ca1e475a3bbe1d2f397c57894f3c23395ef629bfac15b362eab88a97eeb85b1a | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ca1e475a3bbe1d2f397c57894f3c23395ef629bfac15b362eab88a97eeb85b1a
Size

815KB
MD5

9690d76a6d5d2959fdb2aa8f82287060
SHA1

8771ab35f9900e77c3ee51e77c9295766820f9ed
SHA256

ca1e475a3bbe1d2f397c57894f3c23395ef629bfac15b362eab88a97eeb85b1a
SHA512

00d27a37f8b6242ceed498e6b6b4ec3ceb1210bbfb07a946d446f3861ce121a8ba1583f84cbf0dc70b1dfdd8a5438ee8380e2943dfbacfc0b71028688b304dfd
SSDEEP

24576:49SCQjPEcr4OxkHNMypStVNl0kXTquKxz1Z:PC0PE8xkXSHDtKxz

Score

N/A

Malware Config

Signatures

Files

ca1e475a3bbe1d2f397c57894f3c23395ef629bfac15b362eab88a97eeb85b1a
.exe windows x86

09bdeb82c1011e146dbd62f32b8a691d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileSize
SetVolumeLabelW
SetEnvironmentVariableA
lstrcpyW
GetConsoleTitleW
DeleteFileA
LeaveCriticalSection
GetPrivateProfileIntW
GetModuleHandleA
GetComputerNameA
GetTickCount
HeapCreate
EnterCriticalSection
SetCurrentDirectoryA
FoldStringW
GetCalendarInfoW
GetConsoleCP
GetCurrentProcess
GetStringTypeA

azroles

AzAddPropertyItem
AzApplicationClose
AzApplicationDelete
AzApplicationCreate

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.sdata
Size: 802KB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ