240e0b94eedcb5e528e0b12c86db1773dc9022bca46345550998fbcb3bdf32cd | Triage

Sharing

Copy URL Twitter E-mail

General

Target

240e0b94eedcb5e528e0b12c86db1773dc9022bca46345550998fbcb3bdf32cd
Size

28KB
MD5

42d88487cc57edcf6f07930a8cd9c0d0
SHA1

4be87aae3de66047d1e43701af4f622191e86eec
SHA256

240e0b94eedcb5e528e0b12c86db1773dc9022bca46345550998fbcb3bdf32cd
SHA512

c221b8d62e1afb61539f7349450c7af0c8fd3fe6308b8f26da6669a0cdd3afca50fc0373c8c5dc53aec1ca094d7f6d9152a982883930be17d974682a327ca476
SSDEEP

384:VKhYQb2SLMInoWiYTvo3DK7Cm6hu3WZkz:VKeQ/LMIoWvTADK76kd

Score

N/A

Malware Config

Signatures

Files

240e0b94eedcb5e528e0b12c86db1773dc9022bca46345550998fbcb3bdf32cd
.exe windows x86

794f720491cfb3bab7d3b7c35e78cd9d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegOpenKeyExA
RegQueryValueExA
RegCloseKey

msvcrt

fread
perror
malloc
fclose
sprintf
free
fopen
strspn
strcspn
fgets
fwrite
getenv
strncmp
_XcptFilter
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
printf
_iob
fprintf
exit
strchr
strrchr
_exit
_strdup
_stat

kernel32

QueryPerformanceFrequency
GetModuleHandleA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
QueryPerformanceCounter

Sections

.text
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE