fefc8aecf91b04924e574645259974fa4264a5b27f9e7b22fe2b5678eb47aa92 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fefc8aecf91b04924e574645259974fa4264a5b27f9e7b22fe2b5678eb47aa92
Size

73KB
MD5

a1788abfb099d2b51fcd2c66decfd1dd
SHA1

12c5f6d6059b648132d39a801fe07b0248657f0f
SHA256

fefc8aecf91b04924e574645259974fa4264a5b27f9e7b22fe2b5678eb47aa92
SHA512

4fbb958c4aed477734a7fb437e122340f8faeeeb6aacb1584b69ba458dafa6cdcd3591ed9e47affa5659ecdf0c38145af97849f7d1813b40326fda8903c54f9e
SSDEEP

1536:rRNz/2HW3tEULSQkqtFxUaMoCmaGRY9bZJ1Nwh:/b1dnOQk6FxUaMSPY9bBNw

Score

N/A

Malware Config

Signatures

Files

fefc8aecf91b04924e574645259974fa4264a5b27f9e7b22fe2b5678eb47aa92
.exe windows x86

2882e85f15cfcca4cce38ffa2d3faa83

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileW
ReleaseMutex
GetCurrentThreadId
TlsSetValue
WriteConsoleW
SetCurrentDirectoryW
GetModuleHandleA
GetCommandLineA
GetModuleFileNameW
lstrcatA
VirtualQuery
FormatMessageA
SetThreadPriority
TlsGetValue
VirtualProtect
lstrlenW
GetPrivateProfileIntA
GetFullPathNameW
SetLocaleInfoA

azroles

AzApplicationClose
AzAddPropertyItem
AzApplicationDelete
AzApplicationCreate

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ