b3fdf3af7fcecb4
.exe windows x86

18539b446ef7059e7440cf56cdcecd88

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey

kernel32

GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlushFileBuffers
CloseHandle

Sections

.text
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 72KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ