b0434172de427fcdf17aa25206cce96c111a8c6f9391578311ed28311b67a2bd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

b0434172de427fcdf17aa25206cce96c111a8c6f9391578311ed28311b67a2bd
Size

7KB
MD5

2bd56ba04d353981bbb20d780c3833b0
SHA1

7decb5d9e82eb0bd659994290bbebe4a2544a396
SHA256

b0434172de427fcdf17aa25206cce96c111a8c6f9391578311ed28311b67a2bd
SHA512

801d34bff0e004d0b50e4e49e241090102076bc34dd566d30e689c5a1598ff039954146ec9189d63d0598e705a6ca50cb9c409109f369b90b70f223c23148131
SSDEEP

192:OgVaanrwhjVUARpKnOGBSIPaaQJpPd/6Q/:OgQAgNKOK6HPd/V

Score

N/A

Malware Config

Signatures

Files

b0434172de427fcdf17aa25206cce96c111a8c6f9391578311ed28311b67a2bd
.exe windows x86

de3de5a478e67db624dd5da0e0926b1a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpyA
CloseHandle
lstrcatA
GetModuleFileNameW
CreateEventA
WideCharToMultiByte
HeapAlloc
HeapFree
GetProcessHeap
ExitProcess
GetModuleHandleA
GetCommandLineA
SetEvent
ExitThread
GetProcAddress
CreateThread
Process32First
CreateToolhelp32Snapshot
CompareStringA
WaitForSingleObject
FreeLibrary
Sleep
PulseEvent
RtlUnwind

user32

MsgWaitForMultipleObjects
DestroyWindow
TranslateMessage
CreateWindowExA
PeekMessageA
DispatchMessageA
BeginPaint
ShowWindow

advapi32

RegCloseKey
RegOpenKeyExA
RegQueryValueExA

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE