2836bb1f5f45d1a3fe81a088fdcbc752cb1cedd4f1ffc0cd2eac423652ff00db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

2836bb1f5f45d1a3fe81a088fdcbc752cb1cedd4f1ffc0cd2eac423652ff00db
Size

229KB
MD5

a242395d345bb01bfc9a37a7fba97e04
SHA1

60ed24ebd05dc095d5c9f8f461054642a0b74913
SHA256

2836bb1f5f45d1a3fe81a088fdcbc752cb1cedd4f1ffc0cd2eac423652ff00db
SHA512

c30ece604c2c5f866a07d46ff265c42d57876d7a79c7a4826b1a222c423e60d70b5e1dfc52b034c3c3141cdec5a8a352d72217f1ca5bc46e383152f25a1b8bc9
SSDEEP

6144:Yctx3/hNzJFVeb3nWbyrBnVbiwFiQnLGljFppTt:fz/hpJFVQ3WVgtKljP

Score

N/A

Malware Config

Signatures

Files

2836bb1f5f45d1a3fe81a088fdcbc752cb1cedd4f1ffc0cd2eac423652ff00db
.exe windows x86

edb3020c26137665ed4c7b3e14a660ca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
CloseHandle
CreateFileA
LoadLibraryA
LCMapStringA
ExitProcess
GetCurrentProcess

user32

CreateWindowExA
wsprintfA
SetWindowLongA
CharLowerBuffA
CloseWindow

advapi32

RegEnumValueA
RegSetValueA
RegOpenKeyA
RegDeleteValueA
RegCloseKey
RegCreateKeyA
RegQueryValueA
RegDeleteKeyA
RegEnumKeyA

Sections

.text
Size: 159KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ