784848e449ce84fa8546a41166b1db0ad9c3efd0ba36efc55bd592020dc4cf52 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

784848e449ce84fa8546a41166b1db0ad9c3efd0ba36efc55bd592020dc4cf52
Size

30KB
MD5

a0336b03fe37986fbe60d4c2f4a4d850
SHA1

4ee06bbe4903577f5e95c464fcc2d8b3093c5902
SHA256

784848e449ce84fa8546a41166b1db0ad9c3efd0ba36efc55bd592020dc4cf52
SHA512

bf1e486b9326d8825d1b82f4d46ea357e820ac6ec646efd989b30ba3a117689e1b26a62a2155fc7fff3e82ee8749554bab6a0ee6a41537d7fcd0efefc97a302a
SSDEEP

384:CYPqWBiNlIxWLKb3QBEkSgSz8raFkGYlqdNDjd2ilh:lyaiNlFubABEkSVkXwdNF28

Score

N/A

Malware Config

Signatures

Files

784848e449ce84fa8546a41166b1db0ad9c3efd0ba36efc55bd592020dc4cf52
.exe windows x86

11c1a5f19d65b823b76e5c90d1f2c68e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsGetValue
TlsSetValue
GetPrivateProfileIntA
VirtualQuery
lstrlenW
VirtualProtect
GetFullPathNameW
GetModuleHandleA
SetCurrentDirectoryW
lstrcatA
SetThreadPriority
GetModuleFileNameW
GetCommandLineA
GetCurrentThreadId
FormatMessageA
ReleaseMutex
SetLocaleInfoA
DeleteFileW
WriteConsoleW

azroles

AzApplicationDelete
AzApplicationCreate
AzAddPropertyItem
AzApplicationClose

Sections

.text
Size: 14KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vdata
Size: 1024B - Virtual size: 1008B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ