7fca8d568ace467ee3668e135a97febf30ae3146e3b3c077bebefb1ad6dae19a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7fca8d568ace467ee3668e135a97febf30ae3146e3b3c077bebefb1ad6dae19a
Size

72KB
MD5

806c44332e651f8bd5b5e46348a831e0
SHA1

817fa2113ba229cf4b118b83ccda0ea472bf9850
SHA256

7fca8d568ace467ee3668e135a97febf30ae3146e3b3c077bebefb1ad6dae19a
SHA512

dd5ab057ba2ce524cbf1f53a14f0b9df8a7343094581ceed32cba85e61e5daceb55a1bfdfdaa50d1c3870b8f0f05c5a89438e2b293c2209bfb452973fec09838
SSDEEP

768:6fQ2k3BqQUkePlu5pADVe61rguZXN8/vM7bkrefb9TqsDYbQ5TM1feJNTr:6vehYluHAD8GXN+I7fJ+aCl1feD

Score

N/A

Malware Config

Signatures

Files

7fca8d568ace467ee3668e135a97febf30ae3146e3b3c077bebefb1ad6dae19a
.exe windows x86

0dea629869ec0fb1dbc593121b850a5f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegCloseKey

shlwapi

SHDeleteKeyA

kernel32

GetStringTypeW
GetStringTypeA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
MultiByteToWideChar
LCMapStringA
LCMapStringW

Sections

.text
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE